Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File:                     roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier:          ZMGYtGECyWxWQ7gsrrF/2b4DX7wk3l9Psddzc3C1zD8=
Subject key identifier:   77:F8:6E:40:0E:06:B1:72:DB:F8:96:67:5F:B6:5E:4B:95:1E:55:13
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer:       /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial:       01962F067DAD50EB22344076E91D9DD7A513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number:          010F
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
                          2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: iFMd/dhJVPwiyDKCaAgNRfuTqdt8g/vIlNf9I7zAsek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7d:ad:50:eb:22:34:40:76:e9:1d:9d:d7:a5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=77f86e400e06b172dbf896675fb65e4b951e5513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:66:fe:0f:8b:e4:9a:1f:3a:24:33:95:25:
                    f1:b6:83:0f:69:2c:db:5b:bf:40:25:15:16:e8:cb:
                    d8:ba:88:b1:94:69:5e:f6:65:9d:86:36:bf:0d:40:
                    55:fe:ee:c0:5c:89:cb:96:69:c1:6c:54:02:d2:21:
                    5a:c0:32:ef:fe:ca:d6:c1:1f:74:b7:fd:c2:51:0d:
                    62:93:ff:28:57:05:8b:0e:74:87:df:92:9a:6a:0b:
                    6b:55:ea:12:31:0a:86:b1:6f:e8:77:1d:45:22:db:
                    27:f3:0c:5a:06:24:11:14:e9:6a:90:46:30:aa:75:
                    43:a7:53:d6:98:2b:f6:fa:0b:27:b8:67:d6:92:cf:
                    35:74:7d:cc:ef:97:91:70:8b:e0:26:44:12:a9:a0:
                    c8:93:53:d6:4c:72:95:07:bf:20:93:29:84:88:6d:
                    db:fb:7b:e4:47:9f:e3:9f:8d:c6:b0:90:68:45:20:
                    ff:1f:12:cd:69:ff:45:5c:73:6b:46:2d:a9:ea:9a:
                    be:a2:76:0a:8b:88:59:b1:28:40:02:ce:5c:69:a8:
                    20:5b:57:f9:f6:b2:02:e0:72:c3:ff:37:d3:e7:cc:
                    67:78:c5:8e:24:56:45:6e:30:19:9d:c5:39:33:7c:
                    61:79:e2:59:c6:04:cf:fa:0d:3f:12:e2:0a:0d:b8:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F8:6E:40:0E:06:B1:72:DB:F8:96:67:5F:B6:5E:4B:95:1E:55:13
            X509v3 Authority Key Identifier:
                keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6f:f2:27:90:ad:e8:42:ec:c8:e4:4d:2d:ae:17:69:e4:08:
         0f:89:56:fa:56:5b:88:66:44:4d:0f:43:f5:1a:34:e6:01:0a:
         2e:bc:77:2b:00:66:7d:c3:c1:05:35:b9:75:53:54:d7:19:df:
         8c:4a:6a:b9:3f:38:1e:ca:12:72:1d:8b:40:f9:29:53:17:d9:
         8c:4b:a5:a4:58:0f:1a:14:e2:28:73:11:0c:d2:18:79:1f:e4:
         3b:5f:4a:43:24:9d:f4:64:fb:56:73:5d:05:ad:2e:e7:74:79:
         5c:b5:1d:dd:9c:cc:b6:ec:9b:5d:33:b3:74:c4:04:bd:5d:e8:
         e9:75:50:55:c5:65:dc:be:cb:dd:77:80:a6:c2:a7:93:34:45:
         ff:7e:a4:26:54:f3:59:6b:29:bf:fe:15:a1:8e:c5:11:23:03:
         5e:a8:73:99:2b:e8:ab:a3:2a:9c:07:7e:7b:00:77:aa:54:fe:
         0d:30:2d:7a:7e:4f:b1:f7:0a:37:44:af:2a:f8:36:bc:f4:4a:
         ef:f8:0a:11:a0:d1:3c:bb:72:a9:85:00:42:47:e1:3d:89:f1:
         b6:5f:df:97:06:fb:db:23:ce:46:23:6e:da:1d:36:58:12:20:
         f4:61:08:c3:c7:f0:c9:66:25:ab:ae:d8:2b:ad:cd:a3:39:72:
         d3:38:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----