Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File:                     r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier:          chpxzEUN2OoIqZ8yimSTKyCCgvDqMQefqd/i+4M8koE=
Subject key identifier:   38:DB:54:F7:EE:24:F3:8C:80:B9:E0:F0:0B:63:B4:69:B7:9E:F4:06
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer:       /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial:       01962F069CC13E4D691ECE69CE783133F8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number:          13C0
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=)
                          2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=)
                          3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=)
                          4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=)
                          5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=)
                          6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=)
                          7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=)
                          8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: hucuuBEsKTsajC9L7xeo7b2GouXekjq0GLSRNbVSWrE=)
                          9: xJMh3j3GpShYCJoYtsAE4dqx3WU.roa (hash: k38ffw08ruTV3gYvZegSeTLOSKho9qw6Tw7LEO7WSjk=)
                          10: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9c:c1:3e:4d:69:1e:ce:69:ce:78:31:33:f8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=38db54f7ee24f38c80b9e0f00b63b469b79ef406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:73:89:f6:ea:e9:46:20:27:1b:15:87:f0:57:
                    cd:aa:2a:4c:33:45:6d:48:55:0e:51:db:ce:84:f1:
                    4a:ce:be:e5:df:ac:d2:21:03:f5:78:c7:df:13:bb:
                    bd:1f:87:9a:ff:54:20:0b:51:b8:38:fa:fa:c2:ed:
                    42:45:ac:7d:14:de:ae:5c:67:24:a6:ed:41:51:5c:
                    bf:3d:55:69:0b:fa:6c:c7:bd:65:d7:af:5e:c1:26:
                    fb:9f:84:29:84:ed:a8:14:4e:cf:0b:b4:c2:b4:e2:
                    80:3f:37:7c:56:81:da:07:e4:29:92:eb:b5:43:06:
                    38:a2:b2:0c:f8:eb:fb:98:18:e3:01:df:5b:79:56:
                    69:a3:bc:93:99:06:d4:f9:25:68:cb:05:9a:03:c6:
                    a1:8b:c2:ee:9f:97:6c:32:d8:49:37:0e:e3:b6:21:
                    1a:91:48:41:c7:13:d7:e2:93:3b:bb:75:39:7f:d3:
                    14:f7:74:f7:d6:9a:70:de:be:0f:fd:bc:66:56:10:
                    a2:3a:60:ab:a8:1f:3b:6a:02:92:5f:8c:93:44:90:
                    f1:0c:d5:06:18:80:89:90:98:fe:77:c6:b8:b2:6f:
                    46:52:4e:af:9f:8c:91:8a:2f:7c:79:6c:7f:fc:ae:
                    f5:5d:7a:b9:5d:4e:2f:ed:ca:0e:7c:6b:92:66:14:
                    93:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DB:54:F7:EE:24:F3:8C:80:B9:E0:F0:0B:63:B4:69:B7:9E:F4:06
            X509v3 Authority Key Identifier:
                keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:4f:13:0c:27:16:da:af:4c:da:d5:7b:25:4a:6a:f4:be:
         2f:12:db:cc:9b:36:45:28:21:08:b1:eb:17:74:15:06:fb:91:
         37:80:56:4c:1f:cf:dd:52:77:a5:3c:26:56:89:0e:63:f5:34:
         84:a0:bd:67:3a:49:f7:1d:d6:9d:5a:8f:52:e7:20:93:bc:17:
         ad:6e:95:94:a0:33:27:c2:b0:06:a9:93:4f:25:e5:10:aa:2f:
         55:1d:9d:b0:ab:4e:90:1b:bf:a9:a3:45:1f:a3:62:20:b8:fe:
         65:ba:e2:20:04:3f:7f:a1:31:6d:b6:b5:ea:43:9a:71:0e:22:
         b9:09:87:f8:3f:8c:8f:e8:a6:d3:82:2c:52:6d:0e:71:e8:b1:
         c7:e6:c4:0f:a2:52:3b:e0:2e:f0:86:42:e5:36:a3:13:7b:c9:
         65:4f:0c:2b:bd:80:c6:e7:f5:24:dc:49:f0:9c:79:f8:ce:ba:
         d2:9d:82:dc:aa:69:b6:5d:3d:4b:b5:50:0e:2e:a9:72:67:43:
         79:3a:89:b3:5d:16:5c:8e:7d:a4:c9:52:8e:5d:25:1f:b1:f7:
         e8:ab:e2:24:8b:88:52:81:d8:12:b1:91:8e:5a:3e:85:fb:7b:
         21:77:2f:32:c3:6c:df:11:a6:82:32:28:2f:3f:4d:71:44:08:
         50:bc:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----