Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File:                     o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier:          1OnQfUmfjRNy9JB5b/tM6JRthB1RHlyVO1ZPrBLUyIM=
Subject key identifier:   6C:6D:30:15:86:D6:60:43:CB:43:B7:CC:18:95:9A:75:5C:3A:20:BD
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer:       /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial:       01962DF39E8915910D96657FC20BA8CFAD1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number:          1481
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=)
                          2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=)
                          3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: OLAtv8ko5ROCHcpbP7fGNpIek6+8Ct5z6kZ9DF2mBE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9e:89:15:91:0d:96:65:7f:c2:0b:a8:cf:ad:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=6c6d301586d66043cb43b7cc18959a755c3a20bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:d7:cd:fb:2b:fb:6a:21:e9:6b:e2:9b:20:
                    41:24:15:7e:b4:c0:cb:90:70:1f:e2:af:c2:d5:0a:
                    58:fc:2b:18:b4:87:f3:aa:b8:05:0d:1e:24:32:ed:
                    c9:25:b4:e8:82:e6:96:b7:5f:00:73:9d:a2:61:36:
                    17:25:cb:75:d4:42:f5:cd:e4:c0:cc:d1:bf:45:4a:
                    ea:25:c8:46:3a:a6:a5:52:ea:c8:00:ed:69:0d:ad:
                    50:0a:c4:ff:90:e4:ff:c4:95:84:8a:60:d3:ed:e6:
                    67:c6:30:77:11:57:1c:ef:46:44:06:4b:58:06:16:
                    ca:6d:1f:92:04:28:2c:86:36:b0:7f:5e:da:5f:e9:
                    77:62:ca:6c:b6:66:a1:c0:3d:aa:5b:7a:dd:21:11:
                    e2:65:10:2d:e4:da:3f:63:55:73:16:2c:5c:2a:c9:
                    45:10:40:0f:6d:24:44:7a:84:2f:4b:6d:09:08:d6:
                    72:bc:e4:ab:ea:96:4c:c2:7e:65:75:57:cf:08:2e:
                    db:0d:aa:81:78:09:9d:73:e4:aa:36:dd:55:c7:0b:
                    e2:7b:95:56:82:f1:23:35:0f:48:89:36:53:f7:f7:
                    2f:74:2a:bf:f1:cf:5d:eb:68:ef:9a:3d:89:93:b9:
                    06:f3:a0:a8:ec:ca:4c:82:5a:3c:b1:04:38:23:16:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6D:30:15:86:D6:60:43:CB:43:B7:CC:18:95:9A:75:5C:3A:20:BD
            X509v3 Authority Key Identifier:
                keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2c:b4:bf:10:de:b9:31:0c:00:cc:50:5f:27:a1:88:da:15:
         e6:ba:6b:bd:71:c8:a3:80:58:3b:83:08:10:fe:03:e1:86:34:
         ac:30:6f:5b:56:5a:60:d5:a1:46:c7:8a:b9:ee:55:08:df:ae:
         47:52:c9:ab:de:61:56:11:4c:c8:c1:6d:75:a4:96:3f:21:5b:
         b9:17:06:06:49:ed:98:7e:02:22:69:a5:20:fd:1e:a4:65:a2:
         de:f1:4e:1d:b2:fe:c5:3a:6a:f9:ce:dc:31:b2:fc:9c:0f:98:
         42:81:3e:39:51:3f:be:35:88:a7:53:f4:21:72:c0:a8:ef:67:
         bd:f1:f7:cb:50:df:92:43:ae:71:eb:ae:9d:18:a4:59:15:1d:
         61:14:61:e5:d4:55:61:11:a7:0c:40:6d:55:77:c4:09:d6:7f:
         7f:71:c4:24:cb:9d:01:db:17:7e:f0:69:14:57:80:99:6c:f5:
         dc:ac:4a:ec:16:76:cb:0c:df:95:d5:a3:8f:2d:f0:b8:1f:b6:
         b3:d1:37:52:87:a3:28:a7:24:08:10:73:b4:e9:a3:8f:f7:9a:
         29:d7:ef:fb:a8:78:3a:34:8f:a7:5e:d8:0d:17:4b:c5:64:13:
         a6:ed:bb:ba:bd:a4:66:92:c4:cc:2b:10:e0:3a:74:4c:b9:bd:
         48:bc:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----