Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File:                     oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier:          XZdsNbUTm53KeOX6EsDvp2xLFdJffj6sqZMN7hHrXgc=
Subject key identifier:   A5:E0:0C:65:55:DC:24:23:3B:ED:43:6C:8F:28:EE:61:F9:62:4F:06
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer:       /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial:       01962F06F82BF85603A780B6823787D692CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number:          0AB3
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
                          2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: /dPDOf7E1KvqXny9zPjDf4OdHrG8g4QAa0q0sqen93E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f8:2b:f8:56:03:a7:80:b6:82:37:87:d6:92:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=a5e00c6555dc24233bed436c8f28ee61f9624f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:43:06:50:92:a7:85:31:91:d5:34:e7:45:
                    51:91:cb:ec:62:06:84:35:40:72:51:c6:a3:fa:a1:
                    0a:5d:af:f1:5d:d6:f3:d3:bb:62:70:fd:7d:04:7b:
                    ee:d8:54:47:93:8d:ee:79:44:23:f7:2c:32:5e:9e:
                    03:70:8e:47:8e:cf:b4:ba:bb:da:23:71:50:64:8a:
                    8e:6a:f1:52:e2:f8:0f:5f:a9:67:ad:eb:93:a5:7c:
                    ed:03:cc:eb:06:05:2b:83:22:16:66:62:ef:1f:4b:
                    0b:67:09:61:17:74:25:4e:db:1d:22:d0:f2:39:97:
                    96:c7:8a:b1:a0:81:e9:77:fd:cf:76:a2:7b:1a:ef:
                    dc:99:01:9e:45:07:c2:59:05:7f:fb:2c:61:b2:ce:
                    a4:76:d7:bf:16:c5:e3:22:58:7d:d3:20:71:a7:a4:
                    b3:0f:e1:44:dd:27:ca:a7:a1:6d:79:04:6b:fe:bb:
                    d6:4a:7a:28:df:a8:36:30:7c:21:9b:c8:d2:52:10:
                    c5:a2:bd:81:9f:cb:c8:d8:23:c8:b3:19:e9:2c:24:
                    bf:d5:b1:9f:60:cf:b3:86:d5:9e:5b:d2:8d:83:8d:
                    07:36:bb:49:4f:c8:69:bc:cc:96:ae:66:da:27:7e:
                    0d:ea:7a:2b:69:97:8d:cb:5b:51:59:54:a9:95:4c:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E0:0C:65:55:DC:24:23:3B:ED:43:6C:8F:28:EE:61:F9:62:4F:06
            X509v3 Authority Key Identifier:
                keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d1:95:fa:11:aa:ee:d7:ac:06:e0:a7:f7:21:7d:f9:6c:ca:
         85:48:cb:33:ee:3b:f9:3e:6e:0b:50:14:9a:a9:9d:fc:a9:8c:
         b8:94:95:d3:97:3b:57:5f:ba:0c:51:33:d7:ff:dc:45:d4:88:
         f3:2c:e0:7f:60:33:99:72:34:f7:76:e9:42:64:ec:50:02:48:
         fc:ee:4e:6c:64:04:4d:4d:b2:b2:1a:bc:c5:61:f9:fb:6b:4b:
         ec:b9:d9:d3:a9:1d:0a:49:48:b6:7a:6b:d5:b6:3d:8e:5d:05:
         db:c9:7a:de:f3:ca:45:a9:e1:43:1f:91:4c:69:ba:20:c4:1d:
         9b:50:59:d6:e3:f3:6e:c2:59:94:6f:18:ba:97:a1:db:30:ee:
         c6:70:a1:fc:c9:28:72:94:ac:ec:28:54:74:98:9c:a2:bf:5f:
         71:77:73:c7:d9:80:48:d1:1d:f8:1a:56:ac:38:91:0a:66:65:
         71:81:ed:4e:5f:c8:98:8f:37:b2:26:f5:ca:e4:c5:77:78:c7:
         87:97:5f:46:6c:37:25:e8:02:ab:1f:a8:b8:03:ee:fb:c9:01:
         95:55:dc:00:21:ed:e1:e0:37:62:d4:16:20:ab:35:e5:75:84:
         5b:17:7e:07:b0:5c:3d:f3:22:10:3c:3e:6e:7f:32:d4:53:18:
         6d:1c:73:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----