Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File:                     o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier:          ATxQ8QIMY2uqi8n4Kjj9rA9V1LnEiPSalUxW+gBh/QQ=
Subject key identifier:   99:9D:89:FF:E8:CB:3D:DF:BB:0B:8E:2C:E9:97:DA:B8:46:35:FC:8C
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer:       /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial:       01962E61DDC4D1300FB27112AADF640BE1F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number:          0EBD
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=)
                          2: OUfSr-obqja2htAQodOdBecQwpM.roa (hash: kYEhvKSYnyjKX9d+IlHmBvClGZqsfdLMn/6qKgbrz/8=)
                          3: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=)
                          4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: R0KswQOWN+bsHCOC2QJlPk5jUx9wn4L+FkJSywWM1lc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dd:c4:d1:30:0f:b2:71:12:aa:df:64:0b:e1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=999d89ffe8cb3ddfbb0b8e2ce997dab84635fc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:e9:61:d7:f1:16:b9:70:18:db:91:cf:76:
                    1c:cd:63:70:0a:45:eb:6b:2a:55:d1:f1:6c:88:cf:
                    13:58:6c:b9:b0:0b:e8:6e:9e:b6:92:94:2f:f7:cb:
                    24:f3:93:46:9f:dc:95:bd:49:e3:9a:3b:25:fc:da:
                    1a:7c:2c:fa:ff:31:f1:c9:1a:64:c6:b5:83:bc:ae:
                    b9:da:74:d4:b5:81:f3:a7:8a:4b:aa:39:dc:76:e5:
                    f3:5d:57:09:c0:13:aa:b8:7a:c7:b9:76:8c:91:31:
                    03:bb:d2:66:fc:79:89:d3:55:ad:2f:ad:d7:49:e0:
                    9a:0a:c2:8e:e8:6c:6f:27:7f:9f:00:71:c6:6e:ee:
                    d1:66:80:85:28:e6:1f:91:d5:8e:48:e8:78:70:73:
                    46:de:10:4c:ef:b5:f1:27:ed:2b:28:8a:36:af:63:
                    07:22:d9:fc:53:8b:9a:9c:b7:3d:39:c4:2e:8f:7b:
                    37:66:45:7a:83:b9:57:c1:0b:de:29:65:5b:d7:5b:
                    27:3e:84:d7:e1:ac:b7:d0:d7:6c:61:f0:65:4c:c8:
                    8d:4f:04:0f:03:f4:2b:8c:86:85:26:6e:3e:72:33:
                    5e:21:5e:2b:2e:c0:77:c2:1e:6b:69:82:a7:47:ae:
                    1e:58:bb:80:5c:31:c8:77:89:1a:f9:45:71:4b:03:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9D:89:FF:E8:CB:3D:DF:BB:0B:8E:2C:E9:97:DA:B8:46:35:FC:8C
            X509v3 Authority Key Identifier:
                keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8e:97:6a:95:b6:13:22:d5:4f:aa:ce:b5:96:ee:27:e3:80:
         8f:aa:86:4d:35:b4:0d:ba:71:b4:86:cd:f7:0b:ab:da:5f:12:
         ca:17:90:01:75:e7:66:9c:36:8c:59:d2:39:d7:24:14:0e:6c:
         8b:83:22:e3:67:ce:a5:96:ba:21:f3:59:e9:ec:04:13:af:54:
         5a:fa:aa:8c:ab:21:06:07:b4:a9:72:b6:f5:25:b0:73:38:fa:
         db:1c:7a:3e:16:05:72:2a:4b:90:e7:97:99:2d:d7:21:92:80:
         ab:b3:70:69:e2:c3:d8:e6:63:b5:c2:35:69:8d:a0:5d:8f:f1:
         a2:93:31:c6:11:d2:9f:7c:59:cb:1c:34:f0:ee:3a:b8:55:04:
         6c:e4:5f:02:3f:3f:0c:fe:b1:be:72:f4:7f:6f:0f:70:c0:41:
         c6:06:12:00:d0:09:02:58:b6:64:15:97:ad:54:e8:18:66:01:
         8d:ba:0c:cf:db:82:75:5e:db:1a:3b:04:8b:07:cb:d8:2f:e8:
         67:96:4a:6d:cf:a7:ce:47:2d:b7:ac:74:c8:50:16:2e:aa:17:
         ac:73:80:9d:55:b3:71:26:8c:68:85:6f:fc:e5:34:13:9c:21:
         6a:5f:5d:bd:fb:ce:a8:9d:65:db:f0:5c:ed:9b:23:47:1b:48:
         14:6f:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----