Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File:                     o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier:          byim8LudiDX4xlSYLvzRvxZ6ugwRqJ0mKcoJgD/GHNA=
Subject key identifier:   91:1B:09:F6:3D:EF:9C:6A:46:E7:26:42:E1:17:E6:8A:63:D0:9A:E5
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer:       /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial:       01962DF3B9D5890C3B52C57F6810763B8C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
                          2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: BmhWmaWFe9M6rIgW32U0Ngf5GCkGoeo8XMUyLmRrxBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b9:d5:89:0c:3b:52:c5:7f:68:10:76:3b:8c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=911b09f63def9c6a46e72642e117e68a63d09ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:f4:ef:a2:54:e5:ea:84:20:de:32:f8:70:
                    9b:6e:2c:c2:7e:e7:9f:9a:03:12:20:fd:87:a4:ef:
                    c4:22:3d:26:91:49:6f:13:52:c0:ba:f7:0e:7c:d6:
                    16:d4:b7:cc:26:c2:38:ff:1d:3f:af:b3:dc:a2:af:
                    5d:e7:2c:b6:81:d1:dc:f0:65:ed:50:b0:8d:fe:67:
                    c6:bf:9a:9d:40:0a:f9:4b:22:d0:08:fa:72:c8:51:
                    d1:d3:d4:9d:15:93:a3:77:d0:e0:a5:fc:b7:22:87:
                    06:e5:07:d8:8c:a8:c7:9d:e1:7b:ee:9d:bd:d9:00:
                    09:f3:5d:06:0b:36:0d:98:9e:e2:8d:e2:f1:31:50:
                    04:ae:b1:7c:a8:69:ef:d8:65:5a:87:26:60:66:b2:
                    54:66:fb:ca:f6:a1:d6:13:1a:27:2c:7a:b3:02:3c:
                    9b:9a:20:92:d8:ba:62:8f:cb:8a:49:c5:bd:4f:fa:
                    08:b4:91:83:c8:11:f1:87:c6:9d:7d:2f:81:6c:d2:
                    ae:88:b9:1c:3e:bf:0c:67:a3:b3:87:77:ca:9d:93:
                    75:94:ab:41:98:09:d5:67:1a:13:ad:3d:06:3a:1b:
                    c7:a9:2d:fc:59:17:fb:43:da:12:df:69:4a:49:58:
                    e9:89:08:83:7a:3b:f2:a9:8c:ba:ae:ba:c4:fc:f2:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:09:F6:3D:EF:9C:6A:46:E7:26:42:E1:17:E6:8A:63:D0:9A:E5
            X509v3 Authority Key Identifier:
                keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:4c:1e:a0:05:72:8b:4d:c3:63:fb:97:5f:cd:a5:40:4c:
         ea:e8:95:a3:be:b2:34:55:86:5a:a2:7e:49:54:43:7b:69:b8:
         5f:73:3c:4f:d7:d3:7f:82:b5:bb:4f:bd:c6:bd:5e:27:b0:e5:
         fb:5c:31:8b:5e:ae:22:e0:fc:97:25:90:8e:20:df:a3:56:6e:
         c3:d6:86:37:2d:51:2e:9a:ef:ba:e9:0f:55:0f:89:d8:9f:66:
         37:44:f2:d3:fa:20:12:d7:6a:70:3e:54:22:68:b0:39:84:ac:
         b2:fa:fc:70:50:46:72:23:0d:71:b1:64:b0:e3:0b:cb:a6:4b:
         c2:b3:50:50:9d:a2:3f:3c:3f:98:fe:f1:4a:90:13:34:20:88:
         44:f2:11:f6:dd:f8:40:18:97:40:be:63:83:8a:3c:9b:ae:73:
         a1:9a:f8:3a:4a:f6:5c:f3:0e:93:4d:73:97:80:d4:bb:f1:ec:
         86:0b:f9:e2:33:41:57:99:ce:77:ae:3c:ce:d9:c1:3b:a7:41:
         e4:1e:e9:75:4e:7a:b9:4e:77:c0:5a:fd:00:3d:69:c1:be:51:
         1c:3b:15:92:de:6e:9a:9d:af:c5:8a:d3:3e:63:97:6a:a5:0b:
         d7:5d:01:8f:87:e3:2d:14:ac:69:6c:1d:fc:70:37:93:f3:10:
         b0:b7:6f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----