Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File:                     0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier:          qTW0fKisCIJ4NHMMvctfAh6xiJ1Es/UhTeOwDttVZCc=
Subject key identifier:   35:3C:07:11:AA:ED:0E:8B:98:27:1E:2F:D8:C8:1D:54:30:13:07:C3
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer:       /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial:       01962E2B2F9F32A05E1FFB2DC82A7E265587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number:          0105
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: vFPzFwn6nmmwCzKosyHgNs2Jn3ZftFIRcbTBqYDhI3w=)
                          2: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=)
                          3: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=)
                          4: OFO40pbXY33B4_R6m0vxzmJtlaE.roa (hash: OKgJmR90SzKnzfJWjgu0f1y4g1wd7HW3UjBatZfs5A8=)
                          5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=)
                          6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2f:9f:32:a0:5e:1f:fb:2d:c8:2a:7e:26:55:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=353c0711aaed0e8b98271e2fd8c81d54301307c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f7:e2:fd:e0:fc:ed:71:de:da:d6:ae:59:aa:
                    6f:ec:3b:2b:ec:7a:3a:26:a4:ad:0d:1d:9c:3b:e4:
                    46:92:96:62:36:ba:77:ec:ac:f8:4a:cf:eb:cf:13:
                    46:08:c9:26:fd:a0:22:cd:c3:84:5a:d1:64:d0:e9:
                    21:fe:14:7e:a7:d4:5c:97:af:8b:66:a9:75:88:14:
                    8c:0c:98:94:25:35:42:84:a3:b1:05:9b:88:ed:6a:
                    87:e7:df:f7:17:1d:c2:76:fd:9a:36:9f:80:18:bd:
                    41:92:fd:95:1d:08:c5:02:7c:4f:f4:4d:80:09:87:
                    8d:58:65:3c:72:01:85:8b:27:e8:fa:52:74:d1:02:
                    79:78:c9:34:37:bb:b5:00:9a:70:47:00:e2:e5:b1:
                    95:a3:88:c5:61:9a:d2:83:4a:b7:6c:ff:5b:2a:55:
                    69:6e:b0:46:62:5a:ed:b4:ab:2d:24:dc:64:15:97:
                    d0:a1:be:33:be:4f:94:cb:de:b3:c7:89:33:7c:2c:
                    31:76:23:8e:66:a1:b8:1a:1c:45:72:42:23:ca:28:
                    a0:89:f4:db:8a:d7:16:73:b3:be:58:cf:c1:2b:f1:
                    cd:f0:ba:cb:bb:79:75:7d:3a:c4:16:d8:b9:72:c4:
                    a9:4a:0f:77:db:73:3b:c1:6e:2d:9c:76:4f:b5:4b:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3C:07:11:AA:ED:0E:8B:98:27:1E:2F:D8:C8:1D:54:30:13:07:C3
            X509v3 Authority Key Identifier:
                keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:76:13:da:3c:b1:3d:31:b0:2e:88:5d:e5:c3:fc:7d:79:
         b3:c0:8c:c3:52:0c:35:61:8d:26:78:56:c0:bc:5d:19:80:af:
         30:91:b4:c7:72:33:24:1a:ff:bd:f7:54:1c:58:71:c3:ba:ac:
         fa:54:f6:92:0f:ef:45:bd:55:90:f6:64:d1:1c:b8:a0:43:82:
         c1:6d:9a:f9:91:27:e9:86:db:f3:c5:6d:a4:d9:79:04:3f:15:
         18:40:9d:1d:87:fb:fa:cf:b9:ae:4f:de:11:46:05:fd:8e:84:
         c6:cb:f9:83:34:1a:89:1b:8f:85:94:10:38:66:34:f6:5c:ea:
         5f:f8:0e:20:61:59:86:4f:83:72:f6:8b:bb:1b:3a:d4:ef:2a:
         62:b0:b5:ac:bb:39:df:75:56:7b:eb:3f:dc:99:5e:33:86:09:
         d8:b2:89:a2:3a:7f:46:c9:1c:cb:14:38:99:08:52:57:27:2e:
         cf:1d:15:13:02:22:b1:ac:49:c6:b6:44:09:ca:e1:b1:12:06:
         f3:ad:ed:aa:62:bf:4b:1d:d0:f1:f8:fd:80:25:09:85:13:0e:
         29:75:3d:85:83:3e:f3:ea:b4:d3:99:c5:bb:79:da:4a:89:bb:
         6f:a9:8c:20:03:43:31:9b:9a:a0:74:28:14:86:4a:7d:23:1d:
         a0:9e:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----