Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File:                     od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier:          Y8UyxAjMwMd08Np8tQsDBPdKr/6qL0ekvoy8dgv5mXc=
Subject key identifier:   CD:D3:60:8C:5C:5D:62:D6:1E:7F:E8:81:99:A2:63:29:CF:DF:45:72
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer:       /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial:       01962E2AC98C04AD22814ED2215067983EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number:          0A5B
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
                          2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: DdKROPusfj3czlE6d1/qDE91irgXkVdjCj4+7MGi9zs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c9:8c:04:ad:22:81:4e:d2:21:50:67:98:3e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=cdd3608c5c5d62d61e7fe88199a26329cfdf4572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:c4:05:c4:6d:d8:13:87:69:b8:7e:76:74:
                    6f:33:4b:fa:b4:c9:7b:27:5b:e3:f5:4d:39:8c:9d:
                    bb:ec:7c:a3:45:93:35:b2:0e:28:1d:59:6f:a3:48:
                    43:72:ca:6f:4c:cb:5c:a7:78:e5:1c:2e:15:b4:8c:
                    4c:92:41:d9:c9:bb:5c:cd:dd:55:35:2a:a3:09:35:
                    7f:a0:f5:14:52:4d:39:ea:b2:94:c5:63:a6:ca:8e:
                    45:02:7b:b8:27:ab:38:7b:71:e0:6c:4e:70:be:a2:
                    d7:2d:9a:bf:f2:c7:64:0b:14:06:81:f9:da:bb:a4:
                    19:f6:f8:23:fe:f1:4b:c9:8f:aa:f2:28:4e:65:93:
                    77:ec:3b:74:e3:2f:db:af:d7:69:b9:13:b5:71:b2:
                    62:33:c7:b5:34:19:a2:46:06:ce:9f:b9:1a:e9:7b:
                    4c:11:de:10:18:c0:c3:6d:30:75:5a:05:1f:88:7b:
                    27:87:b6:0c:e3:df:97:d9:bb:22:a5:13:cb:ce:88:
                    d2:a1:46:59:c2:2b:be:cf:a5:19:c2:f3:a5:a8:79:
                    b4:38:be:56:6c:3c:b4:7f:da:d6:cd:85:ec:70:a2:
                    c3:49:59:63:8f:b7:ec:4f:6b:fb:19:e3:be:50:1e:
                    2a:66:bc:7d:d1:e7:89:46:dd:a8:28:3f:1b:c2:09:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D3:60:8C:5C:5D:62:D6:1E:7F:E8:81:99:A2:63:29:CF:DF:45:72
            X509v3 Authority Key Identifier:
                keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:90:ac:42:11:bf:c5:76:94:39:03:5a:b1:69:ee:7f:ae:de:
         77:49:48:8c:91:ae:b8:8c:2a:ef:67:09:9f:63:e6:bb:d6:4c:
         39:01:05:8b:f1:3a:f6:04:41:5d:73:2d:d5:b4:89:86:51:1a:
         2f:de:85:1c:d6:3b:13:c0:8e:4b:5e:d3:5d:d5:f7:68:8d:19:
         e4:36:19:bc:54:39:bc:cd:a3:4c:25:dc:11:ef:85:9a:e7:16:
         4e:50:64:50:3a:1e:17:d7:dd:a8:2f:3e:55:27:52:82:66:e5:
         bc:28:1f:7e:7d:7c:6a:17:0e:4f:2d:ef:6d:a7:85:6c:79:9a:
         e0:da:b1:38:1f:0f:50:6c:e6:d5:24:a9:82:0e:76:3b:8a:d0:
         21:9a:a0:51:86:85:12:81:35:b2:64:59:7e:4b:e5:00:f3:d2:
         4d:75:4d:72:20:e1:8f:04:76:40:21:92:c7:6a:28:2b:25:86:
         52:ac:59:f1:b2:9a:89:61:e3:cd:18:d9:45:aa:69:95:a9:39:
         fe:a3:51:01:50:45:49:ca:b0:21:19:b1:92:02:34:2a:7b:be:
         34:52:67:df:f2:0e:23:ca:c7:a0:66:65:fd:1f:ee:df:dc:c5:
         5c:64:a7:ff:21:11:db:3c:38:c6:d2:2f:d6:04:d4:9f:ac:9e:
         b7:de:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----