Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File:                     oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier:          RSiJQ/b1Oda3II/9XT1JfaOka3ju04L5JnM4h5skMTs=
Subject key identifier:   E6:04:68:12:AE:36:1E:51:8A:38:EB:A2:72:8C:FD:0C:71:68:E9:B8
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer:       /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial:       01962ECFA727323372A21AFE7A2A551FCDDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: e7noKfAbhqxWKb_WV7vm2kP8eVk.roa (hash: hWpS0joUiL0TvCY+c8SO6LZjwhfmBfd8ch+Qp+RpKHk=)
                          2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: CiEfJIHeR156V9x2YZIyXWwYTp/vhLgoZ3bwGE14scQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a7:27:32:33:72:a2:1a:fe:7a:2a:55:1f:cd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=e6046812ae361e518a38eba2728cfd0c7168e9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:94:a3:46:ff:ba:40:33:a3:4b:88:d5:e0:
                    47:04:5c:11:9d:f1:d9:de:e4:d7:ee:4f:93:a1:ab:
                    b0:6e:3a:64:e3:e4:0c:c5:b5:51:f5:64:5d:fd:bd:
                    0e:ab:25:32:70:b9:1a:b2:f9:e9:17:58:63:51:f2:
                    78:de:13:81:f1:a1:85:b0:82:40:d8:e7:5f:47:4a:
                    d2:64:8a:0e:90:29:8e:1a:86:05:59:14:15:b9:99:
                    1a:c0:73:39:de:4e:a4:1b:cf:94:b0:f1:84:cf:ba:
                    f8:78:a3:7b:02:63:f6:9b:f3:9f:4b:86:37:7c:d4:
                    dd:91:71:56:eb:00:a1:d6:a7:4a:01:a8:ac:77:ed:
                    29:3a:e2:da:58:74:41:71:81:be:bf:4b:c0:90:5e:
                    6e:cd:ed:6f:59:e9:6e:1b:16:52:ca:32:6e:08:ef:
                    6f:fc:58:75:e1:c6:62:eb:2c:c3:25:1d:0e:02:9a:
                    d2:54:54:48:3c:c2:c7:0c:1b:93:a7:03:4a:9e:b5:
                    4d:cb:a6:4e:df:34:00:4d:90:80:d6:04:fb:b1:20:
                    e3:ac:02:52:76:40:63:b4:06:e0:e5:59:5e:46:46:
                    38:40:4d:0b:48:20:54:87:19:4b:08:15:62:b8:e8:
                    95:a5:18:57:28:8d:d0:49:68:b9:31:e6:c4:0f:ac:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:68:12:AE:36:1E:51:8A:38:EB:A2:72:8C:FD:0C:71:68:E9:B8
            X509v3 Authority Key Identifier:
                keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:1b:24:6d:26:32:22:63:c2:97:cc:1f:8f:49:c4:44:3d:
         73:ce:02:d2:42:c3:1b:1d:e5:21:49:34:af:0d:c5:d7:d9:d1:
         fe:22:16:e4:c0:b9:21:51:6f:06:59:59:89:c6:44:3f:79:d8:
         39:52:66:ad:27:1f:70:1a:28:f6:b1:84:9b:d8:72:46:55:c2:
         21:f6:eb:af:33:18:7d:a7:84:ed:ef:76:d8:95:de:df:e0:7d:
         f9:8a:2c:6c:c6:27:34:16:d8:64:4e:84:59:99:92:b1:d2:e0:
         38:b8:9f:53:3d:c7:65:2a:76:62:9f:a9:95:25:58:f0:91:27:
         f2:96:bc:49:c6:f0:f4:63:ef:6d:ae:ad:42:51:c5:64:d4:ff:
         57:a8:a7:cf:f0:d8:0c:10:f2:0b:c1:b7:e7:e2:ac:e8:f9:f0:
         d9:dc:41:fa:7b:b1:b6:9a:db:2a:9d:71:98:8a:ee:4f:da:ef:
         52:92:10:19:7d:78:3d:9a:b1:d1:95:c6:24:a0:12:76:4e:d1:
         a3:52:e5:f9:43:c3:e8:1f:62:ae:f3:fc:42:0a:7b:d3:ef:3a:
         8c:70:96:75:5c:11:ae:26:ec:56:86:8f:68:9a:8e:48:8f:6a:
         b4:61:14:67:fc:52:14:83:60:9d:b7:69:b5:6d:96:00:ba:64:
         15:43:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----