Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File:                     oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier:          /OD3qJJ0wYT12fQUSA3YtRr6hXMyp64+CLjGgFtvS5g=
Subject key identifier:   9C:F2:98:3E:14:5F:A5:DF:E6:93:91:7C:0D:39:63:FE:61:95:5C:CB
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer:       /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial:       01962E2ACF721E934EED14E1B05978C02B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
                          2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
                          3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
                          4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: Z6oyxpDnmP92ic9t8LYMFivAOHZTCLR2bxDr8PvLb74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cf:72:1e:93:4e:ed:14:e1:b0:59:78:c0:2b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=9cf2983e145fa5dfe693917c0d3963fe61955ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:a5:54:e0:50:c9:1c:c3:10:90:6a:76:35:
                    8b:2a:86:70:e2:e9:61:93:6a:5d:eb:96:22:97:7e:
                    fe:b4:af:35:05:7e:ad:99:be:55:72:b4:37:54:06:
                    46:fc:bd:ee:28:e7:24:88:03:e0:1c:21:42:40:f2:
                    c6:2d:7c:aa:7a:65:2d:f6:c3:27:80:6f:87:0d:b5:
                    e4:95:91:9e:ef:5a:d9:36:7d:04:42:86:6b:f0:62:
                    f1:f3:9b:64:7f:3e:c9:cc:50:e2:f6:7a:12:2e:a7:
                    59:c6:0a:7e:4d:b5:39:08:9e:2d:6f:ca:a7:e2:df:
                    d8:5e:cf:20:09:8e:86:a1:a0:52:bd:24:4c:cc:2f:
                    67:bc:96:68:e5:c4:ba:6c:fb:44:c5:ae:e6:a4:58:
                    6f:29:7e:0c:10:a2:fa:ce:24:9a:ce:15:ef:b6:f0:
                    b3:69:e1:8f:3c:fb:0c:48:34:df:d3:bc:74:ff:1c:
                    6f:7a:0a:21:7d:41:54:ce:d2:6b:d8:dd:38:37:19:
                    ff:83:fe:79:b6:19:0f:2a:e3:5b:3b:96:94:c4:5f:
                    6f:af:df:b0:76:c7:35:02:bc:91:85:a8:4d:c2:63:
                    24:d6:c8:49:ec:4f:02:0c:25:73:0b:78:74:0f:fd:
                    c5:ff:d9:aa:b2:da:75:32:6d:d8:d5:5d:a0:0c:92:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F2:98:3E:14:5F:A5:DF:E6:93:91:7C:0D:39:63:FE:61:95:5C:CB
            X509v3 Authority Key Identifier:
                keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1b:be:a1:31:31:7a:3c:da:40:1c:a7:6b:01:10:b6:9e:db:
         b8:19:88:62:45:a4:ca:87:88:3a:97:b8:d7:f7:da:1c:9d:3d:
         53:2a:a8:ab:70:d6:41:08:79:ca:14:c4:d8:25:42:ae:94:dc:
         6c:5d:03:6c:38:b9:1a:ce:70:70:60:ee:3b:11:96:6a:25:4e:
         75:f0:45:a2:3e:b9:9c:9f:37:1e:e7:ca:01:d7:1a:4b:86:60:
         77:44:49:aa:60:94:8e:cf:e0:b6:b3:7e:b5:6b:a6:2e:f0:99:
         32:20:34:fc:60:b1:0f:8c:fa:95:61:b8:e0:6c:57:4b:cc:2c:
         c1:a5:cb:fd:1a:03:48:fa:f5:80:e9:d4:af:dc:65:24:61:83:
         40:62:26:32:60:ed:0f:e3:39:a9:81:53:88:80:6c:a4:86:09:
         1a:c4:fa:92:02:f6:52:27:72:f5:df:bf:43:d8:9c:63:4f:73:
         25:be:ff:d1:9c:8c:7c:1a:c4:a5:d0:07:9b:97:9b:5d:22:e4:
         6e:74:60:d3:3e:3f:00:f5:0a:b9:01:2b:85:52:c8:84:21:fc:
         de:8d:be:c2:67:14:e6:07:5b:c1:f1:13:44:2f:9c:a0:7a:62:
         1b:f1:18:78:64:48:ca:df:be:57:f4:88:ea:89:ce:14:8b:e9:
         a0:d0:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----