Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File:                     oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier:          gKiiBSZ5P/8HR352hGqj7bswQBQ2Fq0BMr0z3Z5Ef+U=
Subject key identifier:   CB:DA:50:39:DC:EC:5B:2E:E1:AB:D6:CC:67:FA:43:EA:04:8A:9F:CA
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer:       /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial:       01962DF3C6386BA07A9F2545C0610D8FE0EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: PKIB0NDZswSqU-d6MbwA9JZfGMk.roa (hash: OewUcdT2Rw4jRK7U2p1ljpQHoVklDy1bcntiR+wXIOw=)
                          2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: /V5Fq7e7DlMTeQ9kpHNvf1eukWe5exhpVneqoE+7JdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c6:38:6b:a0:7a:9f:25:45:c0:61:0d:8f:e0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=cbda5039dcec5b2ee1abd6cc67fa43ea048a9fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:1c:5f:83:03:e0:11:84:46:d8:b5:98:44:
                    3d:c7:85:4c:33:c9:84:80:27:5e:74:8d:be:18:dd:
                    fe:67:c2:97:2b:3d:70:7b:9a:01:ed:ca:0e:95:9a:
                    d6:22:28:d6:b2:c7:6c:25:c9:ac:16:4b:89:8d:6c:
                    f3:ed:c0:ca:4b:34:2e:4e:91:57:03:2c:1c:ce:6e:
                    64:ab:5f:ea:4c:fe:0a:4a:75:42:96:98:83:19:3d:
                    3d:8b:96:3a:2c:de:ff:77:df:a9:97:ae:a8:87:42:
                    5a:6e:3b:80:f8:0f:9e:d4:c1:0c:c1:fb:a6:27:b2:
                    f6:6a:3c:1e:4d:b3:34:c7:20:45:69:36:96:7f:ab:
                    2f:9a:ef:77:b8:43:c7:d9:78:49:4d:12:80:c3:54:
                    36:a6:30:82:ef:d7:c2:18:ba:3f:f2:ab:4b:22:1c:
                    35:8e:a0:7b:d5:b6:91:aa:67:e2:2c:54:f3:78:34:
                    d2:25:29:bc:9a:b1:19:dd:16:98:45:50:ca:5f:f1:
                    26:88:b8:7e:e0:a3:58:26:60:bb:66:39:31:0f:86:
                    e0:80:9e:32:83:f0:9c:88:eb:2e:35:e9:81:bc:a2:
                    cd:75:8e:d7:60:51:21:67:3e:4a:a5:a9:27:be:72:
                    17:ee:42:e3:53:13:78:55:a5:aa:80:4f:e2:ef:e9:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DA:50:39:DC:EC:5B:2E:E1:AB:D6:CC:67:FA:43:EA:04:8A:9F:CA
            X509v3 Authority Key Identifier:
                keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9d:10:c7:ae:e8:f0:47:58:6c:ac:c9:2d:67:fc:41:84:54:
         1b:3d:b0:42:9a:fc:36:f1:7e:c1:62:14:4e:fd:f7:51:6f:8b:
         a1:2e:f3:82:b4:f4:81:fe:20:50:e2:c9:77:cd:23:bb:5f:fe:
         d9:13:09:18:31:11:d5:74:08:a5:89:60:4b:97:44:46:84:f3:
         5f:c6:df:03:06:c8:22:18:ca:ef:25:7c:87:e8:93:24:8c:4e:
         24:9f:45:45:de:72:ae:71:85:b0:11:df:39:b8:c8:8a:64:3a:
         95:18:03:18:a4:2e:b6:f6:f6:ea:b9:d2:48:2a:26:d6:3a:c5:
         21:d2:3a:86:12:b2:13:2b:15:57:05:cb:c0:f0:23:ad:7d:e3:
         b3:d8:5d:f0:b5:fb:1b:f6:8a:6d:ab:ee:ed:9a:cf:47:2a:62:
         06:fc:02:15:7a:8a:1f:f4:d9:86:d7:33:78:1b:0b:e5:12:f3:
         01:3e:1b:16:a9:0b:a6:28:b4:37:61:57:74:ad:02:f0:57:ee:
         4b:e9:19:e2:48:c9:07:85:19:98:f3:40:29:e4:2d:5e:0b:dd:
         7d:69:e4:58:79:fe:ad:c2:c2:17:0f:55:67:64:02:b2:ef:0a:
         16:7f:0e:14:91:47:b1:be:31:10:87:29:a7:1f:c7:0a:00:5d:
         71:73:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----