Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File:                     ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier:          CUNSsk58CKifn2F5EAQTsOdNRjvxm2zEViXDz04U5Fk=
Subject key identifier:   47:95:BF:9A:F6:39:30:EF:77:0E:BE:03:A1:5C:4E:F9:D3:92:F6:7E
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer:       /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial:       01962FAB852B2A7FDA54B3866F6D73095BCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=)
                          2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: nnpfJ3qMAlAkMWf7Kb5aZQiu4iigI20mU5xcNnNg4N0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:85:2b:2a:7f:da:54:b3:86:6f:6d:73:09:5b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=4795bf9af63930ef770ebe03a15c4ef9d392f67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:d3:52:a3:f9:82:0c:bd:df:b3:9a:88:68:
                    f9:66:5d:35:a6:6d:d6:f5:31:32:f8:23:60:b7:2e:
                    77:38:2f:0c:59:de:a9:fe:b9:05:f0:ca:af:ff:f0:
                    d6:1b:67:00:09:12:30:ae:a3:9c:39:8a:0b:d1:55:
                    76:8e:c2:d5:1e:57:35:96:76:59:b5:09:82:73:3a:
                    1e:0f:0c:18:f9:1f:c7:ef:11:59:7f:d5:e5:3b:e3:
                    26:d3:b6:45:d8:c3:f8:be:7d:4d:14:d4:21:3d:20:
                    49:a2:fc:5d:49:3b:62:2a:95:cf:4f:41:c7:e2:b8:
                    e9:2a:78:98:1c:75:1d:f5:a1:a4:30:03:9e:74:af:
                    77:39:d9:e3:2c:e1:85:7a:3c:cc:72:ab:8e:cb:b8:
                    c5:6e:d3:e8:40:10:f1:b4:0e:a5:6a:c7:a9:0f:4f:
                    b2:2e:7b:38:9f:1d:0e:d8:67:f5:9c:3d:5e:14:16:
                    6f:f0:d5:55:99:0d:15:d1:8d:81:dd:4d:3d:35:71:
                    e6:40:77:32:e5:89:12:64:46:2e:91:fc:42:aa:0f:
                    c7:bb:e5:54:37:5a:5a:dd:67:1c:47:82:82:c2:0e:
                    1b:99:49:d9:13:6a:63:6b:1e:95:a9:98:a0:84:79:
                    2d:1c:39:a6:62:6e:a7:c3:b4:0f:a3:e6:cb:b2:4a:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:95:BF:9A:F6:39:30:EF:77:0E:BE:03:A1:5C:4E:F9:D3:92:F6:7E
            X509v3 Authority Key Identifier:
                keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:40:8d:20:e5:22:d8:8a:3f:1e:80:69:3c:ca:d5:da:98:a0:
         a5:34:d5:f4:03:de:18:f9:d9:f1:73:e7:63:6e:d6:b6:46:ad:
         2e:2c:f2:a8:a4:ea:9f:ab:e7:c2:5a:b4:65:65:9d:37:1a:5e:
         55:b5:ee:4f:4b:09:83:6f:db:f5:af:23:18:3a:25:01:8a:82:
         63:97:25:a7:5c:ac:9a:b8:f5:8c:45:89:3e:42:26:84:ae:14:
         10:35:13:8a:50:a9:ff:52:69:c2:01:f9:31:27:ec:b8:7f:e6:
         b3:e1:f5:14:03:4f:6c:be:9b:f9:2f:8c:5d:e5:76:70:29:fb:
         34:3c:e7:fe:6a:33:6c:03:13:ef:71:50:2d:99:d1:98:17:fa:
         6f:60:62:30:de:1c:24:e3:3a:92:2a:d1:d4:6f:2f:65:fd:f6:
         a2:06:a7:76:07:b5:41:12:a0:52:9c:ff:c1:a4:7b:2c:35:33:
         82:a7:58:67:79:be:72:ec:4c:52:1d:ec:9e:0c:22:8e:35:db:
         01:1a:69:d8:3b:bd:af:13:1a:01:50:86:57:82:13:d6:dc:34:
         6a:b6:72:14:64:8a:8f:1d:f0:53:15:0f:9e:fb:2f:63:15:a8:
         dd:40:af:aa:77:f1:0f:d8:5c:b2:fd:05:8f:a3:e1:0b:e2:eb:
         17:be:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----