Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File:                     o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier:          rtNyh7/c23zogrpvFmNnxO5fHbQLdvPXlOtM0kXdBBM=
Subject key identifier:   2A:B7:E1:CF:3A:1A:E9:84:9D:BB:38:2D:0A:F0:E6:E3:E4:E6:3F:30
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer:       /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial:       01962F74E365B82C55EA692343A82CA70072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number:          0A1F
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
                          2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: Hk8g223oKgwDlGvMOT4b3/6Vg3yYdsMS/upEZOXyvn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e3:65:b8:2c:55:ea:69:23:43:a8:2c:a7:00:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=2ab7e1cf3a1ae9849dbb382d0af0e6e3e4e63f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:84:2e:ec:f6:81:b5:d8:ee:20:1e:39:e0:
                    41:c1:b7:32:8e:30:66:b4:c1:c0:63:6d:e4:c7:74:
                    c1:7f:2a:ba:9c:2b:96:fc:98:78:1c:6a:52:81:52:
                    bc:7e:4d:27:ec:41:65:74:e0:28:3d:ee:eb:7e:af:
                    62:3d:ed:b0:cc:f0:1a:8f:1f:18:8e:3e:26:e1:5a:
                    ec:a6:8b:ed:50:a6:0e:fc:53:d5:69:c2:b6:9b:2d:
                    0a:36:bc:2a:d5:45:f6:e6:ef:2e:32:a4:f1:8f:dc:
                    96:38:13:d2:a7:0f:97:40:36:2a:6c:49:d2:47:8a:
                    41:33:9d:47:6f:5c:70:69:6c:df:35:50:16:88:28:
                    93:36:e5:50:85:c8:42:5d:f7:af:9e:d3:12:2b:e0:
                    49:a5:70:50:8c:12:bc:bb:bf:05:c4:00:5a:d3:6c:
                    53:45:9e:3d:06:08:7e:a4:bf:cd:a1:75:4d:c9:9e:
                    7e:f4:85:bd:84:2b:35:39:25:a8:b8:aa:bf:35:f5:
                    03:84:65:7e:4d:9c:6c:b6:4b:2e:b5:d5:36:fd:8d:
                    1b:de:10:2c:40:a9:af:57:a8:0c:65:04:5f:c9:f4:
                    8c:cc:b9:a6:5e:c0:cb:c4:32:3a:bc:f6:a8:f2:ad:
                    05:d6:42:aa:7f:b4:b3:8b:a0:50:4e:f4:e0:d2:a8:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B7:E1:CF:3A:1A:E9:84:9D:BB:38:2D:0A:F0:E6:E3:E4:E6:3F:30
            X509v3 Authority Key Identifier:
                keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:89:36:c7:3d:d6:41:9f:72:8e:71:63:1a:d8:2e:70:03:11:
         e7:d1:a3:d8:9b:e7:1f:0f:7e:02:89:0e:fe:c3:4f:f4:e4:f0:
         2b:61:9b:25:56:63:da:e0:7d:0b:02:67:32:98:3e:37:d3:6c:
         90:15:9b:e3:07:63:b9:16:dd:50:50:d7:1d:80:a6:f2:c3:ff:
         e5:73:e5:91:bf:8a:17:ce:c7:d6:1a:dc:77:a0:a6:cc:b8:41:
         c2:2d:d1:2b:4a:c4:e5:d9:75:0f:53:71:38:82:a9:32:57:9d:
         c5:6b:7e:99:01:f7:22:29:8d:82:fb:80:bf:67:15:8f:2c:03:
         67:27:e6:9c:7d:fb:53:41:38:df:e3:e5:0a:e3:09:f3:e9:f9:
         b4:75:15:b2:b1:55:47:3f:1a:f3:eb:69:ca:9f:87:6d:2b:97:
         03:1e:3e:de:cc:29:8b:20:ef:70:62:6d:12:ea:65:e3:ef:cb:
         7a:dd:aa:f5:16:9b:08:b6:e8:91:fe:fa:3d:7b:9d:0b:71:4e:
         b5:ec:0a:8c:0f:46:62:fc:01:f1:8e:aa:44:1b:50:fc:b5:77:
         f7:3a:f9:b8:09:43:f6:1c:87:d6:dd:33:13:f5:f5:d1:39:29:
         cf:45:6d:01:93:db:19:d1:42:9b:34:f9:82:1a:91:68:f5:37:
         de:4f:50:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----