Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
File:                     oNMhbMzIY-ygw90YmUGxueo3ys0.mft (raw, json)
Hash identifier:          036RB/T6TWncQY0JjKCF36QIOgxL/7hT2KI9BN6USqU=
Subject key identifier:   C9:E4:55:FE:CB:35:30:3C:90:48:19:54:29:65:1E:AD:45:B7:B3:9B
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Certificate issuer:       /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial:       01962E9980112FEC5CF204D9D1A9BC7B8608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
Manifest number:          0D34
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: YAQOG7HS14oLGl_AE__5KljKQek.roa (hash: vYFfnqVBOtNvOIxvJDmuRRaUo+YW3T+OADCuratSdoU=)
                          2: i2HYpKIvdGotH7mKcmQ5RAG3huY.roa (hash: 4Nz6YUMbPlVe3PbppTQU2sGDWl5KATygr4DtzeG8qCU=)
                          3: oNMhbMzIY-ygw90YmUGxueo3ys0.crl (hash: +JO0qhv1iZpK1XoTPodE8b/LiBnWY1pCxrQsn4Q3/60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:80:11:2f:ec:5c:f2:04:d9:d1:a9:bc:7b:86:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=c9e455fecb35303c9048195429651ead45b7b39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:51:b9:0d:06:46:c0:d9:b7:68:ff:27:f9:
                    52:c8:d4:eb:e7:e3:92:e3:83:cc:e2:8f:fa:e9:b1:
                    eb:a1:62:6a:dc:d7:f6:78:f8:fd:f9:dd:c5:91:1a:
                    a5:1b:e7:34:a1:0d:f3:11:c8:19:df:a9:f8:63:56:
                    a2:90:70:ff:f2:3e:a6:ee:0a:d1:78:08:10:83:f6:
                    b2:df:a7:9d:05:4d:35:50:4d:6a:f9:cc:8a:41:a1:
                    07:72:64:f4:36:91:a9:76:5b:e2:ac:2c:d5:21:a8:
                    a6:30:4a:1a:31:6c:0a:22:90:f5:d0:f8:06:ec:26:
                    0b:91:e8:31:71:c2:e6:2d:62:c9:55:25:89:4b:fe:
                    80:ef:7a:18:f4:a6:93:73:d2:0b:43:74:ea:73:a2:
                    38:7c:d5:1f:19:a6:ea:e0:a7:66:34:60:f5:f5:2a:
                    5e:cd:0b:f5:39:d6:de:2a:7f:4e:ff:e5:7f:70:44:
                    08:4a:b1:60:f0:6d:96:b5:04:ab:aa:d8:62:28:1e:
                    b8:30:57:a1:d9:a9:3b:f9:2d:51:b1:f9:0f:c2:87:
                    47:c8:ff:ea:1e:3c:46:ca:98:a8:bc:f4:37:9f:07:
                    9e:fa:1d:bb:16:f4:12:97:af:74:d5:f2:a1:b8:a3:
                    9b:e4:a3:11:83:fd:e2:e1:0c:c2:a1:36:70:fd:1c:
                    1a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E4:55:FE:CB:35:30:3C:90:48:19:54:29:65:1E:AD:45:B7:B3:9B
            X509v3 Authority Key Identifier:
                keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:28:ee:0f:e7:bb:5d:87:cb:ec:b2:87:cd:d6:96:bb:07:4c:
         7c:af:1a:f5:fb:f6:54:46:ad:68:47:39:3d:e6:c5:1c:78:e6:
         47:2f:72:4d:7b:99:c5:f3:06:bf:9b:77:52:ba:57:46:25:28:
         85:7a:04:e8:4b:89:ee:82:2a:3c:97:55:25:5f:6d:ff:83:ab:
         a0:5c:76:56:d5:79:62:69:77:b3:ef:30:19:5b:93:ed:80:18:
         d0:77:b9:ff:63:ac:a2:1b:0c:2e:3f:c4:af:eb:84:ae:06:ed:
         1a:96:92:63:1d:ef:53:09:a2:4c:58:f6:2c:6e:c0:fa:8d:df:
         fe:59:d7:a4:68:e8:9c:af:fc:f0:1c:07:15:24:df:77:29:04:
         af:d5:3f:08:00:93:ec:d6:47:ac:67:18:db:c1:69:2b:d0:8b:
         4b:09:09:35:6f:a0:c1:a6:54:ab:f8:db:0f:17:c0:fa:a9:90:
         45:83:48:58:2d:ad:22:40:a6:e4:90:4b:d0:4d:46:e1:98:6a:
         65:de:69:2c:2d:c0:19:af:5d:a7:5e:f2:7a:39:f4:da:7f:69:
         f0:50:55:21:48:72:e1:04:37:a0:cb:2b:2b:c7:93:da:61:34:
         91:bd:6a:95:89:bd:79:d3:03:dc:ff:b3:79:92:5c:38:9b:31:
         0f:ac:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----