Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
File:                     oV32zYKdlfY9kx1dz5HMi6UPkLA.mft (raw, json)
Hash identifier:          xMJ0beIZD17tQ07R8+gpwDd03Nhk9Ute3WxAxztU/A0=
Subject key identifier:   02:88:3D:8E:03:27:AA:86:27:94:8F:C9:0E:7B:F8:2A:B8:84:C1:52
Authority key identifier: A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
Certificate issuer:       /CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Certificate serial:       01962FAB89115771FABD5B74E3B3144FB136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
Manifest number:          1213
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: VuAYChzgVwA9U2Q6Uxu9DF2BLPk.roa (hash: 2ErjMaikK9MO12otuKOE97QoF/tRVc9Xenat/2fnwAc=)
                          2: eCInIDJljc296hyYtD5W8TkDML4.roa (hash: 748KveIKW32FuAoa2IrqedX1Io3eRBGbUpfsqc8GK+g=)
                          3: oV32zYKdlfY9kx1dz5HMi6UPkLA.crl (hash: NSjU3yK4JtUaTTs2L6nnOoTs040do3LnsQx/24fO3LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:89:11:57:71:fa:bd:5b:74:e3:b3:14:4f:b1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=02883d8e0327aa8627948fc90e7bf82ab884c152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:9f:dc:75:09:cb:0e:58:29:e1:69:11:8b:
                    63:32:74:42:10:db:c3:11:05:e2:4d:6c:39:fa:b4:
                    21:28:b5:31:e4:b8:8b:e5:25:87:3c:5e:b7:9c:74:
                    15:7a:4b:da:83:7a:ab:6b:82:bd:6b:b8:81:77:3e:
                    d8:04:37:82:ae:bf:a1:1b:2a:05:42:62:b1:6f:98:
                    c5:de:27:13:d1:48:e1:0e:fc:5b:14:ab:c7:c8:e0:
                    ec:60:79:6a:db:79:e4:0e:b4:4d:bb:07:c9:91:1b:
                    d7:67:6b:7a:28:4d:47:53:ae:de:55:81:8b:96:3f:
                    0b:17:5d:f1:49:ca:d8:e8:8f:61:d4:a0:9a:01:9a:
                    4a:f7:82:41:df:09:6b:0d:07:23:79:e9:9b:e8:75:
                    27:da:ce:fb:b2:f7:91:e6:bc:5d:05:fe:0d:2e:db:
                    3d:18:cb:f3:7d:15:24:f9:ff:7a:a0:46:9d:06:78:
                    b4:13:fd:5d:07:ad:55:48:60:2f:8f:ad:4c:20:49:
                    eb:94:fc:60:10:c2:01:44:5b:1e:3e:01:96:02:9d:
                    1e:db:d8:69:64:f5:21:c5:11:7c:f2:2b:da:59:c7:
                    a1:63:85:0b:90:4e:82:b7:f7:ac:8d:dc:8b:52:56:
                    8e:85:ed:85:92:33:89:b3:17:99:ae:af:ed:e1:af:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:3D:8E:03:27:AA:86:27:94:8F:C9:0E:7B:F8:2A:B8:84:C1:52
            X509v3 Authority Key Identifier:
                keyid:A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:c4:08:e5:3a:4c:cd:5a:c4:1e:6c:c7:76:5b:bd:3c:bf:
         3c:cd:98:37:aa:65:5e:48:fb:c5:81:bb:a4:cf:6a:21:46:8b:
         12:09:6e:91:8e:30:e4:5c:4c:2a:30:d0:e0:d4:02:67:68:04:
         6a:62:d6:58:3b:1a:9c:70:f5:75:66:9b:cf:5f:5d:06:2e:61:
         7d:6d:70:2f:38:b1:13:0d:77:78:10:08:fc:2b:21:7a:b5:76:
         42:f7:56:ec:bb:5b:3f:d4:8e:75:ae:c1:70:18:84:5d:ab:76:
         07:06:c8:4b:fd:51:04:7f:fd:ea:51:e9:b1:93:cf:95:b3:de:
         46:de:33:f4:6f:58:1a:b6:b1:b4:d0:d9:49:4c:a5:cc:a3:eb:
         c1:ae:7b:cb:4b:5b:0b:9c:3f:71:cd:84:f2:40:43:58:7e:da:
         8c:6c:00:ef:48:28:9a:c2:63:2a:6e:fb:bb:9d:e9:ca:46:ef:
         cf:c0:0a:89:7f:56:be:79:0a:91:08:b7:e2:f0:05:3a:02:f9:
         55:85:8b:0a:e3:9f:5d:94:96:b8:23:b6:3a:01:8b:26:c3:2e:
         f9:66:0a:9e:0d:24:02:7f:fa:22:a4:81:df:48:39:02:56:36:
         6d:d2:ec:c8:b9:1e:79:2a:d2:fa:87:be:fa:f8:36:9c:5d:24:
         bd:c0:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----