Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File:                     T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier:          XBhBSLNx1/48CfBGg7pXMScUUOZvcftDp33gKr1A3Hg=
Subject key identifier:   9C:FE:B0:D4:6F:88:63:64:1D:C4:E3:23:E0:0E:DD:85:78:FB:DC:DD
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer:       /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial:       01962F7457D90E94E4AEC137AD2998CEC026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number:          1263
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: NEvs3kU73ikls76SjoPjcimtFg+V+d/s2+7tHhbvvzc=)
                          2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:57:d9:0e:94:e4:ae:c1:37:ad:29:98:ce:c0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=9cfeb0d46f8863641dc4e323e00edd8578fbdcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:87:68:f3:81:3a:c5:3d:69:8c:a5:bb:82:
                    1d:e2:e8:e9:90:ed:d7:e2:fd:06:73:f1:0d:f9:07:
                    ce:86:5f:b4:9e:18:cb:36:94:0f:d5:77:86:1e:2e:
                    e7:e8:fc:ca:13:9a:eb:19:fc:53:c0:cb:2b:18:2a:
                    44:dc:8e:34:c7:c7:cb:20:4e:39:51:ba:3e:57:e8:
                    5a:9d:34:e9:7a:38:6e:d8:2f:85:ca:7a:40:ab:18:
                    f4:31:ea:2e:3d:89:50:4a:45:d8:c8:2b:21:91:1b:
                    a8:a7:69:e6:f1:fc:40:7b:88:84:3a:d2:be:98:3a:
                    00:34:ee:35:f8:35:37:5f:cf:d2:c4:3a:f8:29:c0:
                    93:ea:92:a7:09:05:f2:a8:2a:4c:84:06:65:84:80:
                    35:91:2b:45:72:47:aa:13:82:64:3f:a6:0b:4f:d2:
                    af:db:2d:1d:66:dd:b3:d0:fd:2a:cd:64:9c:7e:ea:
                    95:7c:d5:e5:5c:ed:d8:37:84:dc:4e:f7:21:7d:d4:
                    96:ba:f1:7d:a6:85:22:99:f0:97:17:11:d4:60:fe:
                    7a:0c:71:12:19:51:49:9e:48:2c:62:22:8e:33:88:
                    52:27:87:23:4e:52:01:35:a2:1a:e7:24:0e:ed:b3:
                    7d:cf:30:04:20:68:9b:c1:0f:05:6f:04:a0:e5:fc:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FE:B0:D4:6F:88:63:64:1D:C4:E3:23:E0:0E:DD:85:78:FB:DC:DD
            X509v3 Authority Key Identifier:
                keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:8f:a2:d3:c9:a5:8a:7e:60:90:cd:49:d1:8d:45:f3:a5:
         b8:de:bf:1e:fc:28:f4:ec:31:49:b0:ba:d9:e9:5e:d0:e6:77:
         1b:6b:d8:12:f1:25:7c:c0:36:0d:91:53:e2:05:eb:25:28:03:
         f4:28:1f:01:f7:c0:17:32:6f:d6:58:bb:33:b5:26:04:9b:af:
         5c:b7:fd:41:b6:1e:5b:cb:2a:05:3c:59:95:c4:70:ae:08:52:
         98:8a:70:4b:0e:26:0c:b9:de:7b:4c:1c:3f:f1:68:f4:94:76:
         f7:14:01:04:1d:1e:5d:57:ae:ea:0d:fb:71:b0:92:0b:e2:1a:
         67:9f:af:ea:3d:93:f9:4c:7c:d4:d3:dc:e5:46:4c:2b:58:ce:
         42:4f:d3:e3:cd:e6:99:37:41:03:ca:87:d0:0f:78:17:bd:e9:
         82:46:d8:85:a9:ff:18:c8:f8:79:42:82:a1:32:14:57:d4:df:
         d1:65:8e:4f:47:df:2c:ca:84:05:f3:0f:42:62:6f:c6:c2:09:
         ba:3a:06:b0:61:8a:83:46:10:ad:ba:fb:c9:0c:42:ab:2a:0e:
         eb:43:4a:0a:27:6a:72:c3:bf:89:55:24:50:fc:00:41:53:fd:
         9f:02:e2:21:47:df:61:0c:1c:55:c6:96:d2:8e:f9:f9:38:e6:
         5e:1f:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----