Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File:                     oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier:          3iuAiFJfhxExMGTycJoydT6eGqsIWHzFJzQmrCG0gnk=
Subject key identifier:   98:EC:8A:95:BE:77:ED:A8:28:7D:3E:8D:7D:67:28:6E:B1:DF:51:0B
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer:       /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial:       01962F06F38FA9173505B5FD9B9D219D15F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number:          0323
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
                          2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
                          3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
                          4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: miWDhQoPQmFkxUNY76L5Xzaetfq6ZJcMHGlvZ3BAaXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:8f:a9:17:35:05:b5:fd:9b:9d:21:9d:15:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=98ec8a95be77eda8287d3e8d7d67286eb1df510b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:49:8d:0b:af:5e:3e:22:0c:0c:ba:d6:a7:
                    0c:93:b7:aa:df:fd:ff:98:77:11:51:27:9a:8b:e8:
                    5b:5c:e7:ce:07:bc:9d:7a:c8:e3:84:61:70:5c:47:
                    31:42:cc:67:df:ba:1f:ae:57:17:1f:e7:15:fd:c8:
                    ef:e1:f2:57:c1:bb:1a:fd:3b:b1:53:e8:8e:ce:db:
                    b5:91:bd:97:c6:6e:3f:2e:74:1d:39:00:b3:fe:5b:
                    92:7f:41:db:ba:db:99:9d:3f:36:29:1a:9b:1a:5a:
                    63:9d:98:25:0c:77:04:d4:02:de:6a:c6:a8:14:ef:
                    9f:fe:ac:46:01:da:ef:ce:ad:37:e2:79:ae:a7:63:
                    32:e6:34:70:ea:5d:43:9c:e4:ee:08:f4:6e:e8:ac:
                    89:9a:92:24:a0:4d:1d:aa:71:54:b3:1e:6a:92:08:
                    24:4d:ef:46:2e:3b:e3:06:90:fd:39:a1:d2:3d:83:
                    15:cb:91:bd:10:2a:a0:85:15:de:09:13:14:c6:ba:
                    2b:5b:a1:1c:b8:91:7e:d1:48:42:2a:e5:6a:59:e0:
                    24:e5:d7:de:b2:ad:50:3b:7f:82:c7:07:a8:7c:13:
                    80:ef:c5:db:dc:c4:7a:ba:81:2e:92:b2:2e:1c:b0:
                    e1:0a:2e:4c:97:d5:3a:cf:70:37:ef:f3:b4:6b:ef:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EC:8A:95:BE:77:ED:A8:28:7D:3E:8D:7D:67:28:6E:B1:DF:51:0B
            X509v3 Authority Key Identifier:
                keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:07:88:16:e1:a8:51:21:da:03:e8:e6:76:ae:54:ee:70:
         d1:cb:42:12:db:38:17:0d:c7:dc:0e:f7:15:57:1e:7b:50:91:
         a5:66:4d:a7:a4:19:b8:52:e6:87:3f:94:d4:f3:24:e8:0b:63:
         31:00:c5:78:32:c7:b9:a7:8e:f8:35:9e:7a:b4:99:30:72:3a:
         df:43:04:fc:88:91:bf:f8:ab:76:c8:aa:31:42:d9:05:1d:5d:
         23:4f:b7:10:f1:8d:b6:29:f0:ff:1f:7b:ef:a1:7b:63:dd:50:
         72:c5:cd:96:c7:a9:fd:5a:1c:71:56:55:54:f8:3f:14:ac:ee:
         4f:dc:54:f5:0a:63:f9:8f:0e:5b:7c:af:74:0c:e4:05:f7:f1:
         4f:61:01:bb:81:ee:ee:62:13:5d:d2:49:3f:4a:b9:f1:49:ed:
         fd:98:71:e0:ea:80:9b:5c:aa:c6:8f:ea:fc:87:59:66:38:3f:
         da:4d:60:10:c6:de:c2:78:31:6e:64:43:25:c7:18:ab:11:46:
         b2:a0:fe:38:36:9a:db:74:20:95:57:f1:b1:b8:45:04:48:74:
         e2:1d:ca:26:20:88:70:26:96:d2:d0:bf:43:b4:81:15:a4:e9:
         ba:53:ad:40:69:40:95:d5:3f:27:ae:90:ab:c9:7b:70:d2:9c:
         a4:02:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----