Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File:                     oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier:          SAd/yBDdujhv0FFviTAP529pqD0viIJEz8UUeKAffTo=
Subject key identifier:   68:E4:CA:F4:8A:0D:25:90:66:C2:AE:7A:12:FB:16:02:C7:B9:1E:CF
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer:       /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial:       01962DF3E1ADE0EB5B068963FDCA193AFFAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number:          10A7
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: IWMZBVgX3cc5Wvjzl4jnuQAqeyw.roa (hash: o4xnvKpR1H4iSPNc9E+0WDHvByCtNlzRd8/EbIPtlMo=)
                          2: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: 4Nn7i7YRxg1CThBEjiOReCQZQw+QHmWAL2tFYJ1G6LM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e1:ad:e0:eb:5b:06:89:63:fd:ca:19:3a:ff:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=68e4caf48a0d259066c2ae7a12fb1602c7b91ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:e9:72:f9:11:95:0f:97:42:8d:60:42:d3:
                    1b:1e:a7:60:23:7d:50:8b:02:5e:de:cc:c8:8e:b6:
                    4b:76:d8:0c:2e:0c:60:ba:72:e8:aa:e8:7d:db:48:
                    01:db:46:70:bb:34:fb:ec:c6:13:6a:6c:ba:2f:12:
                    41:62:e1:41:d7:c1:ad:28:a6:12:32:99:fa:8d:4b:
                    b1:5a:2b:1d:37:e3:b9:83:19:1c:1b:62:0e:e8:64:
                    af:ae:e0:da:d5:53:a3:e2:dd:22:c4:96:f1:c1:e4:
                    58:7c:ea:01:2c:d7:4c:8b:6c:73:ff:a8:98:70:9c:
                    21:83:d8:2a:7a:4a:1e:c5:01:82:9d:4e:1a:c8:2b:
                    88:d3:ef:af:99:e2:14:e0:74:33:51:62:06:06:8a:
                    46:7e:eb:5a:6c:e0:92:ce:be:32:19:66:36:86:72:
                    c6:89:eb:94:1d:a1:39:d1:9e:87:10:89:4c:0e:4d:
                    0a:5e:9a:44:b0:17:68:5c:34:55:15:11:23:5e:25:
                    3f:db:40:d6:42:6f:ce:43:3e:49:89:fb:b1:6c:29:
                    b0:a7:be:2f:8a:af:e8:c7:a2:d4:7d:f3:68:f6:5a:
                    64:6b:83:3d:5e:ca:d0:e0:85:fc:84:8f:48:25:d9:
                    1e:29:2c:76:f4:3f:4f:49:d0:33:73:a9:17:e1:99:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E4:CA:F4:8A:0D:25:90:66:C2:AE:7A:12:FB:16:02:C7:B9:1E:CF
            X509v3 Authority Key Identifier:
                keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ac:e6:5e:b7:d0:51:c1:d4:b3:7d:a3:76:9f:a2:e4:9d:4d:
         83:f0:e5:a0:61:96:17:fc:d8:ca:58:df:b9:d2:d5:39:d7:af:
         58:e5:d9:07:87:73:42:ef:c3:92:c1:a9:0a:8c:49:bc:8a:29:
         96:ce:0a:d4:85:52:6b:47:3e:cc:0f:41:22:42:1d:6b:e6:8a:
         cd:4f:8f:c2:01:cf:77:a8:4f:b2:5e:5e:e0:9b:28:15:58:2c:
         5d:59:2e:0a:7e:21:be:c7:54:2f:f2:3e:5f:94:c4:e5:c3:dd:
         11:7f:56:43:fb:87:6b:08:39:bb:5e:aa:69:8e:fa:b5:62:15:
         e7:ef:40:9a:a8:14:8b:a7:9a:c9:69:d2:5e:da:e2:50:8f:5b:
         6d:07:f0:ac:43:75:c5:37:fe:81:cd:31:1c:72:74:14:09:ba:
         03:00:b2:28:c2:c5:09:db:4f:9e:6c:7e:9c:1e:e1:8d:88:09:
         63:ca:cb:80:47:8a:89:98:56:27:8a:b1:28:99:f7:83:8e:3d:
         20:9c:b2:03:3c:b8:e1:3e:69:7a:f3:fb:51:fd:5c:4a:6e:82:
         b2:3a:e9:67:7b:0f:4f:11:56:7f:31:22:8b:6f:55:b6:11:6b:
         36:fb:99:af:0d:d8:6f:35:10:94:77:01:64:20:ea:f3:64:97:
         ec:1d:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----