Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File:                     aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier:          KNtGNSgoqGVrV4AifDvapBNYXh1eegR1cuUScgRnV1Q=
Subject key identifier:   19:3B:11:84:40:6B:62:95:21:C0:16:47:37:74:9A:0E:67:4A:53:3F
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer:       /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial:       01962F3D68EB0D1640D712C0B2A9C57F3F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: IXwdyS86SbDEc5r6DTqF-yyMhKo.roa (hash: MHPw/G9JdYVbN864pG/b/kFkrvcqi5VhnKr+4T0l/48=)
                          2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: ktCONEkNsigaJIYausJJriMLSFTDfrXGU/tslSvTNCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:68:eb:0d:16:40:d7:12:c0:b2:a9:c5:7f:3f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=193b1184406b629521c0164737749a0e674a533f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:ca:f8:26:2f:ce:02:6b:08:4e:70:a6:9e:
                    57:3b:bf:6f:fe:61:82:6f:e2:68:4b:f7:91:72:53:
                    b5:f7:89:9e:8f:cf:26:4d:3b:a2:9b:68:9c:0e:6c:
                    b4:a3:93:18:d9:6d:59:ad:ce:cc:4e:9b:d9:6a:2b:
                    34:d7:03:8e:fc:a4:dc:fb:18:ed:a2:48:55:63:13:
                    40:ad:c6:1f:7f:10:1e:b2:0a:97:4b:50:3b:e9:00:
                    3e:5a:b7:af:1b:17:10:54:11:50:8f:3c:cf:53:3e:
                    b0:a2:f8:5d:c1:2e:d1:39:50:f2:34:52:d5:28:9a:
                    7f:71:1a:41:7d:e8:16:3e:04:b4:8f:07:9e:c5:34:
                    45:c6:3f:30:66:1e:ab:7f:e8:53:45:39:92:54:ae:
                    13:ad:a4:e0:d5:f9:7b:32:72:9a:fb:6c:83:4b:ce:
                    94:ae:43:67:1d:73:51:6d:27:2c:8f:3a:3a:9e:08:
                    27:86:0d:23:f6:88:f3:f1:3f:7b:1a:b5:b8:83:e8:
                    e5:9a:e7:64:ba:a8:ca:55:a8:f7:f8:0b:90:1a:6e:
                    04:f5:1b:35:ba:7d:ba:8e:cd:b9:ab:be:af:e1:fd:
                    a0:91:41:ec:c2:74:d3:1d:33:9f:55:49:ac:32:fe:
                    16:1c:b4:e3:26:99:17:ce:47:34:48:a0:d0:52:cc:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3B:11:84:40:6B:62:95:21:C0:16:47:37:74:9A:0E:67:4A:53:3F
            X509v3 Authority Key Identifier:
                keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:85:26:48:a8:0c:86:56:c5:8f:03:14:a8:8b:d9:b8:a4:
         7e:20:92:94:2a:e6:e3:e2:92:3c:c5:e7:1a:0e:3b:5c:ca:66:
         b1:41:b2:db:0d:f4:ea:a0:f1:bd:aa:9a:63:37:ad:83:77:5b:
         e9:f8:bd:33:15:57:17:5a:2b:5f:c0:a1:45:c0:df:a2:2a:86:
         2f:3c:9c:b7:83:f5:01:1b:05:92:68:d8:aa:19:06:99:f6:e4:
         dd:4d:73:67:26:ee:4b:b6:1b:1d:56:de:10:94:24:af:f1:17:
         1c:08:cc:60:b3:b7:3b:86:95:2c:f8:10:d1:8f:e9:de:04:a4:
         b9:fa:21:ad:02:e5:83:70:d9:f7:ee:57:83:b4:9a:17:f1:49:
         27:28:7f:7c:48:40:e5:a1:87:df:43:13:38:48:24:9d:23:eb:
         18:52:1e:8e:3f:bc:46:b7:4c:1e:07:57:00:62:8b:f3:60:f2:
         c9:5a:10:c3:1a:70:d7:5d:d5:31:a2:92:a0:51:54:72:60:11:
         a0:11:6e:20:c8:c1:66:b3:8d:40:1e:3c:df:f6:6a:98:57:b9:
         49:3e:d3:cc:7b:2d:30:c5:d4:1b:7b:6e:37:7a:37:d5:3c:b3:
         b8:47:a2:f1:e6:22:20:45:83:23:78:a7:fb:c9:87:ff:c4:3b:
         f0:75:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----