Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File:                     0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier:          LTb3EAB+M4ZR/KwIh+l93GjjhtUYGb7ivm3QNRqTlz0=
Subject key identifier:   A4:77:0F:67:6F:4B:CD:49:7B:FA:6A:D9:B0:55:01:B8:48:F0:4C:3C
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer:       /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial:       01962FAB8370738B189E3C0DFA76063CDABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number:          1227
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: 3xmqnwaLCH1JKthkifZKPWYH1gXemNM8ttJAt0k+GAo=)
                          2: YV4mxnesnEqsoXEgOeVxrXzaM2I.roa (hash: cQ3+oKEwuuiKGHKe3AeYP28TBOd1C3qmRH0uqKxLNb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:83:70:73:8b:18:9e:3c:0d:fa:76:06:3c:da:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=a4770f676f4bcd497bfa6ad9b05501b848f04c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:6d:a0:99:bd:59:0c:f6:f0:ca:28:94:7a:
                    aa:e4:9f:53:4c:e8:eb:8f:41:3e:38:b3:2e:5d:89:
                    0d:81:8a:6e:54:fd:59:02:27:e4:86:8d:13:ba:63:
                    bb:1b:98:bb:dd:83:f7:31:dd:d8:7f:df:6f:0a:1e:
                    bd:27:dd:78:f7:f5:09:a1:fb:98:9f:c1:c4:00:d2:
                    a3:97:ec:ec:4c:48:0c:53:f5:c8:3e:56:97:8f:a6:
                    b9:de:f3:95:a4:a5:20:f5:7a:92:14:ce:02:27:64:
                    89:64:87:15:ab:d0:81:ac:00:fc:1a:fd:e6:88:57:
                    a1:98:15:c5:88:3d:4a:2d:86:ae:b2:16:68:71:05:
                    19:14:51:ff:7d:81:fd:b6:82:8e:74:66:96:f4:d0:
                    7e:ac:b3:53:fc:1b:75:33:53:08:fb:3d:aa:32:95:
                    15:90:99:c5:c7:69:04:d7:47:f2:90:25:96:88:fd:
                    c4:76:1b:17:dc:d7:d2:c3:f9:b9:79:1b:93:e7:d8:
                    06:7b:7c:96:4b:b4:68:b1:6f:61:9a:60:3f:5e:b7:
                    37:b0:94:5b:dc:10:80:5f:c5:cb:e8:ad:74:2b:5f:
                    0b:43:fb:21:75:2b:fa:24:57:4f:24:94:f9:36:f5:
                    ae:eb:be:c3:f7:26:b2:40:7c:db:06:af:d5:6a:fb:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:77:0F:67:6F:4B:CD:49:7B:FA:6A:D9:B0:55:01:B8:48:F0:4C:3C
            X509v3 Authority Key Identifier:
                keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ab:9d:54:ac:a4:96:60:fb:a1:05:9f:b8:09:9b:66:25:cd:
         b7:04:d9:20:a7:21:f2:2f:a3:2f:88:88:2f:d1:d6:6e:55:17:
         8d:2b:38:ba:70:a3:38:31:b1:a0:db:f3:f5:f3:93:44:b8:cc:
         d0:bf:e7:c5:9a:f5:24:af:d9:5a:2a:eb:59:a4:24:c1:3d:af:
         66:d4:e3:1e:d0:21:65:62:77:1e:7c:39:06:90:40:e5:0a:29:
         c7:26:f5:d9:f3:df:ef:83:8d:05:b5:8b:43:e8:58:62:07:91:
         9b:6e:5a:97:f4:79:d4:b2:51:dd:a3:a5:59:e8:2e:8a:f9:a9:
         71:93:3e:6e:e6:ea:6b:2a:fc:38:b7:63:bb:00:50:f3:03:71:
         8a:fc:fe:56:68:ec:62:07:7a:55:a2:0d:10:e9:86:47:d6:25:
         f7:05:d3:3f:d7:99:32:9f:e3:5e:a8:05:23:8f:4d:06:ac:38:
         8f:5a:75:bc:f9:7a:1d:92:9a:47:fb:e0:83:bb:08:da:c8:74:
         fe:d9:d0:4b:2b:15:6e:52:73:be:b5:9e:55:30:fe:8e:cf:82:
         99:dc:26:ef:43:30:e9:17:35:bb:44:21:3a:25:2b:6b:c4:60:
         09:fb:a8:c3:7d:b7:7c:fe:fc:72:61:fa:86:c0:32:df:67:34:
         db:0c:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----