Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File:                     oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier:          YJDHElWiE7c9RLCzorikH+8EOKNq+QiQqwq/lz8vgJc=
Subject key identifier:   96:E8:C9:7E:F2:4F:7C:0C:AB:6E:F8:83:7F:B9:F9:90:64:CB:84:A7
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer:       /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial:       01962E2B14814F3E24161C3E146149CE7B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number:          0F84
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
                          2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: SP/vSeT01WlOQdSs9PzQW6DZK+M11JM4e/m5aw6+7Cc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:81:4f:3e:24:16:1c:3e:14:61:49:ce:7b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=96e8c97ef24f7c0cab6ef8837fb9f99064cb84a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:0e:43:5b:cb:c7:f6:bc:52:cb:b1:4c:45:
                    98:23:06:10:6b:86:94:3e:39:4d:a8:2a:30:be:b1:
                    ce:cb:31:71:36:fc:fa:19:69:00:cd:04:b8:01:23:
                    e7:31:0a:74:57:b0:15:73:3a:c3:ff:93:d2:71:ee:
                    1a:f1:76:d2:d5:9a:9b:2f:8b:91:79:ad:5b:f8:44:
                    59:ff:ad:d0:3a:7d:b8:37:41:30:cc:7b:df:a4:94:
                    3d:97:1a:ad:71:71:ac:a5:06:7a:48:7b:83:75:8c:
                    e7:46:54:29:00:25:42:47:1b:61:2b:26:ef:4c:75:
                    7e:29:0d:4f:21:13:9e:57:60:54:86:ac:dd:83:ea:
                    ce:4d:68:7e:6f:a9:2d:e3:09:a6:f3:8e:9a:a4:1b:
                    18:2a:42:e1:f1:47:21:10:8c:ac:73:ab:de:82:6d:
                    13:f8:ce:e6:db:7b:44:f7:d9:26:56:bb:48:8d:5c:
                    1d:7d:aa:70:d4:9b:d5:f0:36:30:c0:ea:bd:3b:83:
                    db:7a:6e:d6:25:ac:4b:5a:ae:0a:fa:d6:6a:b4:8c:
                    b0:4f:b2:77:d2:9c:29:d1:fe:c6:45:99:81:6e:6d:
                    26:e6:26:d3:6b:6f:ba:51:75:28:88:b4:a9:c7:50:
                    83:38:cb:8f:ea:70:4a:dc:52:1c:ca:4b:07:0d:33:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E8:C9:7E:F2:4F:7C:0C:AB:6E:F8:83:7F:B9:F9:90:64:CB:84:A7
            X509v3 Authority Key Identifier:
                keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ca:ae:87:05:a8:c4:78:e6:f4:72:ca:b6:89:e3:72:fd:d4:
         f5:c4:58:a4:cf:17:0d:0e:6d:5a:9f:93:68:77:02:1b:17:61:
         19:91:b4:e0:e1:b1:0c:22:12:05:db:c7:a1:13:71:0a:4c:d1:
         a3:da:9d:3e:c1:2b:9b:78:6a:d7:18:c2:33:2e:29:9b:34:98:
         4b:f0:d8:69:17:72:32:ac:94:cc:44:52:be:a1:21:33:fa:ad:
         44:6d:63:85:98:01:eb:0c:6e:14:6f:fc:39:14:42:b9:6c:9c:
         9a:05:73:94:c7:06:fa:58:f8:fb:d7:e0:1c:58:72:58:9e:5d:
         2b:99:a3:a4:57:00:4d:e5:e8:67:47:62:d8:ec:fc:ef:83:ee:
         ec:b2:7a:e9:49:95:92:46:e4:a1:6e:cf:aa:c6:0f:71:fc:de:
         8f:24:8a:30:ff:29:48:b4:37:78:7e:21:31:fb:2a:1f:03:ca:
         97:4b:f6:bf:73:4d:e9:09:eb:13:e5:99:11:4e:4e:13:93:91:
         b0:47:cf:32:c0:15:48:00:46:0e:bd:ec:33:a4:a8:0d:d2:a9:
         57:55:6a:96:20:b3:f8:fa:b2:e9:0b:81:d1:f4:55:38:b5:50:
         3e:a6:20:0c:87:4b:66:cb:c7:4f:e3:f9:d5:dc:9f:3d:71:83:
         5e:6f:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----