Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.mft
File:                     otP5vJZWutwm594auw-nLD1yjdg.mft (raw, json)
Hash identifier:          4i9PhcjvK4gq1DbOWbFiAW3jPmQ/dqWfucuQOdxOCkE=
Subject key identifier:   6E:04:7F:9F:79:9A:BF:3D:17:C7:3A:A0:D0:73:3A:DE:DA:1B:C9:C9
Authority key identifier: A2:D3:F9:BC:96:56:BA:DC:26:E7:DE:1A:BB:0F:A7:2C:3D:72:8D:D8
Certificate issuer:       /CN=a2d3f9bc9656badc26e7de1abb0fa72c3d728dd8
Certificate serial:       01962F06D6D8D0E23606570FE00A73C24E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otP5vJZWutwm594auw-nLD1yjdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.mft
Manifest number:          014F
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: otP5vJZWutwm594auw-nLD1yjdg.crl (hash: bFRi06kEn99qGYTsjIx8mKG442iQSq7mSVt2yTXocyo=)
                          2: yntKueGdh_gRYfTjbFRGz4s6BD8.roa (hash: 8wVmYZSgIm0dCsPvd2oqoO7MS+FukiT5t5Ke1EaX2FA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:d8:d0:e2:36:06:57:0f:e0:0a:73:c2:4e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d3f9bc9656badc26e7de1abb0fa72c3d728dd8
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=6e047f9f799abf3d17c73aa0d0733adeda1bc9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:38:1e:0f:1c:ff:e8:5c:4d:2c:c3:19:09:
                    18:f7:61:88:ce:c5:fc:76:3f:12:c8:f1:7d:7a:f5:
                    1a:06:b9:e0:7b:46:81:62:e5:25:e9:48:8e:89:f9:
                    0c:7c:6f:a2:05:4b:a3:21:0e:64:68:ac:67:1f:c0:
                    80:31:76:0c:00:9a:6b:2d:8b:16:39:d9:61:cd:26:
                    4d:ca:76:95:e2:b8:19:01:23:37:02:cd:63:bb:ba:
                    4b:26:4b:a8:56:85:48:3c:e2:81:57:8a:65:f3:2d:
                    4d:32:94:b7:95:00:50:23:2c:55:45:58:96:75:2d:
                    98:3c:f7:b4:5f:1a:57:ad:dd:a1:7c:26:c7:d5:5b:
                    d5:e8:1f:87:bc:4d:0e:65:ef:d7:4a:44:fe:42:3f:
                    95:82:f9:bf:15:f6:95:4d:7f:ae:63:62:01:ad:6e:
                    75:d8:a3:9a:bd:5e:99:2c:08:a0:a1:96:5d:5f:07:
                    8a:50:34:7d:fa:79:71:6d:db:40:3f:64:c4:b0:ef:
                    cf:14:d5:60:aa:a6:a1:d8:2c:10:cb:3e:c4:34:af:
                    27:5e:54:80:c4:4d:1c:1d:1e:50:cd:c5:68:fe:0a:
                    70:ca:5f:ce:ea:50:3a:b5:9f:28:cf:89:06:41:5c:
                    dc:8c:22:d6:91:a2:8d:72:25:d9:71:75:1b:88:1a:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:04:7F:9F:79:9A:BF:3D:17:C7:3A:A0:D0:73:3A:DE:DA:1B:C9:C9
            X509v3 Authority Key Identifier:
                keyid:A2:D3:F9:BC:96:56:BA:DC:26:E7:DE:1A:BB:0F:A7:2C:3D:72:8D:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otP5vJZWutwm594auw-nLD1yjdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:3b:18:b8:ab:b2:14:b5:04:99:b8:9e:1c:0b:a9:10:ae:
         d0:b7:a5:fe:fc:e4:13:06:f3:70:24:fa:53:49:b6:69:10:23:
         da:bc:5b:a5:30:20:a4:32:8a:6f:ea:09:3a:d7:9e:03:e9:dd:
         61:32:ac:e6:1a:f1:c5:ac:03:46:cd:d7:1a:b0:e1:70:23:74:
         b3:2d:7a:ff:2f:2b:13:76:c0:43:5e:df:a7:7c:45:37:a3:34:
         f2:32:65:9d:14:24:ce:da:6b:af:4b:13:93:0d:7c:e8:45:01:
         5e:90:ab:2a:6a:23:01:f6:79:91:63:d0:18:ea:c4:d5:e5:ad:
         f5:da:d5:d9:e2:84:4c:fb:83:83:09:93:52:7a:94:e8:e8:29:
         0c:4f:ec:a8:94:3d:c3:56:d9:8c:8f:56:d0:f1:f5:8e:19:eb:
         85:9d:66:bd:e7:ff:af:65:0b:8a:95:9a:83:c1:26:7b:c4:3c:
         86:b2:63:f4:39:08:36:f4:4a:f9:e4:8c:e7:90:ee:2f:96:57:
         a2:dc:1f:55:02:b5:ad:22:36:b4:b7:6d:ea:57:91:87:66:ad:
         dc:3d:7f:79:d2:09:e3:b7:75:c6:2f:02:8b:07:6c:b7:a1:19:
         76:80:93:64:1a:28:c4:29:32:27:97:be:c0:15:56:1e:e8:23:
         fb:6d:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----