Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
File:                     oLalsaFMhtTPtGxOhuzUBmgEzJA.mft (raw, json)
Hash identifier:          wusO+j67Jtsn/lfa+V+F4IJ3oyWyNSjwZW+bTeQw1Zk=
Subject key identifier:   29:3B:7A:BD:FF:E5:BE:0C:2E:33:D3:4D:14:8C:66:3F:07:25:D7:37
Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Certificate issuer:       /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Certificate serial:       01962F3D789EAC6899DA4BDAC22FE74BB7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
Manifest number:          0506
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa (hash: FrFfJHN2MqG7rUNbBMB2RUeLHgQ0eftZ7IS2VaSzx58=)
                          2: oLalsaFMhtTPtGxOhuzUBmgEzJA.crl (hash: huzhUENID64H9U8RBRugJjSK0bxZCJfziDPgrop/Qek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:78:9e:ac:68:99:da:4b:da:c2:2f:e7:4b:b7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=293b7abdffe5be0c2e33d34d148c663f0725d737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:33:74:c5:6b:3e:4e:04:ce:7d:4d:76:ed:91:
                    62:06:ae:0e:10:93:1b:b0:6a:64:b8:11:c7:d2:78:
                    b9:f2:c0:ca:0a:fd:6c:ea:6d:69:53:a0:db:47:b4:
                    12:63:b7:c2:00:57:49:8c:94:83:b4:76:6c:bd:f4:
                    39:57:4e:d1:1a:18:e1:c6:9e:39:09:ed:71:bb:53:
                    11:29:13:51:60:8c:16:dc:4e:df:45:a1:a1:22:b8:
                    91:cd:4e:00:d5:50:16:4b:f1:4e:ae:4c:3d:36:0c:
                    af:47:9c:67:a5:97:71:cc:4b:fd:aa:44:22:f5:d7:
                    f1:2c:ce:f1:d8:b8:31:92:84:fb:6b:01:f6:74:3c:
                    f4:aa:f9:ef:fe:f3:71:40:41:4f:d2:78:9c:59:45:
                    79:58:4a:ce:fa:8f:25:9e:67:b5:f6:29:4b:ea:cc:
                    a6:c6:b9:34:c1:ac:df:81:2a:21:31:4a:f8:6c:6c:
                    0a:0e:23:e1:3c:26:3b:8f:91:76:f5:c4:01:5e:0b:
                    07:19:2e:46:d4:2a:54:44:49:3b:de:9c:f9:85:08:
                    73:80:43:6f:b6:4e:68:ba:aa:2e:c0:3f:50:11:bb:
                    d8:89:bb:c0:08:32:d6:57:da:94:33:ef:13:f8:b3:
                    4e:19:54:5a:89:d5:a7:eb:d9:2d:ca:fb:59:91:34:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:7A:BD:FF:E5:BE:0C:2E:33:D3:4D:14:8C:66:3F:07:25:D7:37
            X509v3 Authority Key Identifier:
                keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:60:d3:20:6a:64:6c:16:78:95:2c:a6:19:db:64:1c:8a:
         ad:44:0b:c0:c7:78:22:b6:2a:11:58:26:2c:00:54:6b:91:84:
         b0:aa:d7:4c:aa:f8:60:71:40:99:5d:cd:23:83:5e:8d:62:5d:
         1d:db:75:2c:91:2f:5b:10:97:c7:ba:29:0a:38:f7:a5:74:12:
         6d:20:ed:a2:76:ad:cc:25:71:76:24:ee:f9:4b:92:f0:8c:41:
         e3:15:2c:b1:07:e0:a7:eb:ec:2a:8f:3c:e6:f2:d2:90:62:9b:
         cb:f8:81:b1:f5:33:82:c0:ea:3e:51:70:01:cd:c8:2e:20:69:
         9e:51:3f:9b:77:e3:2c:5d:c8:e7:0c:19:2a:5c:11:08:98:93:
         0f:44:d6:5d:ba:0d:36:72:42:62:38:48:2d:74:d7:c7:9e:3a:
         96:8b:c5:50:ed:76:f8:d3:77:c8:29:66:e3:6e:7d:f4:68:4e:
         f7:05:ef:50:68:c6:e1:33:c8:2f:b0:2e:0d:a1:59:16:c9:df:
         cd:22:fa:14:27:8d:ff:bc:3f:6f:0f:9d:0c:2a:72:d1:04:62:
         72:f1:a3:49:d8:10:69:0d:0f:f6:e5:8f:e1:e6:1a:13:c1:71:
         29:fa:bb:7d:60:8e:8a:b7:18:6c:bb:59:c5:bc:d4:a0:c2:7e:
         41:36:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----