Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File:                     oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier:          hhJ5L9FkCbLPQyBIBwt4QSL/0DLIwn/8XqG37HEMXLQ=
Subject key identifier:   E1:3F:75:23:9D:28:62:55:9B:A8:4D:3F:EB:AE:7C:BC:C8:FD:D5:7F
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer:       /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial:       01962ECF7E55EE06B53D98F6B4405E5D83AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
                          2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: u5A45Yi77BJqgBxzRhdP8YBy4OVnYg8dh/cWeN0x3aI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7e:55:ee:06:b5:3d:98:f6:b4:40:5e:5d:83:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=e13f75239d2862559ba84d3febae7cbcc8fdd57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:ca:3b:35:2e:f5:79:ca:c1:e1:dc:69:13:
                    9e:d7:27:00:fc:b4:ee:dd:ac:bf:71:12:73:fe:79:
                    09:5d:46:ee:16:cd:95:48:cc:eb:54:c2:7b:3f:89:
                    d0:d5:ed:2d:65:5e:bc:f7:21:08:e9:20:29:4f:0d:
                    43:cc:bd:cc:9d:55:42:8c:de:1d:dc:25:3b:c0:be:
                    3d:26:d2:f7:3f:4b:46:4f:a9:a7:da:02:67:49:8e:
                    2c:f9:07:2b:e4:83:b4:72:99:45:a9:c7:88:28:d3:
                    0d:9c:7b:a0:b5:12:fa:9f:83:45:f4:0d:53:cb:4b:
                    86:36:6e:31:eb:7d:44:3c:c9:c2:7b:e3:8e:71:65:
                    dc:08:d0:44:dc:f2:86:62:3b:96:8f:c1:c1:4f:54:
                    98:5b:e2:62:54:69:0e:84:5c:f5:c6:6a:d2:e8:e8:
                    61:b0:c7:0f:5d:aa:30:c2:99:8d:bf:27:34:36:2e:
                    08:fd:1e:5d:5d:00:09:d2:43:f5:f7:d6:28:0c:e7:
                    64:8e:63:18:1e:01:18:e4:f0:19:a8:6a:8b:ce:91:
                    a6:ad:fd:e1:b0:cd:40:61:d9:46:64:75:0e:7a:43:
                    9e:65:1b:22:47:25:56:5d:d1:53:72:4a:02:08:ca:
                    6a:6e:48:15:17:01:37:34:e9:f6:8f:7a:21:ce:7a:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3F:75:23:9D:28:62:55:9B:A8:4D:3F:EB:AE:7C:BC:C8:FD:D5:7F
            X509v3 Authority Key Identifier:
                keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:96:38:bd:d6:cc:c6:12:bc:7a:44:5c:95:8b:a6:ac:50:43:
         5e:0f:ab:8b:b8:92:d8:65:67:75:30:1d:33:f7:4c:51:2a:1e:
         94:13:9d:f0:33:f9:f3:54:45:c2:2e:b1:92:37:f4:e2:14:58:
         42:cf:07:a7:d0:39:54:79:a8:fa:42:15:73:61:3e:b8:49:8a:
         b8:cb:be:43:41:13:02:5e:84:0f:0f:58:83:7a:5d:a4:21:38:
         40:c1:22:86:c7:21:4d:57:94:73:76:14:6d:ca:87:f5:63:43:
         8e:5b:3a:ee:16:33:23:b9:49:e1:09:00:32:c9:ad:c2:54:4b:
         31:83:b2:ae:3b:e8:f3:00:79:e9:57:73:f6:80:95:8b:2c:42:
         2d:0c:71:77:74:75:4d:e5:67:d0:30:17:93:2a:9a:f6:71:07:
         db:f5:56:83:8b:8b:06:db:fe:d8:56:60:f7:98:a9:91:88:e0:
         0c:bb:dc:8a:86:00:4d:0a:03:1b:8f:14:30:88:d3:10:8b:94:
         64:ee:38:1e:f8:50:e7:95:fe:5a:2f:e4:bd:fc:f7:31:c4:e1:
         8e:ab:08:7c:2d:53:93:57:8b:37:4d:ba:69:2d:d2:16:98:be:
         a3:28:03:0d:a5:0a:bd:bf:3d:62:20:ef:b8:72:b1:fa:9e:32:
         f9:8b:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----