Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
File:                     o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json)
Hash identifier:          w69yCxbSwbEUEsfLJADEeh/g+tMU1Lx7caz5GhLBEYo=
Subject key identifier:   5F:89:4B:E0:6D:A9:25:C0:F1:74:1D:7D:44:97:EC:33:55:DB:2E:CF
Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
Certificate issuer:       /CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Certificate serial:       01962FABA5C6309AEA6F052A3017D04C8EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: KHmBEFAHu1D8g7BNr6DM90HcrdE.roa (hash: cHCWZbVIixRYPkJFTsJoo7AK/4mwhNH2E0rmOh1q4HI=)
                          2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: yWIx11uLurnla+jg5zTFZF1p6YA+R55BYD8h6or0gsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a5:c6:30:9a:ea:6f:05:2a:30:17:d0:4c:8e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=5f894be06da925c0f1741d7d4497ec3355db2ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:76:11:4f:5d:2d:86:8b:b6:dc:62:33:2e:
                    71:95:2c:3f:cf:58:eb:b9:8e:57:dc:8b:28:b0:65:
                    a3:36:b0:8d:a1:c0:93:1f:b6:54:d1:a2:85:08:0c:
                    96:9a:68:23:67:5e:e0:58:de:99:e4:24:80:d3:a1:
                    ed:60:df:5b:6f:48:65:fa:1b:d8:b9:bc:d0:5b:cd:
                    f5:ed:1a:af:7f:06:89:82:55:67:40:7d:4a:c7:c9:
                    d5:c4:50:43:4e:97:45:3c:2b:17:6f:1e:07:a9:7b:
                    72:36:0c:1d:8c:2a:d2:e0:b0:08:38:b6:ce:70:a2:
                    84:2f:8f:f7:05:b5:17:ab:81:a5:8b:61:68:94:ff:
                    f0:57:50:de:11:4a:28:ba:47:be:69:30:eb:6b:93:
                    10:5b:07:42:ae:9a:d6:51:5e:2d:f9:81:fa:46:78:
                    92:30:73:93:d0:4e:aa:71:4c:5a:c0:12:c3:7d:21:
                    d5:bc:64:4e:bd:55:cc:c8:3b:40:d4:f8:03:c8:f2:
                    cf:9a:bc:7d:c3:99:bf:a0:fc:c3:28:4d:d9:0e:a9:
                    49:e9:08:12:ba:f9:e2:c7:7a:c9:c2:fe:f8:e9:8d:
                    be:1b:71:16:5f:81:0e:f9:dc:8d:5d:1b:15:49:e3:
                    e7:95:50:b8:36:cf:c8:8d:d0:7e:76:f4:80:71:15:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:89:4B:E0:6D:A9:25:C0:F1:74:1D:7D:44:97:EC:33:55:DB:2E:CF
            X509v3 Authority Key Identifier:
                keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a0:7a:48:ae:f4:ea:a0:cc:63:74:dc:2a:0a:b6:55:ab:43:
         1b:aa:f9:4e:25:a7:fb:c7:7b:97:fb:b9:a1:1c:91:67:14:e3:
         28:6f:5a:32:fd:a8:86:1c:56:8e:5e:11:f4:21:a3:88:a0:bf:
         3e:bc:bc:ae:60:63:82:93:d9:e4:8a:0d:6d:29:28:18:35:4a:
         64:97:23:78:ac:54:22:f1:6e:9b:96:5b:b1:af:5f:4d:d5:f4:
         66:a1:f3:f3:66:2c:34:a6:f7:10:fb:d2:63:9d:ba:02:95:ed:
         90:86:00:06:20:13:e8:d5:72:1c:c4:6a:4f:8e:65:f6:e8:e0:
         60:ca:fb:4e:27:cc:41:53:65:5a:14:17:9f:94:a3:6a:8c:b9:
         21:d6:c2:f8:85:74:10:8f:b6:eb:e7:df:e2:25:63:82:2b:dc:
         f1:c6:eb:7c:9b:b7:6b:35:16:49:40:b1:d9:c4:9c:92:ae:82:
         dc:f5:6c:8a:05:6d:c0:3f:ad:fe:54:90:9f:9c:8a:66:72:11:
         d2:d0:68:25:46:3e:69:f4:3b:a8:c8:4e:33:30:81:12:b1:26:
         cf:11:f2:44:ce:51:e9:55:89:0f:7c:8c:03:66:4c:65:f5:17:
         4b:77:18:38:33:51:3a:43:76:12:ec:00:85:19:97:25:2b:b3:
         1f:6b:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----