Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          4ZLNVW6gNV3bd/pVb+9XeoDYtU5o1vjaO/hPdE1LaIY=
Subject key identifier:   DD:C7:7A:89:0C:8C:9E:DD:93:3C:46:78:3C:7B:27:FD:22:4E:0A:4A
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       01962F3D49321E3139E9E288B17C5260E305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
                          2: EFk1lNXwEBcRAFhoClA443_i5HA.roa (hash: xLW6nYf20kTwvvd9EPpkcVtHN4fslrZstANOcysv2Fs=)
                          3: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
                          4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: z7LKjkjJwMKr1IATWKxo+66fAWYFolB13Jzv84jyl+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:32:1e:31:39:e9:e2:88:b1:7c:52:60:e3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=ddc77a890c8c9edd933c46783c7b27fd224e0a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:4d:9a:ed:53:38:45:8d:fd:17:8b:48:1b:
                    b1:79:2f:f9:a8:4a:6f:8f:94:81:49:42:1f:51:8d:
                    cf:d2:be:ae:6d:3b:74:88:98:70:e4:89:0b:35:7f:
                    ac:cc:54:e0:5e:ff:21:d6:bd:34:ab:1d:79:d3:84:
                    4e:b3:9c:ec:80:19:5a:0b:5c:17:6c:80:25:dc:03:
                    53:1b:6a:fb:aa:2b:00:8b:e3:67:66:ea:16:78:20:
                    a9:60:ee:20:a4:5d:fb:49:1a:a1:3a:e3:0b:48:af:
                    c9:81:d6:5a:e4:65:ad:e7:36:7e:3f:f1:73:25:3e:
                    0d:f1:4a:3b:bd:e1:89:91:a3:ce:46:ee:0c:7a:78:
                    a6:6b:51:4f:13:40:cd:1c:d5:49:4a:2b:83:da:8d:
                    8c:31:b5:64:8d:64:c6:58:c0:0f:72:52:c7:e5:d6:
                    7a:d2:7c:10:95:89:c8:98:ed:7b:44:6f:fa:6c:f5:
                    74:61:1e:40:51:b4:ab:8a:30:7e:b4:f9:ca:c9:87:
                    e8:8c:27:40:8c:69:42:12:27:14:45:66:1f:7f:f8:
                    89:d0:6a:b7:37:31:2c:35:44:fb:91:86:8c:97:1c:
                    9c:ad:01:7a:fc:41:7a:db:1b:db:b9:5d:3a:bb:f3:
                    60:2d:1d:57:8d:00:ed:69:35:a8:3b:01:92:12:5e:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C7:7A:89:0C:8C:9E:DD:93:3C:46:78:3C:7B:27:FD:22:4E:0A:4A
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:01:12:4d:b3:98:18:69:f4:f7:ae:da:8b:9d:97:03:09:53:
         ab:62:9a:55:44:2c:dc:fe:a6:0c:8b:82:cf:a4:f6:c8:c9:39:
         0e:08:92:56:0f:32:9c:e7:c8:b7:74:2d:84:42:89:be:a7:e4:
         7d:18:47:9a:89:1c:36:2d:f1:91:06:6f:76:f5:39:40:b5:57:
         5e:3d:4c:50:6f:a3:7d:c7:71:d8:52:61:10:01:a4:af:1e:8d:
         9f:3a:c4:ba:20:27:85:6f:70:de:28:a0:06:bf:2f:c6:49:d3:
         f4:ee:46:2c:1c:f4:7a:a8:c7:61:01:76:77:8f:3a:02:e0:27:
         6d:9b:e8:18:a4:6c:96:ab:36:fc:75:18:23:76:42:fc:66:bd:
         02:fc:4e:65:64:93:71:66:d9:6b:4f:c1:1f:b2:3a:9c:76:10:
         e4:27:5d:86:6a:ea:ab:68:b7:7e:06:83:4e:39:e3:a4:a1:d4:
         4c:78:14:ae:39:1e:17:09:14:33:a5:0b:89:68:0f:f7:12:1f:
         b6:dd:0a:c7:07:98:cd:56:ce:09:1b:ad:d2:76:aa:75:1c:36:
         9e:06:00:0b:44:82:6c:96:8e:ad:fd:52:8d:e4:f9:8b:6b:45:
         12:82:65:de:47:2c:79:f0:9e:69:b8:89:b6:56:a2:d5:42:aa:
         66:63:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----