Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          jOaVqyILLTa7lnEyksFp2+/ZSw1plSOkqccaJk3uS64=
Subject key identifier:   B9:82:BB:98:02:74:6A:98:50:09:4D:FB:68:8B:99:40:F3:BA:E2:F5
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       01962ECFBAC05CF3BE28E5B5C45F779EB0E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          F1
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 73l6mao4jRS_RJRUh0ajw125Q_Y.roa (hash: +O0mgrDDfqxs0iz8xR/eYRDp4FK45YfRNKPU5QYOCJM=)
                          2: O7dEuQCjSO8z6ONj5fHjP6nhUXE.roa (hash: uHw+P79UCgqlSxBDAzyTEVikBPvI0LRf7VeAKKpBa/o=)
                          3: nTg06Xuaoov5emPDb5qo0AhHcXI.roa (hash: sxM+tjocIPeu4DOdcT+0o31NCC6XWsc08As8H8WQbTc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: tF/PCjmYF8P0yLS9ubnKKGgLWG/psz6JGVKsaTEdm/8=)
                          5: zx5oIGQrEHv9J1zJn6EJymvmEUg.roa (hash: coYA5lF4ZkHZzi2SpC6YHuzHIjdXi3lTTu4MIli9GNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ba:c0:5c:f3:be:28:e5:b5:c4:5f:77:9e:b0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=b982bb9802746a9850094dfb688b9940f3bae2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:0c:b2:5d:7f:7b:63:0f:24:56:5b:9a:3e:
                    22:f8:c7:d4:1f:14:52:bb:1a:ed:f5:fa:a7:70:21:
                    a9:b8:71:ea:b4:bd:7a:2a:b3:c2:8c:d6:aa:a6:9e:
                    e5:7e:3d:d8:c8:7a:dd:56:95:78:7b:36:3a:c8:05:
                    af:5b:59:ef:a1:2a:d6:86:52:b3:98:0e:82:e9:6a:
                    1b:51:9c:d7:86:d6:6b:89:50:35:78:0b:68:10:c3:
                    49:90:13:86:9e:6d:9f:67:b2:26:b2:98:2a:18:66:
                    60:65:e4:cc:db:4a:92:3e:92:22:21:94:c9:54:b0:
                    fd:d8:62:7b:ae:7f:57:e7:08:7a:d4:e0:55:5a:b3:
                    05:01:64:b8:ef:30:8c:9a:19:7f:94:37:04:a5:aa:
                    12:39:40:1e:35:f5:5c:b8:60:68:dd:45:24:51:47:
                    50:99:4d:75:1e:ff:52:d5:a8:ff:77:fc:b2:25:eb:
                    08:62:37:67:4a:93:57:0f:6b:86:82:90:8a:25:0f:
                    1a:b2:a2:2f:cf:a2:62:10:60:4b:4c:61:9e:a0:86:
                    e9:88:d1:61:aa:1c:0a:30:61:0b:a1:ed:5a:c3:34:
                    ca:4c:fc:84:93:a2:13:3e:4b:69:5f:9a:bd:7f:44:
                    99:3e:a5:e2:99:60:08:88:e1:be:4b:45:85:4d:93:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:BB:98:02:74:6A:98:50:09:4D:FB:68:8B:99:40:F3:BA:E2:F5
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:99:af:2b:c0:00:20:17:c0:c5:00:68:ef:a7:f4:cd:82:
         8c:47:c8:dc:4c:ed:c2:af:0d:f7:44:7a:a2:09:40:d9:39:34:
         88:66:94:a9:1e:6c:09:5e:6a:01:fa:a6:cb:f0:f9:4d:88:36:
         6d:07:ba:00:1c:8f:71:04:bd:90:77:8d:b1:62:3f:99:e7:cf:
         46:02:ce:51:f2:11:fb:f5:95:e1:8e:c4:5f:94:80:a5:a4:13:
         2e:13:04:19:99:4e:2e:ad:b8:bb:73:66:f8:c8:3d:24:3c:a8:
         6b:cd:d7:44:e6:b5:dc:e0:27:a4:cb:f1:ab:a1:49:42:35:26:
         d8:fe:b8:61:b8:1e:ca:ac:b7:fd:2b:f8:61:70:bc:c8:59:55:
         e0:c6:ca:03:13:1e:c9:e8:c2:bd:fc:0f:25:eb:64:49:55:0a:
         5e:3c:aa:3a:86:6e:a1:7c:30:0c:3a:e8:65:47:16:58:0c:73:
         57:d9:37:75:54:e2:9f:c4:d5:15:a1:86:a1:e3:1a:3a:34:d1:
         ad:c9:3a:a0:2a:bd:41:98:4e:b8:81:26:9e:67:36:3b:30:16:
         58:3d:89:76:8b:b1:25:35:fb:d7:00:85:44:81:4e:da:d9:bf:
         bd:c6:2a:58:a2:06:f8:ea:41:22:e7:6d:9e:9f:15:6f:83:73:
         ab:c9:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----