Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File:                     USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier:          7Ktxj93Z8VHT/NqHFAw2Wab2rZBnvj+xxm9WI+3i0Wk=
Subject key identifier:   EC:96:73:E4:2C:32:CA:B8:DA:01:86:68:A0:E8:8C:12:F6:09:8F:3D
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer:       /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial:       01962F3D810D0089C076E53CDD37E314C909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number:          117C
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=)
                          2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: 4WUehQL+VaksZfx728qyn029MJa5BOGyhc9Ce3OjUNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:81:0d:00:89:c0:76:e5:3c:dd:37:e3:14:c9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=ec9673e42c32cab8da018668a0e88c12f6098f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:36:94:54:d0:91:22:18:ed:d7:0c:fc:c3:
                    c3:c2:66:1d:15:1c:38:7e:0b:f3:55:be:24:84:60:
                    74:84:1d:61:8c:a1:fb:5d:b1:fc:14:2b:fa:e9:f3:
                    5c:35:cd:ae:6e:65:4e:cb:1a:a9:65:2b:4e:cb:09:
                    1f:9e:20:4e:fb:41:1b:ad:0d:25:9f:f6:2c:5f:44:
                    66:9c:50:3b:b8:e2:b6:da:9f:09:86:10:b0:a7:55:
                    12:eb:5e:62:2a:b6:92:9e:06:99:71:27:0e:9b:f5:
                    54:a5:d7:36:70:30:c1:82:8f:8c:af:6f:ca:00:b6:
                    34:4d:e2:f2:b6:50:0d:96:84:eb:62:fb:3b:c8:e0:
                    ef:fc:c4:0a:67:16:9b:7f:cb:a5:a2:ab:58:cd:41:
                    18:d7:03:ac:e8:c3:e1:c0:23:5d:66:45:db:b8:5c:
                    21:2c:9b:33:6e:f7:83:9d:19:b8:dd:41:f6:49:43:
                    bd:ce:69:c4:6f:58:62:a2:20:4b:90:c2:80:ff:6f:
                    cb:31:4d:0f:7e:a6:66:97:8b:88:26:22:87:e2:ac:
                    a7:fc:f8:43:9a:79:32:72:c3:3d:c0:9b:40:04:de:
                    f1:f1:e6:fc:6b:cd:62:4a:28:42:02:b4:11:16:98:
                    42:4b:2c:c7:42:4e:7a:ad:b3:93:91:e4:aa:70:9f:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:73:E4:2C:32:CA:B8:DA:01:86:68:A0:E8:8C:12:F6:09:8F:3D
            X509v3 Authority Key Identifier:
                keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:77:a6:24:ba:19:91:18:9b:53:64:ae:35:25:89:d7:11:3b:
         55:0c:e3:1d:c5:95:2d:84:66:1a:f6:04:e4:1a:9a:7a:75:22:
         b4:34:61:a7:3d:13:b2:d3:53:17:73:c2:a8:92:6e:6d:96:a3:
         4e:1a:4d:de:43:0c:99:d2:ca:05:e7:87:8e:87:34:cf:c2:ac:
         d1:3a:5b:52:68:ce:d8:ae:9d:d6:e8:75:88:6c:db:be:84:18:
         4d:bd:93:4d:69:2d:0e:6c:c5:de:2a:37:1c:10:6f:21:47:59:
         2b:c7:0c:b5:b1:fc:00:6f:b7:37:d3:5d:b9:f3:da:f4:2d:bc:
         2e:6c:14:64:70:41:72:cf:e0:49:55:c1:2e:cd:dc:6e:cc:47:
         4c:4e:5f:c0:b8:7c:1a:4a:88:28:3f:a3:35:fd:40:72:dd:79:
         83:87:c2:1c:4d:84:b0:60:cd:2c:30:af:af:39:c3:4d:64:86:
         01:2d:7f:15:92:1e:cd:8d:91:39:78:1b:28:fa:42:9b:d7:07:
         1b:c3:6e:22:03:93:38:03:c3:16:17:f3:40:92:50:7b:21:87:
         cb:0c:03:bd:d5:84:5b:f3:fb:66:5b:1f:ad:6e:ac:f1:d1:97:
         44:c3:8e:fd:81:c2:bc:57:fc:ad:3a:76:6e:07:e0:ff:4c:f6:
         33:bd:2a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----