Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File:                     p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier:          9+EsTGMYRrQjfw3mIl1pB5v2dQ3WLm67CtvYLwgsrXM=
Subject key identifier:   B6:BF:1D:8A:21:08:E7:F0:2B:DD:03:E5:25:3C:11:01:3D:C9:2A:3F
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer:       /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial:       01962E2AE92D74721A49AA4D1D39D7CDBA74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number:          0AF1
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 2hxXPcSPbR7reDkSV26LIEjhs-s.roa (hash: fgX/zrhdCcQCsldJ7ZwMFpv61/0L0yZvl/fYJkWClmA=)
                          2: C5Hk7pNvRejqtQ5PIAiIg1zKJ48.roa (hash: 0fXabv45tO9342gPnBt4VjyxNdNdoQq49f3ExNOGOMA=)
                          3: eRwE37mv_L7KGZBN80LENZM6RLM.roa (hash: 5WbL1m/0wunIb0w9Td5o6yi8TyJFKtJL1DXw3oBzWKs=)
                          4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: zlqUyI5wH5NHuc++kb+iPfC51CiCF3EZ1ugYWWAA4kU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e9:2d:74:72:1a:49:aa:4d:1d:39:d7:cd:ba:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=b6bf1d8a2108e7f02bdd03e5253c11013dc92a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:80:ca:b1:29:5d:af:16:5d:7e:1f:46:cb:
                    08:a2:be:72:56:a0:3b:2f:fa:15:6c:65:94:bb:0a:
                    7f:e2:aa:34:57:41:ce:9f:a4:5a:46:e9:f2:d8:f1:
                    55:28:2e:34:98:06:86:04:86:b2:04:6c:de:f6:ca:
                    8f:ee:54:97:a7:ef:f6:0b:92:5b:87:ab:d9:ee:e4:
                    85:e5:8d:e3:e3:36:bd:d7:f2:23:23:7e:e3:30:c8:
                    e7:e1:15:17:4f:73:23:a6:f2:a5:5f:98:7a:65:42:
                    53:cd:3f:69:23:e1:1d:6b:98:86:38:2c:a6:77:26:
                    0f:b2:4f:18:d0:a2:bd:1b:4b:f6:b4:ff:da:ac:5c:
                    5d:d9:33:2e:84:bb:98:75:a1:bc:13:59:15:ab:4c:
                    ad:b3:2a:f9:a1:4a:e0:fd:68:f6:6e:da:f3:b3:07:
                    03:32:c9:db:43:d0:e1:9c:96:d3:13:b1:53:7b:9a:
                    5a:ee:e1:f7:12:14:4d:5a:a4:9d:d4:db:20:16:bb:
                    22:66:86:ba:98:fd:0e:6e:34:64:bb:ab:ba:4f:47:
                    4c:50:f7:ed:e4:c7:2d:d1:26:c5:24:a2:92:55:c5:
                    84:c0:ea:92:c4:1c:34:49:e9:bf:9b:16:b4:99:99:
                    d3:f0:a3:78:fb:5e:4e:db:d1:5e:05:b7:06:f4:23:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:1D:8A:21:08:E7:F0:2B:DD:03:E5:25:3C:11:01:3D:C9:2A:3F
            X509v3 Authority Key Identifier:
                keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:22:a1:da:c0:65:ed:e9:a9:0e:6f:f0:24:81:5b:44:a9:dd:
         34:78:1f:bd:0a:8f:24:f1:8e:35:7e:84:56:4e:ba:1c:6c:4d:
         fb:9e:ce:58:71:40:f1:93:f4:b5:9c:13:10:f1:4a:d6:28:6f:
         19:e1:e5:58:3d:09:97:2f:35:68:7c:7c:d7:23:56:42:1c:01:
         43:b4:97:ff:20:83:61:8f:b4:3f:f9:45:68:bc:51:53:07:69:
         4d:25:4b:91:65:4b:85:8e:a8:64:c9:55:b9:fd:12:3e:4d:2c:
         ab:7a:0d:d5:40:37:d2:53:17:cb:7d:ba:a1:bf:32:3e:80:8e:
         46:e3:c9:26:cc:8c:05:5b:98:73:22:f0:31:ab:0f:c2:7c:8a:
         ab:9a:2f:9a:ac:ae:51:7f:28:a8:0f:40:24:24:9c:e2:c0:e9:
         51:78:12:3d:e8:77:7e:6d:51:c4:4e:cb:fe:9f:1f:fa:8c:ee:
         72:85:36:64:e0:bc:cb:97:02:c6:43:65:4c:23:3a:7d:02:a5:
         46:94:c8:d1:79:e5:ea:72:14:07:dc:47:89:f4:3c:d3:4a:58:
         48:85:99:99:2f:eb:8f:4e:27:6e:d8:3c:d9:79:6e:9c:14:8b:
         7c:6d:ca:be:88:92:d3:0e:7c:1e:89:d4:ae:f4:76:1f:bc:7e:
         71:57:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----