Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
File:                     oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json)
Hash identifier:          rKZVg7v69cC7Btsa9mgFlSvCZhOEpjPj6QkMPOnUFSY=
Subject key identifier:   93:5A:7E:D1:6D:B7:55:B6:3B:F5:7C:1C:9E:4D:AA:0B:5E:EA:BD:49
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Certificate issuer:       /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial:       01962ECFD6FD55A3E0C5EDCC92B851ABBA27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
Manifest number:          0495
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: lG9M0ytelOsltsM45OHzpDj8VA0.roa (hash: NbXxBP1wpUJzGfc6WpWH6JS4IiG1rIjC9o+D9ASG5hQ=)
                          2: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: jY4oXuir4Srk2emtkBevf3UyU166PTZMNTJtJPrz+XM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d6:fd:55:a3:e0:c5:ed:cc:92:b8:51:ab:ba:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=935a7ed16db755b63bf57c1c9e4daa0b5eeabd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0b:b5:50:d6:90:e2:de:b9:3d:d0:42:b7:69:
                    2d:a5:de:34:ee:04:5f:61:6c:3d:1f:91:90:0c:7f:
                    da:f5:59:62:6b:7e:d1:62:43:11:38:73:78:6f:20:
                    45:84:9b:27:6a:c3:97:b0:55:24:87:46:31:d7:9e:
                    fd:62:c7:21:7e:6a:5b:58:66:f1:c7:73:09:21:bf:
                    2b:35:63:7e:d9:e5:a9:06:cf:f7:8c:c7:58:72:22:
                    12:03:1e:df:32:6c:e4:53:8c:d1:a2:e8:25:44:2d:
                    e1:06:6a:52:c4:2a:e7:f4:2b:eb:72:a1:39:ba:7e:
                    7a:f1:cf:d9:c4:12:82:3c:8e:8f:d7:4e:eb:2d:7c:
                    6f:f2:7e:d9:7b:48:31:53:ca:3c:32:d0:e6:51:ad:
                    21:a9:8a:ff:89:3e:49:59:5b:5f:3c:b9:59:83:a1:
                    fa:66:14:dc:02:1c:d7:06:01:18:fb:da:12:e4:21:
                    4d:ae:08:a0:a6:8f:ad:8a:eb:67:62:40:31:99:1f:
                    51:de:aa:b2:0c:37:8a:e6:cf:78:d1:96:d5:a4:99:
                    8d:77:ad:78:fa:cc:c3:26:34:9e:55:bd:f7:c8:2b:
                    82:a1:cb:98:8a:3d:00:63:8a:2c:9e:ba:68:5b:9e:
                    b0:a5:58:88:2f:4f:d8:21:1d:f1:e6:e6:c8:d3:23:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5A:7E:D1:6D:B7:55:B6:3B:F5:7C:1C:9E:4D:AA:0B:5E:EA:BD:49
            X509v3 Authority Key Identifier:
                keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:52:ee:4f:d7:17:1b:16:42:b9:f7:7f:fe:72:19:74:a2:
         c1:bb:69:36:e5:41:48:5a:b4:b6:76:83:9b:c5:9e:95:eb:a2:
         e1:11:6c:c3:a2:5c:90:1f:b6:42:14:a6:b1:02:cf:52:a0:90:
         f7:bc:29:46:cc:8c:7c:8f:f0:83:94:ce:5e:4d:a5:16:e6:38:
         d7:b6:f2:ac:56:14:fa:79:5f:0e:c8:82:8d:1d:24:b1:43:e8:
         10:b2:98:0f:79:21:87:69:85:5e:28:d1:3e:ee:03:a3:e5:24:
         5b:52:5c:46:a4:cd:ff:3e:a5:8d:b4:4e:e0:35:3a:4f:9a:f5:
         05:1c:4c:56:72:4d:02:9a:31:f0:7b:d1:12:c3:fd:f0:8d:f3:
         c9:21:34:40:2c:97:9b:c2:11:83:8a:f8:e2:33:64:db:6e:15:
         26:b2:23:fc:63:1a:87:bf:1e:45:6b:5c:98:4c:0e:93:cf:99:
         73:c9:39:8f:73:2d:74:89:49:3f:66:b3:5e:34:a8:d5:2c:33:
         93:2a:b5:d9:29:e0:a8:e1:4f:a6:d0:e6:a0:00:66:fa:e7:09:
         f7:5a:76:12:04:5d:29:2a:70:bb:2f:6b:fc:27:66:8c:a4:1a:
         2c:33:1e:4f:d9:93:90:df:39:04:da:78:56:ff:84:97:0d:06:
         4c:7f:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----