Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File:                     oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier:          ONg5xO8nWIhP1M/1UDV3IoABqH8nXqmmKY329Yo17Eo=
Subject key identifier:   D0:58:8E:89:99:61:53:AE:4D:B8:BF:89:61:1D:F0:FC:DC:06:6B:50
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer:       /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial:       01962F3D52EF42FE411E63B9AB26DD6599B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number:          13ED
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
                          2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
                          3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: 3JpBkpQGMoi5xhcs8jAU8Hw4yZndrk4YEmu/hCmCwVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:52:ef:42:fe:41:1e:63:b9:ab:26:dd:65:99:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=d0588e89996153ae4db8bf89611df0fcdc066b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:7f:5c:85:e8:7d:5d:de:25:46:f3:2d:53:
                    90:70:f7:1e:20:fb:ba:5c:08:fd:d7:50:a2:15:a6:
                    33:00:b1:89:8a:b7:21:68:19:a5:81:d8:e1:e9:69:
                    6d:4d:ac:d2:0c:1e:28:bf:9f:4f:32:a7:96:d2:f1:
                    81:b4:ad:35:f7:7b:9e:26:67:62:34:a7:c1:7e:1f:
                    2e:bc:6b:79:ad:86:10:2b:a3:da:10:43:ea:c3:ab:
                    19:69:2f:20:e3:1a:bb:17:5d:a7:48:75:50:bd:1c:
                    56:1f:00:36:d0:d0:d6:0d:8c:ee:03:8c:d4:1d:2d:
                    0b:47:51:a4:e3:d8:ae:b5:d3:a1:39:36:a6:cc:c5:
                    8b:4c:2f:76:1c:2c:0f:89:90:ec:c9:ce:93:b1:18:
                    a9:62:13:68:49:29:ae:e6:f7:a4:b8:28:ed:67:ff:
                    e6:4b:18:e6:2f:e6:66:5b:b8:c6:c7:c0:93:be:f9:
                    36:ad:2c:03:f8:bd:0c:72:3b:17:80:da:06:8a:8e:
                    08:48:46:26:57:0a:fd:b9:ae:ea:63:d7:4b:d5:00:
                    25:3e:02:9f:e8:94:f4:6e:f0:f2:d2:ed:01:c3:ea:
                    ad:39:de:99:57:93:7e:9a:9c:50:a8:89:ef:89:5e:
                    6d:0a:07:93:20:e2:d9:31:3f:19:fc:d8:3a:86:5e:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:58:8E:89:99:61:53:AE:4D:B8:BF:89:61:1D:F0:FC:DC:06:6B:50
            X509v3 Authority Key Identifier:
                keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:55:82:d5:da:26:ce:48:14:ed:93:24:a1:28:1f:17:8f:
         c3:8e:ca:4b:24:97:7d:b1:d1:23:8a:cf:e4:7b:90:6a:93:ed:
         60:49:18:a3:44:51:e4:10:85:7a:4d:39:9a:78:9f:11:0a:ff:
         12:75:42:58:4b:fa:34:fb:40:9d:a8:86:06:2a:19:55:35:ae:
         94:4f:fe:c2:31:c7:71:fc:27:84:ce:79:fd:04:ea:65:ea:34:
         24:98:a3:5d:e4:54:a3:0c:85:ce:10:42:fc:4a:2f:68:a5:bf:
         5a:ba:bb:79:1a:56:e8:01:23:2c:3f:6c:4a:21:cf:a3:27:5c:
         45:fa:50:d6:fb:fb:c9:1b:71:db:d3:5a:ee:58:4b:2d:c9:93:
         58:c8:80:b3:f6:08:ca:a5:b7:f1:74:e9:07:66:f9:59:85:e5:
         b8:82:9a:4c:72:13:d1:e2:65:b6:e4:cd:87:08:b9:c7:97:bb:
         34:c5:ca:12:a4:b6:89:a2:4e:9d:34:9a:55:dd:64:77:37:0d:
         17:40:f3:b7:65:6e:67:21:3d:0c:8c:de:b3:e1:23:22:35:64:
         36:27:a1:ac:bc:5c:a8:a4:72:e5:48:77:82:d8:c8:4e:e1:b1:
         73:e3:3a:6a:e8:4a:66:1d:54:86:08:23:38:6a:19:9e:ac:e0:
         a0:02:d0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----