Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
File:                     oVHP748-2G0RrqutTRngal0HDTA.mft (raw, json)
Hash identifier:          K4JPQUGi1fMRhkPmdLMDyAIdQZHi1uPo2ZkEyskqeAw=
Subject key identifier:   69:14:D3:92:52:83:17:E8:FC:26:E3:F0:5B:9B:E2:B0:01:5F:5D:B6
Authority key identifier: A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30
Certificate issuer:       /CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
Certificate serial:       01962E61A936BBF01EB1C392FC5AB60FBA93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: cURozdoKIb78CE26-wMYNNQ7Uyc.roa (hash: dA/x8vNS0uSWiGck2vmKHPyuh1JLESwmF1FR0wRZ1Jw=)
                          2: oVHP748-2G0RrqutTRngal0HDTA.crl (hash: jxu5f6lxvQWSJcNgheBWPBJ2J1UAyiGK+J5LDWsIQIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a9:36:bb:f0:1e:b1:c3:92:fc:5a:b6:0f:ba:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=6914d392528317e8fc26e3f05b9be2b0015f5db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4d:a3:3e:9b:f2:df:0b:77:d6:6e:9c:7e:43:
                    51:23:9c:c7:9b:c2:d0:80:d9:72:8b:3e:57:9f:c2:
                    5a:3b:44:47:07:60:e4:0c:1c:08:d4:33:4c:69:cd:
                    0e:3f:03:57:72:e8:ea:4e:e3:67:5e:8e:1e:04:37:
                    ca:9a:66:11:8a:64:47:cf:08:c2:00:87:89:5b:3d:
                    da:ce:a5:44:d4:be:68:19:06:55:00:a1:29:17:c1:
                    c0:8c:85:ff:52:68:60:87:72:b4:00:16:bd:3d:17:
                    df:8c:27:f4:3e:58:a8:1d:f3:e6:98:61:d5:c7:cb:
                    be:c0:6a:81:bc:24:18:4f:d6:24:1a:63:c8:ae:b7:
                    d6:e1:e2:88:a7:7e:b0:95:87:62:58:f6:65:22:b7:
                    ae:13:36:a9:98:93:3b:38:4f:24:44:4f:a2:3a:65:
                    cd:c4:d9:3a:73:96:69:2e:09:f9:68:b3:16:a2:24:
                    2f:b9:34:ba:2d:0c:bc:ac:c5:e3:1f:78:1b:d1:ce:
                    1c:db:73:12:c9:21:4e:7e:1c:2c:af:bc:32:0c:5d:
                    f3:bf:d8:fc:f9:e1:75:69:75:fb:06:7e:c1:85:af:
                    c8:aa:15:f4:8e:64:9e:4a:97:dc:28:0b:aa:12:52:
                    7e:2d:5f:e2:95:36:a0:7b:1c:f7:82:6b:1f:bf:93:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:14:D3:92:52:83:17:E8:FC:26:E3:F0:5B:9B:E2:B0:01:5F:5D:B6
            X509v3 Authority Key Identifier:
                keyid:A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d3:8a:55:74:c4:08:79:f0:d0:b0:82:b6:2b:e1:85:67:e9:
         bb:9b:ba:4d:6f:e8:cd:d1:a0:cb:e4:00:4a:e8:25:93:12:22:
         b4:5f:a2:ac:72:fd:c8:9d:3d:a3:5d:89:4a:68:59:31:aa:c1:
         32:a2:45:4a:86:e1:a4:39:e7:07:f7:8e:c7:c6:57:a4:3d:e6:
         8d:40:55:5a:a7:bb:f7:fb:d0:30:2d:37:fb:a4:99:ae:cb:f9:
         8d:9f:ff:81:cd:38:fb:8b:19:02:bc:99:af:d0:d1:07:fb:7d:
         a6:b2:2b:5e:64:ad:9c:38:16:4f:18:a9:10:18:28:d2:e6:07:
         a3:23:66:6f:6c:a4:35:8f:9c:94:c3:fa:a8:59:df:bf:67:9f:
         f3:68:b3:c3:f7:3c:33:a7:15:9c:3c:da:4d:28:a0:39:24:a8:
         e2:c5:0f:b9:38:ee:71:cc:6e:4d:e9:5c:9e:cf:e1:e3:c5:08:
         18:32:f6:eb:6e:bd:ac:26:51:85:14:7a:72:b0:a1:c3:5b:79:
         82:3f:cf:0c:c4:36:a9:c0:da:c7:e0:b3:1f:95:bb:44:26:5d:
         ad:4c:bb:94:0a:7d:72:75:d2:9d:13:de:60:35:f9:5c:a9:a5:
         64:35:7c:43:61:0f:18:49:93:e9:9f:8c:38:12:99:a6:fa:7f:
         46:7e:8d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----