Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File:                     oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier:          YzPKfMjyY5z7rEHO3dRZ0XlAkD+yke4p0iuxxY32Du4=
Subject key identifier:   DE:2A:6F:01:26:C5:A7:7C:C1:F8:CA:D1:6F:A3:EB:7A:68:6E:E4:90
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer:       /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial:       01962E9951D96DC42050CB2F014373FBE2A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number:          097B
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: bcgHeTecNhcHR9QWO6gmvpmmI5c.roa (hash: EV6/wlUYGCbS7xEazmx8eI5Bar/BgAFt51P9o3UlOuQ=)
                          2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: ImD1/15GMsZ79wwnTiDyQ0fvU2xxGPhNKfPj8Fn/S4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:51:d9:6d:c4:20:50:cb:2f:01:43:73:fb:e2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=de2a6f0126c5a77cc1f8cad16fa3eb7a686ee490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:a0:fb:4f:82:2b:36:33:67:70:bf:b9:34:
                    6e:1e:b2:cb:0e:e9:4e:ea:cf:f1:1a:1b:f8:01:32:
                    bb:50:c6:ce:bd:25:1b:20:4d:ed:8a:aa:5f:5e:da:
                    0e:6c:ec:7d:95:67:23:6c:d8:9d:d6:bc:e2:53:bd:
                    a7:a3:3e:19:99:b3:fa:da:4c:cf:e8:2c:aa:23:ec:
                    f5:4b:ca:b3:94:9f:d4:7f:61:4e:00:7f:de:c6:7b:
                    0b:b0:4e:23:f8:26:0f:c2:94:15:36:41:5d:b2:2d:
                    91:86:14:d4:fd:7e:7a:0e:6c:85:ac:bb:65:73:ac:
                    df:e4:9a:99:47:37:a2:d2:ae:42:63:be:64:86:42:
                    97:91:34:f3:49:f4:e9:cb:d3:67:2f:9c:e5:6e:1c:
                    51:cc:82:7a:a4:76:72:0f:21:47:50:f9:fe:7e:a3:
                    bc:bb:8f:7b:d7:aa:cc:05:d7:89:d9:4f:56:9b:d7:
                    f6:13:a5:95:3b:1b:02:f1:b0:51:8e:e1:ca:28:b4:
                    0d:d0:81:36:e8:e8:08:f5:67:a9:4b:3e:63:0d:b9:
                    72:0a:8f:6d:5d:94:31:e8:3d:32:93:73:34:18:88:
                    84:c4:72:c6:ad:4e:1b:3a:a0:66:4c:9d:d6:0a:a4:
                    3d:f0:00:38:e2:1c:4c:7d:6c:36:d4:31:d3:2f:e9:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2A:6F:01:26:C5:A7:7C:C1:F8:CA:D1:6F:A3:EB:7A:68:6E:E4:90
            X509v3 Authority Key Identifier:
                keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e0:f2:72:e2:b4:3e:70:d5:6b:96:04:f8:4d:7d:20:c7:22:
         f6:56:b4:31:bf:27:45:f4:63:de:ce:da:a9:9c:53:36:6a:d9:
         95:ae:10:eb:7a:61:97:f8:e5:ac:bf:ad:f5:a5:97:e1:0d:ff:
         b4:1a:9d:e7:6e:b5:9a:10:63:8b:92:39:9d:de:8b:74:6a:54:
         77:e8:12:11:34:5f:d6:91:ad:95:60:d8:d7:bc:ce:6a:fa:96:
         ab:f5:8f:e2:72:13:fd:f5:4b:c9:cc:6e:27:81:dc:98:70:b4:
         5d:a3:e2:47:e6:12:f5:36:79:6f:e7:6f:75:94:4a:ff:0e:e5:
         08:73:dc:2c:80:4f:ba:7a:63:60:7d:1a:e4:79:43:0b:6e:24:
         0d:31:4c:9e:df:b8:8d:7e:d4:9a:58:27:4e:e7:18:ab:34:67:
         36:85:df:e3:28:af:77:d3:89:8c:fe:ff:28:cb:96:14:e2:50:
         33:a8:d4:66:51:73:e7:ce:55:47:a6:03:b9:c8:74:3c:c1:14:
         74:fb:68:aa:57:29:96:6c:4f:d7:56:c2:eb:d7:e0:0d:c7:49:
         13:75:77:25:c0:5d:94:f4:af:f0:2b:00:35:bd:8f:7c:c2:55:
         79:7d:41:7f:81:90:2c:7a:d0:af:06:c0:b1:b9:db:7f:61:bd:
         d6:19:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----