Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File:                     oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier:          1/7R+4AEdKxkU/hVOuB1FqtX9frasQaHsimQXOJTt8s=
Subject key identifier:   2C:7D:51:12:BC:1F:96:B1:2C:C0:B5:A8:5A:03:CB:53:E0:FE:A3:31
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer:       /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial:       01962ECF614C73AE0D2B4A51CE46FF782ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number:          015C
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=)
                          2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=)
                          3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: R98T/19CCmeJ0F2eqWiDkydiYk/HPIg1DzfGJNr0am8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:61:4c:73:ae:0d:2b:4a:51:ce:46:ff:78:2e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=2c7d5112bc1f96b12cc0b5a85a03cb53e0fea331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:3b:cc:a5:46:cb:db:10:f3:26:c3:e1:f1:
                    7a:0e:d7:28:23:b5:07:f7:e0:09:90:3e:49:a5:65:
                    72:90:ba:18:cf:36:53:9e:e9:14:3f:a7:fa:8f:5a:
                    73:2d:19:99:67:c1:19:0f:cc:2f:ea:ac:6e:51:86:
                    6d:3c:02:bd:3e:10:e0:71:8c:53:eb:c2:a9:82:37:
                    8f:29:0e:33:b7:7e:3d:1d:87:ff:38:c1:bc:78:03:
                    aa:c0:7b:53:57:80:45:fb:ee:e0:d0:02:80:62:69:
                    e7:c4:80:5e:de:83:33:20:ab:f4:04:3c:28:dc:f4:
                    11:bf:5f:dc:09:b1:be:a6:60:6f:52:25:eb:ee:62:
                    22:bf:4d:36:48:9a:c6:69:0c:f5:bb:9c:f6:8d:a8:
                    31:7f:f9:e8:ae:b3:9c:d1:60:2a:97:ae:02:e7:5f:
                    f8:11:c1:34:ff:d0:61:20:83:0d:1b:f6:c6:2b:1f:
                    7c:d3:04:8c:20:f4:5d:29:64:a9:8a:8f:76:0f:c4:
                    e8:fe:63:f2:43:de:2f:e5:a3:66:95:2e:76:e9:e7:
                    93:cc:36:25:33:df:6d:c6:1e:0e:95:16:a9:42:9b:
                    27:d7:95:0a:14:94:43:c7:96:b3:d5:38:f6:b9:9d:
                    6b:02:0d:f5:73:4b:f0:05:fa:46:05:89:02:2f:70:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:51:12:BC:1F:96:B1:2C:C0:B5:A8:5A:03:CB:53:E0:FE:A3:31
            X509v3 Authority Key Identifier:
                keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:35:cf:60:e3:8e:e3:2d:17:cd:8e:91:d3:2e:9a:2b:bc:f3:
         60:4f:c3:87:30:26:af:3a:53:18:cf:d5:f6:56:62:0f:02:1b:
         2b:81:60:c9:c2:c0:73:f8:d8:a1:88:e5:88:9c:e5:bd:f5:0f:
         77:95:05:34:a7:74:4e:b1:59:66:2a:5f:3a:52:1b:0f:ad:c9:
         91:03:13:0f:f0:6a:6e:eb:a7:cb:d0:a1:52:5f:05:58:9f:b9:
         3c:3e:18:83:45:27:cf:7c:98:42:57:89:92:e7:98:aa:66:f1:
         19:f4:6d:eb:5e:1a:44:cd:ec:ce:9d:52:7f:32:f3:a9:b2:c0:
         5c:77:ac:ae:c2:fd:a2:b8:35:22:dc:21:5d:d7:54:94:69:9f:
         4b:40:f0:e7:9d:fa:0e:ef:99:5f:46:a4:57:e4:f3:84:d1:35:
         62:52:18:e5:43:83:70:91:9b:81:7c:fc:05:1e:07:da:1e:17:
         8f:66:d2:4e:df:88:fb:3c:ef:85:06:15:13:e0:72:9c:6a:72:
         c6:b1:ec:7a:ee:e5:a5:bc:bc:5a:81:7f:6d:a6:61:3b:31:02:
         32:1b:f8:15:5c:4a:6c:f3:69:bc:be:9f:bf:22:78:62:5f:69:
         7d:7a:9e:b2:09:07:d4:ab:05:6b:b8:d6:6b:ef:86:a6:bd:af:
         ea:a1:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----