Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File:                     oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier:          5zKzDKqIyS5b8ToP+IYxewJbj0a9K/T+whViJMq2Jg8=
Subject key identifier:   7E:6D:C4:3B:64:AB:D0:D8:3C:45:AC:A0:59:E5:28:D2:BD:BF:21:E7
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer:       /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial:       01962F068DFBB442534501F62769391505C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number:          0F28
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: 4p14VVykib3JnJuOlMtI3D34cKlJTVbEgsRqLU7u9pQ=)
                          2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8d:fb:b4:42:53:45:01:f6:27:69:39:15:05:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=7e6dc43b64abd0d83c45aca059e528d2bdbf21e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:fa:a7:0a:07:8e:b5:37:d2:8c:e8:4d:a3:
                    68:db:04:32:c5:97:f9:54:6e:a5:7a:00:16:70:15:
                    60:96:f8:1c:39:52:7a:c3:d7:80:46:ad:c6:57:04:
                    f1:1d:ef:7c:7b:6e:8f:ba:4a:61:53:99:2d:95:ba:
                    8e:97:92:bc:ea:c5:d4:11:d8:2e:af:ca:b5:75:29:
                    d4:7d:ea:56:11:95:fe:99:58:a0:0e:d1:64:c8:b8:
                    ba:df:ff:78:84:5c:f7:21:2a:17:dc:b2:40:6a:03:
                    f3:cd:18:4a:db:39:bb:a6:9d:69:94:8c:24:d7:13:
                    af:34:63:ee:2c:90:49:b3:e7:98:70:75:50:42:1e:
                    91:6b:fa:39:63:fd:a3:af:6c:0b:58:a8:57:2b:8b:
                    52:a7:ac:32:96:f9:d6:cf:51:2a:89:06:88:2e:8f:
                    8d:9d:15:a4:1f:3a:31:a3:40:d7:97:01:a1:92:cd:
                    df:7a:f0:43:e4:a6:0e:2a:a4:e7:01:df:23:99:63:
                    1c:29:2c:3c:8a:8e:e1:c8:d7:0c:33:fd:59:c1:f7:
                    89:44:b4:26:1e:0e:04:03:ea:7e:45:f5:e0:c3:2b:
                    a4:46:33:5e:fb:c3:ff:fb:d7:6b:ec:77:33:34:f4:
                    69:8a:ea:5c:47:01:36:d0:5d:14:e4:fc:ec:e2:c8:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:C4:3B:64:AB:D0:D8:3C:45:AC:A0:59:E5:28:D2:BD:BF:21:E7
            X509v3 Authority Key Identifier:
                keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:06:5b:26:31:ed:1e:ca:06:49:17:a3:31:b0:27:94:4a:98:
         7a:8f:a7:61:97:37:69:8c:e8:8c:fe:c1:d1:47:ac:5d:24:5e:
         56:43:aa:25:64:5b:4e:a8:0c:fa:42:90:cd:ff:60:f8:48:8a:
         4d:5f:57:11:3b:3c:b4:17:14:34:9a:d7:e5:c2:78:6b:21:5a:
         bc:e9:20:cb:ef:45:5f:12:6d:e0:7d:a8:8f:75:d3:b1:f4:26:
         9b:bf:0b:8a:7c:fd:54:f2:47:5e:c5:42:f1:4a:ca:04:3d:e0:
         51:fa:b8:33:a2:b0:a0:c4:ad:31:45:4f:7a:43:41:a1:24:95:
         81:a8:6b:70:a4:0b:c3:b8:f1:a1:6d:9e:d0:5d:71:ca:0d:94:
         36:80:61:e3:93:60:f5:ed:46:20:a9:c3:43:d7:37:90:c4:78:
         f1:8d:07:50:3f:23:5e:c9:ad:12:33:6b:e4:c7:2d:d5:2c:fe:
         1d:6d:b6:8f:1e:3f:a5:1f:a3:bc:33:a0:0d:1b:e4:3c:a4:9d:
         dd:75:6b:d6:88:3d:ca:48:02:2d:60:79:f9:f7:a8:9c:6e:77:
         0c:eb:43:57:62:1f:d3:3d:0a:53:27:37:09:73:e1:21:2d:00:
         44:47:b6:fd:80:d2:8c:7b:5d:17:e8:61:42:53:6e:05:ac:11:
         4c:3d:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----