Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File:                     ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier:          ADf/H32OUG/eNaiGokdpGGVt1c7RbYyEkFBHiBnDg4Y=
Subject key identifier:   AE:6A:9D:5A:A0:4A:38:5D:17:06:CF:70:6C:DC:DB:C3:0F:42:B6:57
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       01962E61BAE254376EFA77BA141C16F22C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number:          1530
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 4en9va8jCZNwuV4bW7NKxVamz54.roa (hash: sNZVLTVL9KoD1p+QjvV2CcAfu43CsFx04jNm3+y7/uc=)
                          2: _vsjWI5yfirlYBEQFo7GYfCcJuY.roa (hash: cWFUVNFFAdcN3FLLUOZOmGlMNCedYLfmkMjDFDAXLTg=)
                          3: edWAVfkKeL_p4SOqKwWgAG9qG9o.roa (hash: eesAWNHbi/a4/dOuceKDaMTobB00ZxoBZJAUv+VOUbI=)
                          4: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: VqfOVSXtaw2ix1jJqRqvLvH4cmuJ77XeXNJFlqSZReo=)
                          5: pbIiqJaS1EGbniEbzOhuiaxLoYs.roa (hash: WUDrXqNFVweqXZgj8CONFBSXhspu+0e8gEJSRHtVtqA=)
                          6: qp4i_eZ6J2UOG69HPGVB6kmhFng.roa (hash: XVzQsRuZhQ9NpMeiK4lLd7vR0Edi82kUpYpVa1/GB40=)
                          7: tCLfNgix4tP_V8A6nMeJydQuNF4.roa (hash: l1RWT6JrhQfnPs1IttMvpunkYT6LyNsJ3Z9oTTd5L40=)
                          8: v-Zyc-8gXfCAs8hhOf7JEov0XFQ.roa (hash: 6+ea9BVfVupiKipjKzEQYkv6CJOZM8C0elI+moY54XI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ba:e2:54:37:6e:fa:77:ba:14:1c:16:f2:2c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=ae6a9d5aa04a385d1706cf706cdcdbc30f42b657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:99:af:69:17:2e:32:4b:47:fe:63:15:fb:ca:
                    0b:9e:61:d8:4c:90:48:24:cf:dc:90:af:06:d8:e9:
                    60:b0:d7:fd:17:c0:92:80:61:6e:e6:84:5f:37:0b:
                    ed:ff:d9:56:0d:10:f8:2d:cf:24:25:37:82:4c:50:
                    29:2d:46:29:d4:6c:2a:7e:c3:e5:29:71:c0:b3:b4:
                    ff:14:9b:c5:47:f4:2f:36:c6:d7:0a:ea:65:58:62:
                    ce:f9:22:4a:53:1c:db:b3:7e:34:d6:b4:1a:db:b9:
                    3a:04:84:c8:90:ef:43:a2:6e:53:df:54:69:9a:d8:
                    35:fa:f7:20:92:a8:1e:c8:51:41:5a:91:a1:71:0c:
                    af:e1:2c:29:9e:55:ba:56:fd:8e:5c:ba:58:15:69:
                    c2:15:e1:73:f8:76:70:9a:90:47:bb:13:18:19:d2:
                    79:84:ea:14:40:82:f8:dd:52:df:5f:5f:65:f5:4a:
                    7d:31:b7:7e:40:65:76:92:ca:05:08:3e:f3:a4:ce:
                    ab:6e:2d:a7:70:8e:c4:eb:81:34:23:c7:ce:30:87:
                    00:40:ef:35:89:5d:0c:2f:72:dc:66:88:45:f7:9c:
                    52:63:d9:12:6d:87:8c:56:9a:bf:37:53:98:e0:4e:
                    9f:68:5d:3f:8f:6c:0c:20:77:3d:5e:2c:15:37:66:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6A:9D:5A:A0:4A:38:5D:17:06:CF:70:6C:DC:DB:C3:0F:42:B6:57
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:68:a3:2e:47:c0:88:4a:b4:8d:15:37:e0:0e:39:d7:5e:a3:
         31:d2:6f:ac:77:cb:0c:15:68:9e:33:36:1d:46:41:59:a0:5f:
         79:75:3a:a0:24:9c:3d:0c:44:97:5e:92:53:15:d9:12:8a:fb:
         39:ed:8c:5a:b2:33:d5:b2:86:2d:f8:9e:f8:71:93:b3:5d:11:
         c8:9b:1d:34:19:cc:94:4b:93:c4:76:b7:d3:e5:89:02:f6:24:
         c8:b2:f1:16:cb:dc:35:61:be:e8:cc:b6:23:57:25:6f:c0:69:
         67:45:87:78:0c:56:df:fb:fd:63:cf:ee:55:42:62:23:8a:14:
         62:b8:46:62:50:1e:38:3c:58:55:41:3a:6a:88:e1:85:a6:b9:
         60:be:e9:7c:79:8d:d5:83:cc:19:94:d7:fb:f3:ee:de:88:7a:
         69:86:3b:5c:40:27:a5:eb:4e:64:06:29:55:5d:7a:3a:15:6e:
         7e:c9:37:7e:da:71:25:5e:c4:29:66:5b:e8:26:70:71:c0:64:
         8f:85:97:9c:ea:70:8d:1c:18:d7:20:4a:14:8d:2e:8d:66:9a:
         7f:2d:8f:1b:ba:78:bf:9a:c7:ea:4c:29:8b:45:a9:61:1e:c4:
         54:c3:70:5e:35:ed:e4:b0:f4:d5:7f:b8:20:98:d6:fa:9b:ef:
         c7:d2:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----