Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File:                     obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier:          7BUtV+c+OispQwCb91z1Eu4+/+/Zbh49N6NICebvTG8=
Subject key identifier:   FA:31:4A:B4:6C:41:BF:BF:B1:A8:78:73:16:FC:2E:A0:32:85:98:2F
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer:       /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial:       01962F3DBCD4AB3A772FEE398E133A643C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number:          09C9
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=)
                          2: jYkkOan7rTEgW-xkhgkb5i-JxFw.roa (hash: poFVw3UULivKuh4VYtXegnU+ipzV9NTFXG8a9hkIz1A=)
                          3: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: +9FoY+fTyOy4qLykhUibLxuZXeDormFrv7zopDlD+Y4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bc:d4:ab:3a:77:2f:ee:39:8e:13:3a:64:3c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=fa314ab46c41bfbfb1a8787316fc2ea03285982f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:32:1d:a3:88:05:4a:aa:2a:77:0e:09:53:
                    3d:31:5b:8e:e2:7f:0d:64:6e:a6:f7:7f:dc:78:7a:
                    29:59:6c:03:0b:19:1f:9b:79:a0:9f:ec:07:21:f4:
                    e8:81:7b:de:10:eb:39:9a:e0:1b:d0:60:a9:6e:74:
                    74:a2:55:3c:35:a2:f5:8d:09:e8:48:4e:32:69:5e:
                    56:73:34:b7:3d:66:3f:bc:b0:9f:61:fd:4b:e1:cd:
                    df:1c:9a:fc:22:6d:77:37:5e:a1:88:3a:0e:f1:4e:
                    95:e7:32:54:29:c4:af:19:48:d4:a1:41:2b:73:9e:
                    51:0d:8c:96:d3:10:e0:ad:39:8c:6c:ec:c2:7a:18:
                    64:89:c3:0a:00:0e:85:ab:e4:43:1f:89:95:43:5b:
                    5e:71:be:65:df:a1:09:95:7a:74:5d:20:8d:a4:8c:
                    dc:96:29:65:e6:00:cc:b5:ea:13:cf:e2:36:50:27:
                    2c:d4:24:29:a1:34:0f:b4:8b:18:be:76:46:98:3b:
                    e3:33:e8:f4:4c:74:5b:82:fb:d5:c3:4f:d7:41:e4:
                    15:9c:08:98:f4:57:41:eb:2e:a0:36:4e:dc:5f:5e:
                    fb:74:c5:7d:00:66:28:a9:16:6a:f1:fc:f1:dd:dd:
                    43:fa:44:96:df:f8:39:56:51:f2:2c:50:39:dc:6c:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:31:4A:B4:6C:41:BF:BF:B1:A8:78:73:16:FC:2E:A0:32:85:98:2F
            X509v3 Authority Key Identifier:
                keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:2a:f7:d6:98:9d:2f:48:7f:d9:51:66:bc:54:6c:60:db:
         7b:ea:d5:c6:23:b0:bd:61:f3:fd:8d:b3:8f:77:eb:c4:b5:e8:
         0c:bc:f2:17:4c:59:f4:b2:26:d4:55:d4:5b:ed:16:b1:ce:de:
         24:11:29:f7:0a:69:f2:54:67:ab:e2:bc:09:37:47:f7:7e:52:
         d5:29:c5:b8:b3:46:a7:a4:90:41:9e:40:e9:03:a7:b1:d1:05:
         76:3d:a0:ec:0c:74:9b:48:48:d8:af:34:0a:3d:29:0f:5f:de:
         ac:cb:8f:c7:88:d2:00:03:b8:d6:f3:72:53:34:fc:a0:f0:5d:
         cb:d2:7f:46:aa:ec:fd:36:5c:7d:1a:81:83:0a:98:69:49:e5:
         ce:9e:3b:79:6f:79:77:51:92:f0:66:cd:91:c1:11:76:54:72:
         fa:a0:d5:95:ae:5e:ef:19:16:4f:94:36:8c:b5:d9:29:f3:96:
         9a:f8:85:7e:20:29:53:c5:e9:ae:de:bf:de:08:af:62:cd:38:
         2e:1d:c5:de:6c:a7:cb:a5:60:c5:e4:8c:ea:4b:09:ad:ac:b8:
         1f:f7:99:d4:4d:ee:a1:15:28:c9:ba:ed:42:5d:14:0c:99:46:
         08:60:5c:74:1c:ba:12:0f:36:57:fe:65:03:8c:37:c5:3e:8d:
         c4:1e:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----