Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File:                     oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier:          Lst9Xn4EzdK8wxTtSCvfJrIGnDT+wg9OA41sYn+ifCg=
Subject key identifier:   A1:4E:B2:74:F6:A6:1F:76:32:F1:44:F1:DB:5B:61:F5:C6:4F:CC:09
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer:       /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial:       01962F065CBF4706D7C63C0149B7C203CF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number:          063F
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: ubpJDbxVzqHg5T3iiDvSZP2McUPGcbpx15NhE6MkbUc=)
                          2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5c:bf:47:06:d7:c6:3c:01:49:b7:c2:03:cf:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=a14eb274f6a61f7632f144f1db5b61f5c64fcc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:d0:31:40:5d:d9:aa:0b:8b:20:5c:1a:ef:
                    33:73:bb:5e:4b:82:a8:2c:1e:19:af:df:28:86:9b:
                    3f:27:7a:af:12:1c:32:1a:b2:94:d9:da:4b:6e:cf:
                    c8:00:49:9d:7f:c1:e8:99:ac:ab:02:68:b1:33:05:
                    25:ac:3d:82:34:3c:68:7b:be:f1:af:8b:9e:42:ab:
                    91:ed:52:b3:ef:50:43:b8:21:34:84:fc:c6:77:ab:
                    5e:b7:1d:95:14:39:3e:0d:a6:12:ce:16:e2:8b:e3:
                    f7:9f:00:a2:0b:26:39:3d:25:4d:3f:07:5d:d4:13:
                    76:84:4e:1c:53:26:48:d0:1f:b7:63:bf:81:91:17:
                    60:59:aa:90:f5:0c:b5:22:d2:00:cb:9c:6e:95:69:
                    47:d5:8a:e2:fb:d6:70:95:78:1a:33:87:a9:7f:2c:
                    03:d4:af:b6:2a:62:d8:4e:03:90:a1:2c:51:fe:54:
                    c3:05:50:3a:4e:f9:8b:7b:8c:bc:f3:83:ca:a3:58:
                    04:66:40:de:4e:cc:36:7e:4b:59:59:01:b5:e9:83:
                    71:ae:43:2c:a9:63:0f:6c:a9:f7:40:be:ed:25:35:
                    f8:ff:7a:60:d5:a4:17:6b:6a:d8:fd:8c:cb:3c:59:
                    87:b7:fb:d4:4a:ce:4e:57:0c:82:4f:be:38:ab:24:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:B2:74:F6:A6:1F:76:32:F1:44:F1:DB:5B:61:F5:C6:4F:CC:09
            X509v3 Authority Key Identifier:
                keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:d3:77:ca:98:c5:e7:22:85:49:c6:ba:21:e8:b2:f0:b4:
         06:c2:c0:cb:76:7b:4c:98:31:ee:20:4d:51:d3:bf:8b:67:4a:
         d6:30:d4:84:03:e2:d2:b8:c0:fe:a3:32:e0:76:fe:9e:20:24:
         9a:5c:f8:57:cb:e7:bf:34:8a:30:22:91:b7:24:99:03:f7:a9:
         c2:62:d8:03:10:e9:cf:06:ba:16:5b:30:13:cf:26:4b:3d:0c:
         05:7b:37:ab:c9:64:61:c3:89:7d:0f:c9:92:23:6e:3a:56:5a:
         0e:09:b2:63:a5:ce:51:04:3e:d3:71:f7:ac:00:d6:35:e4:da:
         93:c3:23:33:2f:e0:e0:83:df:b3:3a:85:f9:a8:67:4c:7a:8c:
         a0:61:cf:17:ef:63:3a:ae:78:14:2a:79:97:f5:bc:c0:2b:4a:
         b6:07:10:b9:f3:c2:b2:d1:bf:2c:37:76:5d:da:d3:e8:b5:e9:
         3b:82:a1:15:34:b2:24:5e:3c:00:0b:e6:ed:59:5b:67:09:fb:
         0b:aa:9b:88:90:32:1f:e9:d3:38:26:98:1c:66:9e:60:cb:29:
         25:71:36:fd:4a:59:61:90:10:a0:00:4e:16:1e:74:83:63:3f:
         3b:08:c5:58:b7:e8:df:25:f5:52:9a:c8:e9:e9:41:ef:b9:35:
         12:3b:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----