Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File:                     oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier:          uEneUer2AUGqmO99QMw2f8P0UiFZZ6tXh6H2GOSXXJo=
Subject key identifier:   39:DE:25:DB:27:D3:45:8C:B0:45:C1:16:FF:27:19:D8:43:7D:B6:F2
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer:       /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial:       01962F74A9D4BF7594F0B237815DB08EC608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
                          2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
                          3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: 0fEUs2QfYjqC+Kr1qo3D+s7UxoA7uAXDFc1TqgDHopE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a9:d4:bf:75:94:f0:b2:37:81:5d:b0:8e:c6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=39de25db27d3458cb045c116ff2719d8437db6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:34:68:25:07:6d:29:07:3d:53:12:c3:0c:
                    73:88:61:fa:2e:b5:96:18:a4:7f:ea:95:64:0d:e2:
                    61:88:23:de:97:c7:71:61:04:9c:dc:02:8b:13:24:
                    3d:a3:0b:73:76:fd:de:e4:80:93:b3:3c:fe:25:3d:
                    7e:4b:cb:65:0e:fd:9f:ff:95:6e:84:ca:d2:c1:18:
                    b8:93:a3:29:42:13:b8:b5:10:c9:fb:e1:6f:2c:65:
                    a2:49:49:93:96:f6:8e:05:60:21:fb:27:dc:6d:0c:
                    38:90:4d:1a:9d:49:0b:da:8f:e3:c7:76:38:c5:a0:
                    f0:af:bd:8f:c2:98:73:95:17:49:27:0c:03:39:77:
                    97:0a:fb:02:94:3f:b8:d5:8c:37:4a:24:9b:67:51:
                    f7:30:0f:b6:2c:a4:1e:1a:d9:45:1c:36:9a:1d:49:
                    3b:c3:d4:97:15:64:84:12:47:37:5d:59:b4:ad:c0:
                    8b:8a:35:6a:91:e8:98:1e:de:c2:62:f6:51:e7:6b:
                    9e:a4:65:bd:44:3d:35:68:09:2d:d6:b5:15:da:8b:
                    41:1d:df:70:5e:0b:7d:e3:7a:3a:ee:7f:89:e2:57:
                    cc:86:45:c1:fc:24:9f:21:75:35:f2:a2:b6:10:95:
                    59:62:70:06:6b:12:64:d8:1b:9c:57:9d:b1:5c:e0:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DE:25:DB:27:D3:45:8C:B0:45:C1:16:FF:27:19:D8:43:7D:B6:F2
            X509v3 Authority Key Identifier:
                keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:d2:54:8f:d9:5b:55:26:0a:29:5d:3e:6b:67:96:86:bd:
         31:3c:2f:fb:2c:bd:d1:6a:6a:44:4b:4a:80:ff:ba:17:53:a8:
         44:fe:e0:0f:c8:28:41:29:43:e4:da:e9:5f:d9:00:46:e1:21:
         78:65:15:7e:be:02:1c:0e:75:d4:29:a7:b9:8f:18:61:b9:cb:
         58:b1:94:c9:01:b0:2e:79:f4:58:d5:f1:17:53:dd:68:ed:71:
         29:92:80:6e:c4:73:e8:94:f3:a7:ab:f5:93:e5:a7:99:da:02:
         a8:d5:fe:a4:cc:e5:d8:f1:fb:81:d7:75:5c:70:f4:1a:d0:d9:
         5d:ba:54:57:19:e1:62:be:1b:47:0e:1d:1e:e8:c7:60:9f:69:
         e5:45:c1:98:49:a9:e2:a1:4d:f3:f7:8d:d5:e5:6d:db:21:d7:
         da:2b:b0:64:3f:8f:61:ce:eb:54:f5:ef:27:0a:97:c8:e2:41:
         61:04:f2:48:f9:f9:df:b8:71:73:67:b2:45:e4:af:b2:83:0e:
         1c:be:94:d4:08:15:e5:15:4b:75:e8:cc:51:b0:f6:63:98:c7:
         d5:d9:8d:cf:40:90:24:d6:8f:84:bd:29:a0:18:6e:37:4a:46:
         e0:46:1d:a7:f1:5f:06:c5:ee:79:32:9e:4d:e6:23:b5:1d:69:
         38:b3:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----