Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File:                     mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier:          ahKAkkT7+/KcTcNhlMTPcckTl+BE40HoFJxqn3him0U=
Subject key identifier:   D1:B0:95:6E:FA:8F:F6:5D:11:09:AF:1C:B6:C6:91:F6:55:75:9C:55
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer:       /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial:       01962E2B0E54EE4D8361E0964D2656B424E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number:          0D85
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: FGRnxc9C3d9faJa4e9X6S4cHjFA.roa (hash: d5SgFAeT21YMWMJqdCASd/9NKR53dDrqmG/NUaV6X8s=)
                          2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: 8BvIc09O8NLWi6Gerqo0awl1oQISL9kMyY3aiqBhY6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0e:54:ee:4d:83:61:e0:96:4d:26:56:b4:24:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=d1b0956efa8ff65d1109af1cb6c691f655759c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:44:e1:e3:22:88:56:45:15:4f:3e:c9:0a:
                    b4:44:c1:1e:0a:0a:9d:18:45:ca:e8:54:c2:12:09:
                    3e:41:ab:fa:ef:b6:bd:6c:c6:8d:2d:09:30:d7:c8:
                    bc:27:e1:1c:b0:ed:f6:a5:1d:58:1d:12:88:55:32:
                    38:42:e2:e9:b5:72:9e:ad:30:f8:5e:22:e3:ee:ca:
                    14:69:a9:e5:aa:3a:0b:97:e6:4c:cc:6f:85:86:2f:
                    83:6e:91:bb:db:bc:06:3c:5b:db:b8:eb:b1:4a:9b:
                    f3:05:06:1e:2f:27:64:24:fe:d0:dc:15:14:cd:64:
                    4f:aa:95:f9:84:e7:54:a5:16:10:3e:b2:68:e3:de:
                    f5:9d:36:56:e5:b9:aa:19:bc:f6:03:82:08:b2:88:
                    bb:58:51:1c:d3:86:8b:9f:64:b6:bf:12:17:09:14:
                    db:1a:aa:16:7b:15:b3:e4:16:6a:6f:38:6b:e4:a2:
                    53:47:c4:c7:87:6e:45:1e:e9:bb:2e:67:81:cf:e5:
                    39:c9:9f:e4:6f:80:6d:1a:7c:b5:d1:e1:76:44:40:
                    63:7d:6d:e1:0e:94:f7:23:e3:76:11:f8:0e:02:df:
                    11:bc:79:96:a6:75:19:79:b8:24:ec:77:08:52:10:
                    59:50:02:63:f6:f2:a7:05:e2:85:5f:95:5a:fd:f2:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:95:6E:FA:8F:F6:5D:11:09:AF:1C:B6:C6:91:F6:55:75:9C:55
            X509v3 Authority Key Identifier:
                keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:37:90:5e:f8:e9:36:90:45:fd:a9:8f:ca:42:fe:fa:52:
         ad:aa:02:af:92:47:1a:e8:1e:79:99:af:92:5a:62:61:64:04:
         92:ce:cc:aa:33:c0:79:49:de:7e:31:b3:e9:2a:04:00:db:b0:
         24:6a:44:db:2b:05:75:32:b9:8b:4e:80:29:8d:c3:7a:c4:e0:
         42:38:74:01:7f:03:6f:47:90:53:57:83:3e:26:5a:2b:75:3e:
         a3:be:c7:53:72:a7:a1:61:8d:8e:7b:bc:94:45:79:5d:85:f2:
         97:94:b3:6e:03:a4:72:79:11:ac:a9:cf:19:3c:cd:96:fa:91:
         cc:8b:00:03:63:18:34:f4:cf:41:57:72:1d:9d:86:7f:e8:0f:
         7c:b8:a6:58:f6:f3:51:9f:f4:ff:e1:bf:d4:87:f6:a0:c5:67:
         63:19:68:d3:69:95:5b:a6:2e:86:94:a7:f1:1b:12:d7:9f:34:
         fe:bd:7c:26:38:ee:f8:b3:b3:00:c9:4f:7e:d0:e6:fd:28:4c:
         54:18:11:f3:26:91:a2:9e:c2:f2:09:62:3f:34:10:77:68:77:
         6e:ac:9b:a6:7f:7e:60:b4:44:b5:99:15:ad:8b:bc:7d:fa:7a:
         66:e2:21:bf:f1:1d:81:f9:da:f4:9f:6e:b3:b4:0e:3e:b6:c2:
         3b:cb:0e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----