Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File:                     osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier:          oirukNS4HJpjGjGniJETb6Fmj+XyIqnAoIacfqLqBgU=
Subject key identifier:   2F:28:E6:89:78:B5:61:86:6D:E5:6E:A5:85:4D:2D:33:61:2E:D3:E5
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer:       /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial:       01962F0696BDBCB4905A2E98F9D9F6AC7B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number:          D5
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=)
                          2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: rsrz6nbIZpDvlVUPVoZOZzvhvroeeoVAoh83GteQH0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:96:bd:bc:b4:90:5a:2e:98:f9:d9:f6:ac:7b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=2f28e68978b561866de56ea5854d2d33612ed3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:f3:f3:b2:d3:81:fb:ab:63:ac:22:a2:ed:
                    c2:83:9f:39:ae:dd:44:dd:96:ad:8a:9e:ef:73:db:
                    82:01:f3:2a:76:1a:6f:35:9f:1e:32:25:1c:52:42:
                    9e:75:fa:7b:cd:d8:ae:54:ef:d4:53:cd:13:d3:6d:
                    92:f2:9e:60:b8:f4:52:42:7c:a8:74:1f:1d:5f:98:
                    df:45:cd:eb:6b:8a:25:66:f9:98:0b:c8:1b:72:38:
                    33:e7:0d:5e:22:5e:66:6f:dd:b5:f1:8c:20:9a:7c:
                    97:6a:99:20:aa:40:38:6f:2e:2b:a6:43:06:9c:c6:
                    4e:57:26:73:f6:1d:24:1f:f2:91:b6:19:23:17:40:
                    26:b3:ac:4d:26:77:6c:54:c9:c9:2b:80:fc:e8:83:
                    2e:a5:f5:ef:0f:80:f3:6a:0e:da:bb:47:48:b9:fd:
                    fd:8d:b6:a6:65:b1:90:0d:cd:2f:df:1a:fe:a4:dd:
                    da:ff:4b:bc:af:2a:b2:0d:d7:5e:18:85:46:66:e1:
                    94:e6:25:81:3f:f8:c6:b0:ec:37:00:49:80:37:71:
                    24:c8:09:20:d2:e1:34:fe:e4:58:9e:f4:60:36:9c:
                    70:fc:16:b3:f7:3f:d2:e6:7b:4b:ac:09:d2:ba:56:
                    07:6f:d6:ce:72:1b:df:49:29:0c:bc:6a:65:3a:4b:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:28:E6:89:78:B5:61:86:6D:E5:6E:A5:85:4D:2D:33:61:2E:D3:E5
            X509v3 Authority Key Identifier:
                keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:88:1c:65:73:90:93:7a:44:37:ec:95:33:82:c0:21:4c:7a:
         ee:13:97:83:f1:81:2d:8d:ad:1e:f1:4c:a4:c3:ab:47:19:d8:
         7e:16:53:6a:85:b7:32:fc:7c:9d:38:f5:88:ae:6e:a0:1f:dd:
         44:71:4e:5d:55:03:39:65:95:d3:80:9f:53:12:52:3e:e7:c6:
         f3:09:7d:42:c0:2a:14:24:54:7e:9d:04:a3:19:20:b3:f6:eb:
         40:73:00:a7:d7:5f:37:b9:f7:4f:07:43:99:17:ad:35:b7:1d:
         85:03:e7:f2:37:83:f7:04:f5:31:65:d2:fb:f1:60:53:9b:f2:
         99:7b:a5:7c:9b:5e:22:56:3a:f0:95:af:90:0a:cc:3d:2f:f2:
         54:7d:aa:c2:96:86:3e:5b:58:d3:9e:ec:54:43:32:f3:38:d3:
         90:ed:f6:46:34:02:8a:68:ea:d0:79:f4:49:c8:90:0f:de:25:
         d5:6e:e3:a8:88:65:12:a7:19:9d:96:4e:46:a5:c6:e7:cf:a0:
         85:5b:43:3d:3a:8c:d9:be:6c:2a:53:88:7b:1b:11:92:5c:ff:
         91:5e:2d:48:0a:95:71:39:a5:9f:89:f9:7e:ef:41:2a:a9:e3:
         6f:16:ed:1a:98:44:27:0a:1c:43:a6:de:1e:3f:3c:a9:02:4a:
         c7:f7:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----