Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File:                     oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier:          lXBriPmMi4GcUF+EKABw7Vz1sY8eAuW1Qqfs8i/Kxz0=
Subject key identifier:   24:DF:76:47:E4:91:E8:C7:5C:38:46:21:2C:0E:82:38:10:C3:69:9E
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       01962F065FACA9B1DA6B8824399B4C25A29D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number:          08C4
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: H27SmDR8baZpuMXqTM3iDpRfuZQ.roa (hash: HRHfMmSbiheBl5EWJYTnfvHlbbvdFtOGz3m90LhYcYY=)
                          2: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
                          3: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
                          4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: XxvgCrH6r+aI1EwAAYYA7B24l+IclxWuOXrSuciZ5dA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5f:ac:a9:b1:da:6b:88:24:39:9b:4c:25:a2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=24df7647e491e8c75c3846212c0e823810c3699e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:1f:c2:51:d3:26:6a:06:cf:84:c1:b4:cc:
                    ed:82:c5:0d:7c:94:6e:36:7e:55:a9:0e:f2:87:2e:
                    44:24:a6:98:15:ae:16:aa:38:9f:23:ae:09:72:42:
                    0e:23:70:62:31:c0:d5:62:ec:e5:81:89:ec:04:0a:
                    a5:40:c8:7b:b0:ba:f5:7f:84:d9:ae:16:31:16:00:
                    83:aa:75:7c:87:ae:70:2a:6d:f5:2a:72:94:f9:f6:
                    a6:21:6c:c0:26:77:34:d8:bf:61:d4:15:91:6d:1e:
                    38:8f:4d:17:b9:2c:5f:88:8f:9f:8a:32:a1:b7:f0:
                    1a:bf:67:05:43:26:09:7e:68:05:2c:0f:17:02:48:
                    4c:da:00:9a:aa:d5:1a:77:ea:65:94:69:2e:cc:84:
                    2b:0a:11:73:c6:61:01:a3:01:a3:2e:af:3d:3c:5b:
                    b7:5b:96:85:ac:7e:7d:da:0a:57:93:f4:35:eb:46:
                    04:8f:da:ba:1a:0d:f9:4e:2c:4c:59:6a:df:bd:fc:
                    f7:bc:13:86:99:c3:68:c6:b6:74:22:4a:a2:14:f5:
                    dc:69:2a:86:f7:d3:4a:c4:b3:31:b3:fc:e2:be:0e:
                    d5:0b:0b:99:4c:85:8d:5b:9f:be:5d:47:15:0e:d9:
                    c1:f8:db:58:28:60:46:21:92:2a:a0:ba:7c:eb:ce:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DF:76:47:E4:91:E8:C7:5C:38:46:21:2C:0E:82:38:10:C3:69:9E
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:60:e7:4a:b9:f9:2a:7d:78:71:ea:5b:e4:d6:a0:32:21:b7:
         d8:d7:60:53:0c:8c:f5:b4:43:7e:b4:c4:74:e2:4e:d1:09:77:
         3d:68:22:49:81:e0:6a:58:17:49:b1:bc:cc:3d:17:06:67:39:
         a6:e4:19:05:8d:8d:04:2c:cf:8d:3b:86:fa:60:21:30:84:12:
         ae:a4:a1:b5:47:66:1e:cc:f1:72:b6:36:b4:96:d6:6a:bc:50:
         e1:61:5b:f1:52:ac:70:c4:ca:b3:e9:0f:59:8f:48:88:bf:a3:
         e4:e8:21:13:41:14:9d:62:06:c1:a1:0c:6c:15:6e:db:b4:52:
         b3:8d:12:d8:60:fe:2d:d3:da:c5:b6:7d:ee:63:2f:6f:e5:d2:
         db:08:a0:1f:de:93:90:16:12:9d:9e:b6:25:f3:76:12:5b:34:
         22:5a:e9:bb:aa:6d:b9:2f:70:4c:ff:15:aa:02:cf:2b:6f:f8:
         b6:08:89:e5:13:9f:d7:b8:96:5f:71:54:b3:85:0e:34:4f:9c:
         de:dc:35:f7:4e:a1:70:d3:7e:0b:4a:99:d7:e8:3f:30:35:da:
         c0:e8:b0:64:c5:ca:b7:1b:16:bf:82:83:17:ab:f7:f5:c4:94:
         68:fc:67:83:3f:00:3c:49:cb:49:52:05:b9:a6:a9:35:bf:7c:
         b6:fd:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----