Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
File:                     oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft (raw, json)
Hash identifier:          nRwi/EgAkaf7tE2VQFUV2eM74AhgNi1/AqXFj4vKJxU=
Subject key identifier:   30:28:1A:9F:0F:36:EC:D8:D9:E7:C9:22:2E:74:EE:0D:73:C6:3B:6A
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Certificate issuer:       /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial:       01962FAB5B0E5D401B2131816E02EC298C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
Manifest number:          05F4
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 4C0OXayjBs5jaM2cyHhqCBjs15k.roa (hash: Z1AW2ktKl7nH/pif3t4jJj3aESh4kYBCdiYTjw37+0A=)
                          2: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl (hash: 7Ld0hfC47s1B9ix8IrC/+rJOHXWQJlK6cl7a9ZPwd0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5b:0e:5d:40:1b:21:31:81:6e:02:ec:29:8c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=30281a9f0f36ecd8d9e7c9222e74ee0d73c63b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1a:c5:a5:5e:7f:7b:83:f8:17:8e:f5:ea:ec:
                    58:1b:e0:7a:2e:19:34:0a:0c:9b:dc:1e:00:b1:dd:
                    7a:8d:18:ae:78:46:8a:4a:b6:71:a9:4c:fe:ae:1e:
                    fc:2c:b9:c2:ef:92:0d:d6:63:ef:3b:57:f9:68:a1:
                    5f:08:35:be:14:52:b9:d0:a3:b9:43:68:5b:63:0c:
                    63:87:45:2f:d9:35:e6:ab:c7:2e:e1:ca:14:69:d6:
                    2e:ee:64:63:c3:44:77:8c:cb:22:2c:04:1d:90:70:
                    f9:8c:07:67:78:3f:57:5d:d8:7c:fe:96:84:0c:df:
                    80:54:fd:11:de:a3:4d:c2:1c:08:e2:98:9e:54:26:
                    a4:cb:02:74:17:9e:04:d9:35:8e:f4:45:7d:9d:57:
                    fe:3b:d4:3d:af:3b:14:c0:c9:91:ed:13:dc:cc:3d:
                    71:f1:30:ee:5b:96:e2:c3:56:98:6f:e9:4e:b7:b1:
                    14:04:b4:ec:fc:ae:2e:4c:24:73:b6:74:b7:c1:25:
                    8d:a5:77:38:88:c1:66:76:56:d1:ec:77:10:cb:8a:
                    75:ad:b9:49:28:fe:71:a3:22:89:35:83:85:f1:ff:
                    d3:1b:24:f0:bb:11:ab:6a:6f:c2:d1:86:14:dc:e9:
                    9e:46:9f:ae:b0:6a:56:6e:19:5e:26:54:49:a3:34:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:28:1A:9F:0F:36:EC:D8:D9:E7:C9:22:2E:74:EE:0D:73:C6:3B:6A
            X509v3 Authority Key Identifier:
                keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0a:18:9e:14:c5:1b:93:5d:9b:a7:b9:dc:94:01:3d:a7:e2:
         9b:62:0c:0f:8a:46:b1:c8:cd:a0:77:72:a6:0b:f1:92:f5:fd:
         26:fd:1a:83:4e:44:3d:60:ed:cd:6d:7c:a5:8b:18:d7:d1:15:
         fc:f5:df:a2:84:7f:9a:e4:3e:d2:21:0a:e4:0e:fe:37:29:df:
         61:8f:48:4f:2e:3c:ea:18:a8:8c:ef:73:8b:09:b2:0c:92:cf:
         82:d9:09:2d:0c:03:f5:ba:35:bc:c2:1f:5e:0f:b8:60:de:57:
         a3:fb:ab:1f:fe:0f:75:1b:03:e6:60:ab:ce:42:6c:d6:7e:36:
         a8:ec:b3:80:e9:d3:a2:fe:ee:4e:01:b7:41:93:53:56:ce:b0:
         1d:33:de:54:da:20:66:a4:42:f9:6e:37:9d:81:1f:2d:0d:d3:
         a6:9b:47:89:bc:b7:4c:de:e1:41:5d:27:60:9c:27:19:9f:36:
         6b:4b:4f:a1:c1:17:4b:c9:e0:1f:2e:16:f9:93:a6:b8:60:fc:
         0d:fa:86:73:ec:d9:00:40:6e:37:27:69:8e:5f:88:75:0a:73:
         11:b9:dd:63:31:18:e8:90:0f:96:50:ce:cd:9d:6e:4b:e7:0d:
         58:b1:93:b5:bf:63:97:2a:ed:12:f4:2e:ac:1c:e1:ac:5a:f6:
         a3:ea:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----