Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File:                     oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier:          ZTZ4UibrqYcPeviz4EwGb0YHrLg9XT0b2soVQusblEk=
Subject key identifier:   91:AC:B1:83:4E:ED:4C:1C:5A:F2:69:13:18:9C:20:E9:C0:B3:AA:49
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer:       /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial:       01962E2B27810BD971CFEE46553C4E7D53C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: APsUsrAn96ow-lwQ45SmC1gQegc.roa (hash: t3tVyfgAERiYm7/hAZrrvXacDVWFUchPqKdL2GXQLe4=)
                          2: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: Xu6ij9YfeQOvKCw8B324NjLzSm9mRO3tsC5bUPDm2Bg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:27:81:0b:d9:71:cf:ee:46:55:3c:4e:7d:53:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=91acb1834eed4c1c5af26913189c20e9c0b3aa49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:5f:7b:12:a9:6b:18:a7:5e:82:35:7b:fb:
                    5e:a0:5d:9a:3f:8c:a2:31:aa:33:c5:cc:f9:7f:a4:
                    0c:2a:e8:d9:00:05:52:a7:20:d6:30:2b:ba:e4:ff:
                    0f:04:a3:93:7d:81:d6:68:71:22:26:47:ab:ac:5a:
                    95:02:3f:7c:75:a8:a6:2b:31:d3:cf:e5:06:1b:99:
                    16:28:02:8e:85:82:84:cc:6b:7f:7c:48:e9:d6:96:
                    c2:2b:52:35:e1:f1:2b:6d:ed:d7:f5:32:a5:79:3a:
                    6d:cf:00:3c:3a:5d:c6:a8:98:88:ff:94:b7:02:72:
                    3a:fe:89:3c:c0:84:8e:b6:0b:fe:d3:eb:59:26:51:
                    6b:c7:96:9c:fb:28:fd:12:ac:8b:80:52:3b:d1:af:
                    86:b8:e9:37:3b:eb:df:15:2d:62:df:88:b9:fa:e8:
                    30:ea:55:2b:8e:74:06:2d:8c:21:56:35:f5:2b:8d:
                    c6:a6:05:c7:e6:25:14:82:0f:d9:3c:9f:cc:b4:12:
                    f4:da:ce:6a:d6:53:3d:71:10:63:fd:ed:18:1c:ce:
                    60:40:f1:f8:99:1d:49:6f:bf:b1:1b:d0:1f:99:e3:
                    ec:53:a7:6a:1f:af:07:b5:43:5d:5a:e9:de:ab:83:
                    e7:76:c8:61:aa:52:7a:a7:0f:af:70:41:d6:87:3e:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AC:B1:83:4E:ED:4C:1C:5A:F2:69:13:18:9C:20:E9:C0:B3:AA:49
            X509v3 Authority Key Identifier:
                keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:59:1a:bb:48:e1:4a:92:0f:22:a3:c1:5d:99:3c:53:b7:3d:
         8a:f8:5c:91:62:dd:cf:dc:25:6f:0c:d6:f2:3d:2d:12:03:53:
         f5:37:f8:cc:02:d1:f8:cd:72:a6:79:3f:9d:ec:1a:e6:12:51:
         32:a4:f5:de:74:06:7b:91:89:e2:57:f6:02:71:c0:67:b5:52:
         6b:3e:c1:6a:7c:30:f0:69:d7:68:4d:66:54:7a:99:9e:9f:c2:
         6c:ef:ad:09:e9:70:fe:29:53:73:8d:1d:85:46:65:5d:d1:77:
         fe:4a:4b:3e:41:6e:2e:31:a2:4d:f3:ce:af:9c:a5:fa:24:01:
         75:d0:da:7c:c1:d1:35:3d:1e:8f:01:6b:1f:f8:92:29:a6:f3:
         72:ab:a6:47:8a:c2:9e:9d:61:39:e1:2c:2d:53:a0:d3:19:0a:
         09:70:fe:79:60:a8:4a:ff:0f:1a:97:8d:ce:bb:01:1e:e0:32:
         a7:a7:d0:e7:4a:5d:a8:b0:7a:0d:c0:7e:59:9e:c8:ca:5e:23:
         35:07:2a:ab:b6:ae:f3:ce:94:67:d2:8b:98:ae:39:0e:ed:e8:
         02:1c:23:fe:25:15:fe:b2:a6:36:23:7a:80:85:44:52:3c:f8:
         57:53:ae:73:22:5c:80:c3:f5:18:bb:a2:06:8c:7f:0e:f5:4d:
         d1:ec:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----