Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File:                     oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier:          RKxDrZoD1Jz1Lt5zyb3ouH+v7t7gKj+OwhqW/CAgl84=
Subject key identifier:   02:19:30:0F:73:24:D6:C8:D5:C4:FE:17:6B:CA:D0:17:67:9C:52:36
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer:       /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial:       01962F073737A702F101D07F56495A7BE913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
                          2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
                          3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: vPf4/8n/cvmLr2NB5Ya7mcY0gYlgjwREhgBY4iH2fDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:37:37:a7:02:f1:01:d0:7f:56:49:5a:7b:e9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=0219300f7324d6c8d5c4fe176bcad017679c5236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:8a:da:c9:ee:65:69:ac:53:e0:ef:a9:dd:
                    12:9c:60:18:57:1f:d5:b9:15:5c:70:7f:de:35:32:
                    84:f6:0f:d3:d1:f3:de:24:65:a2:67:44:21:b8:5d:
                    c3:21:ab:5f:19:3f:23:e2:64:f2:fa:f4:ce:b5:d9:
                    1f:21:59:fc:a1:f6:ba:7e:f2:18:07:49:c9:b5:bf:
                    ab:bc:60:7f:96:a8:14:63:70:59:71:fe:af:70:cf:
                    58:a2:7b:6c:aa:07:ab:66:a1:0f:fb:70:1f:be:43:
                    84:ae:7f:96:b3:e2:28:67:79:15:31:a2:d7:ea:e5:
                    02:27:30:96:77:a4:02:ad:d8:f4:84:e4:90:4b:8d:
                    48:cb:08:95:ff:24:8b:ff:77:ac:4e:3d:23:46:5c:
                    ca:c6:22:86:21:e9:b6:af:16:b4:dd:dc:3a:52:25:
                    f6:01:58:21:02:77:39:fa:62:a0:c6:ec:f8:e6:47:
                    6d:34:fe:bd:b9:3e:79:37:3a:19:18:04:ec:b2:77:
                    bb:c6:26:fb:54:d6:a2:c1:d1:45:c3:c3:ed:23:f3:
                    f7:ba:0a:f0:fa:c1:f8:75:43:aa:c1:aa:4f:be:be:
                    dd:4b:1d:1e:8a:9e:57:45:49:df:ef:d8:19:b5:10:
                    7c:79:b8:37:82:83:f0:c8:cc:86:e7:5c:ed:0b:f8:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:19:30:0F:73:24:D6:C8:D5:C4:FE:17:6B:CA:D0:17:67:9C:52:36
            X509v3 Authority Key Identifier:
                keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:db:c7:47:05:cd:c6:86:f6:d0:87:9e:45:e5:78:39:71:99:
         8a:42:15:7e:dd:9b:cd:dd:0b:cf:83:b6:ad:e4:22:45:c7:63:
         46:55:2d:d0:b2:b1:59:d8:1d:c8:8d:ff:c7:d5:97:e3:fd:07:
         bd:76:9e:f6:8c:d7:8e:b9:12:87:dc:dd:82:3f:b9:82:77:9e:
         6b:1a:d8:64:23:5c:44:7f:98:17:10:a6:09:c8:50:1b:2d:5e:
         67:b3:f6:8f:70:6e:5a:e7:2f:00:85:a5:57:48:6d:db:d7:ba:
         94:8d:48:32:04:df:83:82:76:1c:63:3f:95:96:e5:1d:ce:fd:
         3a:49:f9:76:6f:62:2d:04:06:eb:46:88:7f:f3:86:73:c2:32:
         63:fc:3d:16:ec:48:d9:bc:c3:30:ce:77:4d:1d:36:4d:94:c0:
         da:01:91:67:1d:b5:c7:c0:73:27:b7:cd:fa:58:53:a5:cc:c7:
         23:e0:40:40:f8:d1:05:8b:f7:e1:e0:dd:66:71:6a:d5:d8:4e:
         e8:13:ff:33:3a:3c:ab:7a:01:fe:e9:79:a3:9c:7f:9e:97:1d:
         14:e0:08:6a:a0:2f:c0:a7:ad:98:bb:f1:68:db:69:97:55:19:
         e6:b8:70:f1:f6:36:81:c9:2f:ca:e3:6a:10:b5:c2:ac:c0:c9:
         bd:34:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----