Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File:                     oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier:          WN1G9L6vnzffKl4ROvbxxg6KoEMNGhKjGvZQdxUXS4k=
Subject key identifier:   75:B5:A0:66:3A:DF:34:54:D2:50:68:C7:CB:CB:58:42:37:9F:29:55
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer:       /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial:       01962E98A59FAAFE99D5447836E50954C0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
                          2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: rOAGC3r/Xq/MM4BXhsq6IPppAXEpDQt5PTT23jO3dCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a5:9f:aa:fe:99:d5:44:78:36:e5:09:54:c0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=75b5a0663adf3454d25068c7cbcb5842379f2955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:49:dc:03:1b:f3:4f:b7:1f:7b:c0:64:a8:
                    5d:8d:e1:da:a7:70:d2:c7:52:05:73:8f:00:62:05:
                    e9:5e:97:34:08:9c:3c:09:ad:66:c9:fc:0c:04:47:
                    a5:3e:43:a0:c1:6d:0c:53:c7:57:72:e8:ca:40:93:
                    e8:b2:38:6b:fb:97:56:3d:9c:56:c0:ff:fc:ba:81:
                    64:b0:21:8b:3f:70:e8:32:22:80:7c:01:d1:fd:d6:
                    c4:0b:c4:29:4c:98:13:89:7c:09:67:51:19:bd:cc:
                    e5:0e:f9:a3:00:27:d3:43:54:e1:25:ba:37:6d:ff:
                    d4:a6:33:0d:fc:97:10:71:5a:41:ec:5a:f9:de:d8:
                    bb:1f:7e:65:1f:5b:b0:19:5c:e7:3a:0f:92:e5:39:
                    8b:b0:f1:34:3d:d1:f2:8a:6c:b1:6f:3f:e3:c7:a7:
                    6b:f9:b1:d1:f4:0a:c5:1e:db:99:e9:3d:40:71:ad:
                    48:1b:b1:fc:37:da:34:5b:e3:e0:43:aa:f6:32:2b:
                    23:41:34:d5:03:0c:c4:31:1d:45:8c:10:7a:cd:9f:
                    23:62:4f:6d:6a:10:60:2a:93:d2:6c:48:dd:c1:fe:
                    03:c2:db:1a:d2:3b:62:fe:13:e4:ce:86:b2:3f:15:
                    dc:a2:60:03:7f:c0:af:ab:9b:a7:e5:3f:d3:40:d0:
                    8c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B5:A0:66:3A:DF:34:54:D2:50:68:C7:CB:CB:58:42:37:9F:29:55
            X509v3 Authority Key Identifier:
                keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:a5:ce:8e:42:6d:f7:11:f7:6b:e2:c9:e3:2b:11:92:c5:
         6d:88:6d:ba:e3:7c:8a:09:d1:49:32:cb:14:52:b8:8c:a4:05:
         42:af:ef:9f:2f:50:ea:a3:f7:06:dd:f9:12:fe:44:06:16:2c:
         3f:b1:69:a3:ec:69:f9:67:0c:b9:b0:83:21:af:94:26:97:ea:
         12:82:74:84:c2:25:8b:41:ae:aa:0f:bc:dd:82:ab:13:2b:6a:
         97:1b:48:d6:56:e3:37:21:d5:51:17:e9:31:56:50:d5:eb:50:
         fe:67:6e:1d:34:6d:40:84:63:9b:56:09:71:7c:7c:6f:08:6d:
         0e:7f:be:58:c7:3f:43:e8:94:44:98:01:84:30:86:3f:43:47:
         0b:bc:9c:cc:98:95:30:4e:ae:b4:25:ff:cd:76:91:0d:da:09:
         7c:c2:8f:04:d7:b7:03:d0:4c:d5:eb:f5:77:3b:02:c4:e2:e5:
         6f:35:31:6a:98:64:2f:13:6d:52:f5:ac:4e:89:f7:ae:15:8c:
         af:dc:74:dd:f9:df:68:71:ea:bb:7d:e8:c6:af:56:85:8c:62:
         78:b0:28:9c:5b:e6:20:00:fe:08:4d:90:05:4a:a4:0a:e2:20:
         02:6f:17:56:05:da:eb:ce:d1:22:53:62:6c:2c:f9:8e:39:e6:
         46:2c:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----