Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File:                     oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier:          ZiAmZqXja5VKYkPqdgzMbELVzRx0foKwjZ2PxUEKXxg=
Subject key identifier:   B5:C2:F8:4F:B3:0A:39:BF:4B:A2:99:8F:98:F3:07:FE:2E:D1:06:47
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer:       /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial:       01962E2ACC1E7C372F72FFE2E1CD3047585B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number:          05C2
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: hnLlF72Gey1RhDc5w20W5CDAULo.roa (hash: shW0FHDTxcWsn5y+FQlRP0Y7mcQwz41mLYft4nrAmSI=)
                          2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: nhHsAQ37PCoUkXbyd5BV/fFRBDa04HrBvYnzSwWnfI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cc:1e:7c:37:2f:72:ff:e2:e1:cd:30:47:58:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=b5c2f84fb30a39bf4ba2998f98f307fe2ed10647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:12:68:2a:64:b5:cc:7a:f4:27:a3:1a:55:
                    74:6d:4b:5b:f7:67:4a:60:0f:d8:13:28:ae:e3:b7:
                    31:de:ba:1a:78:cd:e9:65:21:8e:c0:00:65:d8:94:
                    29:6b:80:93:e7:27:2f:85:24:91:19:2d:4b:7a:c3:
                    bb:bb:15:67:5b:a6:c1:c9:ec:33:53:f9:df:a0:b2:
                    de:77:43:60:9b:94:fd:d3:a2:b9:a1:47:45:57:31:
                    a9:1a:e0:36:56:80:8c:71:ad:ce:a7:63:d1:1c:8b:
                    84:63:96:5b:77:c8:cd:4e:aa:d8:27:52:f4:9b:97:
                    cc:43:d2:c8:56:cb:1f:5c:74:8b:41:ed:52:53:6d:
                    4d:41:a4:c4:3a:e0:74:aa:47:8b:b9:c1:de:5d:84:
                    32:d2:f5:5f:88:be:1a:2e:2d:11:a7:9c:c3:b2:2c:
                    cd:18:dd:f1:e3:79:5d:82:b4:83:1e:cd:49:cd:af:
                    03:46:b9:a1:36:45:9c:ed:dd:46:92:51:f0:63:2d:
                    38:29:bf:f9:67:0c:94:f6:d8:99:c2:bb:bb:31:11:
                    33:02:3b:1b:69:06:3f:b2:4f:29:fc:8d:23:9e:65:
                    fe:4f:b4:7a:34:6e:fd:dc:56:88:18:80:7c:95:97:
                    4a:84:05:77:84:d0:76:df:0f:2d:cb:34:c1:25:f7:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:F8:4F:B3:0A:39:BF:4B:A2:99:8F:98:F3:07:FE:2E:D1:06:47
            X509v3 Authority Key Identifier:
                keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:2b:58:1a:ee:89:46:d7:45:1b:38:36:e9:69:5c:b2:fb:af:
         dd:15:43:32:ec:7f:e7:d6:36:f5:6e:26:24:fa:2b:cd:5c:e0:
         da:c6:96:1e:3e:d6:2c:94:b5:a2:a9:f8:a5:06:17:8d:84:54:
         27:7c:12:3f:66:68:e3:84:f1:64:41:10:c4:ee:d7:02:e2:7d:
         55:a6:39:51:5b:06:f4:2a:0c:b9:26:e2:33:7a:f8:60:60:7d:
         53:18:4c:d9:20:19:2c:eb:f8:51:66:39:26:e6:74:e8:d0:7c:
         93:9a:b0:ea:32:a6:71:75:e6:c9:f8:1c:09:7e:b9:7c:17:78:
         ef:37:67:28:10:d7:4e:a3:92:84:79:83:26:8b:f2:92:e4:14:
         20:e4:f2:c5:71:c7:5e:69:d0:c2:2a:74:68:73:e6:9c:44:35:
         96:66:99:8e:a7:eb:af:0a:d7:cd:96:af:17:99:99:0b:b2:ea:
         35:7c:35:7b:79:48:57:7a:d9:9e:ed:3a:77:12:0a:2d:76:05:
         62:93:ab:69:5c:6a:f5:08:b3:63:77:df:3e:9a:4e:30:e0:be:
         0d:4b:29:e8:72:72:2e:b4:17:dc:63:93:e4:7d:d3:33:68:cb:
         8e:5f:28:7f:51:e7:a1:d1:42:51:15:80:31:bb:9f:18:07:2b:
         ce:a2:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----