Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
File:                     oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft (raw, json)
Hash identifier:          OXOo4cJ5qX/qBixP8oDAQ71nP2dld/qZH2yzgHx5v88=
Subject key identifier:   4A:5A:71:E1:EF:6B:DC:78:B8:12:A9:E6:5F:7B:53:D1:D0:F6:18:CB
Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
Certificate issuer:       /CN=a220dda64843a4ee364b089356ca87995830fd77
Certificate serial:       01962E6187A46CBEA6DDBEED2C00D80A5D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
Manifest number:          0C11
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: f3Wn9TOfcfxB3VYXWanqfMC6WRI.roa (hash: CJSEzeKkH+A8u48zVCzb/MrI7FvV/Beze1CPp3UTLZU=)
                          2: oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl (hash: rny3LEOtitZsulczjL9sIQTk/CDhyfsUvlmjMLkkXkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:87:a4:6c:be:a6:dd:be:ed:2c:00:d8:0a:5d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=4a5a71e1ef6bdc78b812a9e65f7b53d1d0f618cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:b7:e0:b7:7a:95:5d:76:ec:a0:4a:81:48:
                    37:5b:52:7e:c1:19:aa:cf:80:76:0f:65:29:66:c9:
                    0d:f0:c4:87:4a:0c:25:d2:2d:28:33:a0:f5:b3:17:
                    7f:74:bf:ff:15:c7:dc:f1:dd:37:4a:b7:68:96:78:
                    ab:bf:9d:58:5b:07:4c:03:cd:67:b4:12:cd:d6:ad:
                    c2:ab:9f:6a:94:52:ed:1f:24:6d:2f:4d:bf:b9:35:
                    b3:e7:08:8d:a4:66:94:71:4c:bc:eb:c9:96:a7:81:
                    29:ec:e4:1f:d7:35:02:8f:1a:a3:3e:e4:e4:9d:18:
                    7d:16:5c:69:c4:e8:d0:7c:dc:6b:c0:7f:9e:b0:31:
                    29:e9:65:33:6b:08:1d:b3:4f:d2:13:02:5f:b6:96:
                    7b:2f:b9:71:40:2c:37:2d:de:17:74:9e:b8:82:9d:
                    3a:3f:f2:33:74:ce:9a:43:5c:a9:d0:a4:35:1d:4b:
                    96:61:5e:27:92:28:4d:ab:4c:8c:20:e1:49:d8:72:
                    38:6c:41:78:bd:92:82:f2:d9:06:ae:79:53:e5:c0:
                    a9:7d:1b:2d:9a:75:b2:48:ce:19:8e:88:b9:71:57:
                    6b:31:49:62:da:62:33:7f:f6:5c:fe:fb:31:2f:a7:
                    21:06:26:76:9d:bc:aa:5f:fc:67:42:f6:ae:e7:86:
                    7f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5A:71:E1:EF:6B:DC:78:B8:12:A9:E6:5F:7B:53:D1:D0:F6:18:CB
            X509v3 Authority Key Identifier:
                keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:57:64:36:e5:90:d1:30:e7:fd:99:75:fb:e3:00:ad:82:da:
         aa:4e:e9:aa:65:5b:b2:6a:33:3a:7e:7e:6d:e0:f3:3d:bc:09:
         98:53:45:df:42:c0:57:a4:11:e2:3d:96:8a:ae:c0:33:59:c7:
         7f:45:70:74:c1:84:b6:d1:e6:1c:41:9e:62:53:74:1b:30:71:
         43:3d:0f:d7:33:4b:28:a4:80:ee:8c:92:70:c8:30:0c:1d:5d:
         c8:0e:10:75:05:33:09:4e:5f:cb:2e:54:ba:9e:d9:b9:89:c9:
         29:11:8c:dd:bf:f3:d0:f0:58:38:54:ad:82:23:2f:bf:97:67:
         2b:49:24:31:49:97:10:dd:fd:8e:7a:58:58:6d:25:f1:e3:2d:
         6e:fc:a9:37:55:96:de:79:92:06:c7:ed:a9:69:95:df:f9:5a:
         1f:e1:55:57:66:ba:fe:63:5a:b0:70:82:ae:a5:12:4a:63:d4:
         77:0f:45:be:be:0d:16:5a:b5:34:4c:db:ff:1e:5d:d5:f2:ed:
         bd:75:9e:b1:36:cb:87:6e:ef:16:a8:00:6a:30:74:98:68:c3:
         75:d4:55:9a:7e:34:c0:cf:23:34:bf:ac:a9:b5:59:2e:04:b3:
         b5:a9:58:34:3a:bc:12:2b:1b:8a:9f:3e:7a:39:bc:23:0c:94:
         62:40:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----