Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File:                     ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier:          GR5ZfJMDs1Dnco+1l+Wet0Vl0vZa2KWYHt3NuWzz91g=
Subject key identifier:   62:D9:F2:03:53:3A:E0:CC:AF:04:04:B3:55:82:08:01:D7:66:2C:06
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer:       /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial:       01962E2B44D03BF086626812186DCC3E4112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
                          2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
                          3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: 4WXCwjM/ExCL761jyz5X1Uiux3XFEeMKWKRXTu267LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:44:d0:3b:f0:86:62:68:12:18:6d:cc:3e:41:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=62d9f203533ae0ccaf0404b355820801d7662c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:4a:6d:eb:5a:ce:8e:4f:92:b4:7b:d5:f8:
                    58:35:4d:91:7b:34:66:5b:fd:35:6c:63:82:97:a8:
                    01:72:15:25:e7:ce:45:40:70:04:ca:5c:20:54:fe:
                    ce:ae:06:28:6d:50:a9:45:a9:f1:bd:27:6c:3f:3e:
                    0f:40:97:53:ee:52:61:90:82:85:f4:9d:c3:41:5b:
                    7d:0d:5f:9c:b5:34:ef:5b:f5:ff:13:6f:71:a6:15:
                    42:be:b4:11:01:dc:84:5f:a6:54:bd:8a:cd:1e:cc:
                    e2:b9:70:d0:bd:59:78:55:9c:9f:84:5f:2e:20:08:
                    c0:3c:a2:23:4e:3f:63:3a:42:e6:b1:9f:66:d1:c9:
                    f9:4c:50:53:3a:1b:4d:6c:5d:25:e7:81:90:19:04:
                    84:c3:ee:1e:66:f2:78:56:17:95:0f:90:8d:d7:68:
                    97:2d:d0:1e:6c:5d:42:4d:34:f3:8c:64:3e:05:27:
                    66:62:27:82:4b:91:67:56:5e:6b:9f:2b:90:52:7a:
                    f7:fe:24:b8:5d:4c:ea:4e:ab:f7:74:a6:6f:47:94:
                    7b:ea:a6:85:f8:fe:00:c2:a1:96:67:56:c2:41:88:
                    4f:a7:05:53:be:e6:82:8b:41:94:d0:f1:65:95:61:
                    f7:27:ec:af:a0:7a:bf:74:24:94:80:2c:94:8b:2c:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D9:F2:03:53:3A:E0:CC:AF:04:04:B3:55:82:08:01:D7:66:2C:06
            X509v3 Authority Key Identifier:
                keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:7e:c1:23:58:87:bd:87:3b:77:67:fb:a9:81:ba:c9:0a:0d:
         a2:33:fb:d4:f6:4a:cd:43:9e:ca:36:49:1b:11:95:47:c9:72:
         49:9d:55:33:7f:37:19:8c:a8:9d:ec:99:1f:c4:20:12:93:ea:
         14:eb:83:4a:63:11:be:98:60:80:08:eb:c2:e7:29:8c:cd:5f:
         40:41:d8:d4:a8:a6:bb:3e:02:f0:f8:66:d4:0b:9f:01:a0:58:
         71:41:c0:c0:52:f0:5a:7f:3f:92:e4:7d:00:dc:c0:cf:8a:eb:
         54:62:c1:47:c3:fb:d6:97:c9:91:b0:68:c9:eb:de:0f:93:48:
         b7:a5:1d:27:3e:27:56:f1:17:55:8c:98:94:ce:5e:cb:a7:1b:
         d8:a4:8e:33:2a:d8:2a:3e:b4:7c:0e:c7:a0:b8:23:d3:01:b7:
         0c:1b:e0:29:25:e2:de:17:b8:e5:bd:39:89:3b:55:5d:a7:b0:
         86:15:80:19:3e:9c:bd:63:4c:33:94:f6:e7:eb:94:b8:a1:ac:
         70:63:74:fb:cf:31:fd:2a:0a:04:e0:0d:ae:4f:8b:d6:85:c6:
         3f:54:3e:0f:d4:0b:de:a2:9f:ea:83:6e:ff:3a:7c:df:57:f2:
         2b:1d:70:da:f9:d0:c2:49:5d:ae:2a:89:c3:6f:be:4d:90:e1:
         5e:30:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----