Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File:                     dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier:          rEImKe9nl8nfCg0oixRH0XOfWN43xAE0BVITIY/aBho=
Subject key identifier:   C0:57:5A:F7:3A:ED:F0:02:5C:D1:6F:16:F7:65:A4:71:13:38:B6:87
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer:       /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial:       01962F071C7AD67D11C99C71E3CCD9A34EBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number:          0B99
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
                          2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: W+elbqxy7udZhz8Jmx1gSp8rXdvI9qV1EcMfw/0lk6M=)
                          3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:7a:d6:7d:11:c9:9c:71:e3:cc:d9:a3:4e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=c0575af73aedf0025cd16f16f765a4711338b687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:c9:25:48:97:5d:5b:76:6e:20:f7:03:41:
                    3b:17:c1:fc:29:b5:e3:e2:0c:17:1c:74:ef:9f:84:
                    30:66:7d:40:00:aa:19:81:2a:d7:21:cc:2b:2d:74:
                    d7:a4:2e:01:6e:26:00:ec:a8:ef:6e:47:f1:35:b1:
                    d3:59:2b:9c:ac:68:15:a4:95:64:12:44:35:f8:fb:
                    26:77:a9:f1:de:82:67:e9:ef:47:50:cf:21:bb:d9:
                    3e:04:f8:81:86:b7:c3:82:01:75:78:32:a2:1e:7d:
                    94:1b:1f:ba:b4:0c:e6:fa:26:bc:54:05:64:46:23:
                    53:0b:94:10:61:c2:5b:da:44:6d:cb:ce:fe:fc:c8:
                    69:7f:a0:e6:50:87:eb:50:94:71:42:f4:19:7b:20:
                    de:03:5a:d3:78:ce:71:1a:16:5c:04:96:2b:a8:a5:
                    b8:24:0c:29:27:c9:03:7e:ff:14:80:cf:bc:f1:a9:
                    af:e2:b9:5e:47:d6:3c:f6:c6:4a:16:29:6c:48:8f:
                    b5:1f:79:9a:f4:ee:13:48:60:a8:96:63:d4:78:88:
                    b2:64:c1:7a:bd:bf:a2:9a:41:cb:ac:99:ac:7b:4f:
                    8b:f9:b4:de:65:90:66:8a:d6:0b:87:56:a3:57:bf:
                    d1:63:bf:3d:86:4a:ee:a4:29:2b:9c:d2:7c:7d:8d:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:57:5A:F7:3A:ED:F0:02:5C:D1:6F:16:F7:65:A4:71:13:38:B6:87
            X509v3 Authority Key Identifier:
                keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ba:31:a9:7f:3e:db:34:f6:ab:10:03:d0:3d:67:e7:fb:63:
         52:a9:49:e3:00:23:d2:0b:22:5c:db:93:8c:a5:3a:05:f2:f7:
         e0:5f:92:91:74:ff:bf:bc:d4:bc:00:8d:18:39:d2:84:62:ac:
         13:d7:88:2e:75:b4:0e:73:5d:17:81:5b:41:8f:e3:5d:19:4c:
         4b:0c:ce:6d:9b:ec:cc:a8:ce:9b:90:93:e1:8e:04:7d:0d:4e:
         d6:c2:11:a9:92:fe:3b:5a:42:18:f8:b6:8a:60:f7:19:a3:ca:
         0f:94:f7:13:3f:82:f2:eb:99:90:d0:14:c2:41:24:ce:c5:6f:
         c1:b2:16:c4:bd:00:e9:33:00:84:59:5b:93:4e:86:ac:c8:f7:
         e9:a8:bd:b2:6b:bf:c3:a9:18:e6:db:8a:f4:04:95:a6:13:90:
         a9:7f:87:ea:74:05:55:d7:89:bc:7a:3b:a7:88:88:d5:82:4b:
         cd:12:97:8a:a3:43:cb:be:62:ed:02:3c:af:8b:c9:c7:3b:36:
         d1:42:0b:f1:82:8e:1e:29:be:53:af:cc:f4:b9:e1:f9:e8:67:
         0d:e0:2a:58:96:f8:d1:15:5c:a7:25:5f:5f:88:13:4a:8b:bc:
         0f:ea:7e:75:77:cf:3e:bf:31:5b:e9:df:75:7d:f2:0d:f6:94:
         13:d2:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----