Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File:                     iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier:          UmRUd8lPlM/7cScrLEeG0VLwm8PSGSuIYS0ZubE7uE0=
Subject key identifier:   31:93:46:41:84:E7:A0:A8:3F:C2:B6:1E:29:FB:1D:7A:44:E2:E2:2B
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer:       /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial:       01962F06C640E3A72A4A0F945516C75806DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number:          0E18
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
                          2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
                          3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: D441MElsaNQRBrwptkMsNHIIdVNTmSYJiStDuYwtIlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:40:e3:a7:2a:4a:0f:94:55:16:c7:58:06:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=3193464184e7a0a83fc2b61e29fb1d7a44e2e22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:fc:5d:08:71:12:05:f0:66:dd:c7:6a:99:
                    d0:c7:50:c1:17:a7:43:65:b7:3f:24:0a:1d:8a:4c:
                    b9:23:7e:8d:56:c5:7c:78:27:33:6a:a3:e7:50:03:
                    04:6e:2c:c3:15:3c:9c:13:e6:d4:7a:65:14:86:b7:
                    90:d3:25:74:64:97:ba:4e:fa:35:0c:1e:61:6f:bb:
                    f0:a2:67:d2:7e:fc:94:dc:8f:c1:1b:aa:2d:1c:d2:
                    7b:7d:77:62:5c:ea:c5:5f:53:a7:23:d4:28:da:19:
                    75:4d:db:84:a6:b7:2d:2e:b4:85:e8:dc:d3:f8:9a:
                    94:73:d1:ac:ed:ce:ed:f2:cb:8a:06:9c:fd:cf:b1:
                    2e:78:4e:47:e0:fc:46:d8:28:d3:15:50:80:5b:2c:
                    d3:a7:3a:8b:dc:54:93:a5:4b:8e:3e:e9:24:57:4a:
                    1a:59:16:4e:ea:9a:28:b4:5b:d5:ad:49:61:ab:19:
                    1a:f9:a0:45:8d:62:60:17:e4:ac:e3:af:af:00:f9:
                    01:2c:6a:80:fa:c6:24:64:17:87:66:fe:37:34:dc:
                    df:ae:7d:28:44:d9:ed:f5:15:84:90:d4:77:04:76:
                    e2:94:ec:0a:c5:23:66:93:1d:5a:d6:97:bb:12:6b:
                    4f:37:ca:71:13:8e:a9:cb:f4:98:b6:f2:de:23:08:
                    df:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:93:46:41:84:E7:A0:A8:3F:C2:B6:1E:29:FB:1D:7A:44:E2:E2:2B
            X509v3 Authority Key Identifier:
                keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:73:a0:f4:e9:4c:92:6c:56:c0:4f:14:5a:fa:0e:82:70:ae:
         b8:33:8b:cb:40:d2:0d:30:42:d2:e3:66:91:a4:12:0d:cc:fe:
         c2:92:9a:32:44:3c:ba:88:dc:b8:7e:1f:8f:c6:99:ec:e3:ac:
         64:1a:95:1c:c4:13:7f:71:d6:3c:07:68:3b:04:2f:ae:ae:90:
         3f:fa:b0:11:81:10:3d:cb:28:bb:4a:46:0d:5c:29:67:e1:e4:
         74:4e:3f:ef:07:e6:68:42:2d:4e:65:a8:f1:19:70:b5:b0:0e:
         b5:59:fc:6c:be:c1:aa:3c:ac:2b:fe:f8:2f:1d:4a:0c:0b:2f:
         c5:d5:80:d8:1a:ef:53:f0:37:fb:a8:1d:de:99:f6:fb:45:68:
         03:7d:59:94:9f:75:27:5a:11:ce:06:65:cb:44:41:bb:e2:a5:
         32:ad:4d:ab:ce:31:51:ca:cd:0d:0f:e3:0d:24:d9:a4:e4:0a:
         f4:c9:0e:31:2d:5a:02:67:7e:92:c9:ae:59:97:3c:46:a2:dc:
         e3:51:dd:39:22:49:57:ea:b0:7b:e3:0f:5c:9c:05:00:5f:02:
         4a:f1:b0:e9:34:9b:e3:0d:f9:8c:90:4c:52:a7:8d:6f:81:d9:
         7e:d1:30:db:dc:34:7e:f6:bc:de:e6:e9:88:85:be:0f:74:1a:
         4b:5f:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----