Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File:                     oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier:          cQNaEvKLD4zMALRFMIK/Ii1Nf5CQOiA/JpFSQ/Xi444=
Subject key identifier:   FF:89:D8:94:28:1E:FD:9E:9E:F6:E7:14:78:25:8E:B5:75:C7:2F:C3
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer:       /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial:       01962ECF50737C1C279E28E3588E3B8AABE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
                          2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: VBjXZ6NWAFilGFBQrt9WoECNjXncB5fW53HXEV4ctVE=)
                          3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:50:73:7c:1c:27:9e:28:e3:58:8e:3b:8a:ab:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=ff89d894281efd9e9ef6e71478258eb575c72fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:a2:ba:21:d0:19:a4:0f:f5:b6:4b:f2:1d:
                    d9:84:43:04:50:d1:c0:b6:58:33:be:0b:61:81:ad:
                    58:a6:4b:28:2e:80:c3:0d:42:7b:10:83:06:91:65:
                    a5:77:29:42:77:65:87:4b:b6:a3:5b:82:cd:59:62:
                    5c:86:ff:53:cd:9e:0c:6b:aa:78:9c:b2:2c:10:9a:
                    05:db:66:00:54:ce:61:16:08:84:ab:0e:36:68:4a:
                    b7:b4:40:dd:a9:48:97:e6:21:07:eb:6e:95:f7:3d:
                    4c:3e:64:92:8c:e5:6f:8b:06:a3:8c:4e:0b:28:e8:
                    57:b2:d7:ef:73:f5:c3:d9:cb:77:b5:12:3f:93:e8:
                    27:06:46:25:09:8c:8a:89:f0:54:9e:70:e2:95:c6:
                    f8:ed:d8:cc:de:1e:f4:92:26:9d:52:ed:52:c3:d2:
                    2d:a0:4d:23:28:2f:45:de:2b:39:01:88:1e:66:ad:
                    f9:58:2a:13:54:47:79:ae:75:f8:45:81:ad:df:f8:
                    7e:44:53:2f:2f:89:2a:49:9a:d3:ad:cb:88:a1:19:
                    c7:bf:b5:06:d7:de:93:76:f2:73:4c:ee:89:f5:72:
                    bd:ad:34:01:2c:3f:e1:b2:90:28:b1:e6:4c:3c:eb:
                    e9:6f:22:85:22:93:52:85:8c:91:6a:ea:75:ba:5f:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:89:D8:94:28:1E:FD:9E:9E:F6:E7:14:78:25:8E:B5:75:C7:2F:C3
            X509v3 Authority Key Identifier:
                keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:63:07:ad:f7:0c:40:8c:f6:16:5f:5d:bf:e1:03:e3:28:
         1b:b9:0c:51:75:2b:3e:50:5e:39:ca:69:4c:de:fa:c8:f6:b1:
         7f:7a:f6:6a:9e:e6:e4:04:2b:34:e7:58:23:fc:51:61:97:9a:
         f9:62:f9:e0:9c:ce:8e:75:85:9f:df:f4:fc:04:e3:6f:05:42:
         5b:62:8e:6e:5c:fe:6a:53:c6:96:8f:89:e5:6d:1e:db:5d:f7:
         be:6d:f0:c7:c5:ed:ba:59:03:13:d9:9a:09:db:69:a3:79:d2:
         3b:15:fc:cb:e1:12:a9:d2:9c:f1:0d:a8:79:67:e0:44:69:af:
         32:5f:1a:be:42:6a:36:92:59:f6:df:26:bb:7c:e2:0f:9b:0e:
         d1:ad:75:11:84:c2:aa:9e:e9:76:d1:d4:67:d7:7b:92:59:fe:
         e0:26:01:0f:5e:d3:33:19:f3:01:49:e0:03:ad:63:df:6c:c2:
         b3:ce:36:12:cd:fb:3a:90:7c:37:25:a4:a5:50:32:a9:8e:17:
         01:5f:09:e1:67:7f:6d:98:b0:8d:d1:30:af:95:60:42:e9:39:
         6e:39:e4:22:2a:97:c3:30:8c:04:ea:41:9b:99:eb:3f:19:59:
         fe:26:21:b8:e0:a1:40:22:07:17:50:35:c6:98:49:8c:a4:0d:
         e2:2b:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----