Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File:                     oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier:          nEaVRXPG/Kidb6Rzu8nc6PbDc8e3Z6L+Low3WkQ3Hio=
Subject key identifier:   8A:B6:35:BA:B4:AF:A1:80:1B:2B:C4:9D:BD:E8:F4:F2:0E:57:16:F9
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer:       /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial:       01962F063D523FC85E62848255DDE04AC530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number:          0CC5
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa (hash: avmrJ2rsXtwjFy7tu4gv+fivfWYGTorP5jQUfY03fLE=)
                          2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: 4tR8wvXMCybP4lGcUuF+A6rMm6kQ8NCwp3tIrboap5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3d:52:3f:c8:5e:62:84:82:55:dd:e0:4a:c5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=8ab635bab4afa1801b2bc49dbde8f4f20e5716f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:42:dc:ef:23:f1:d4:d4:8d:7c:1f:fd:0b:
                    da:f6:1b:a2:e5:d6:8b:33:08:c0:44:94:e6:d5:27:
                    4c:e0:fc:78:fd:16:16:b2:1b:ae:04:08:15:33:e7:
                    10:b6:be:53:f0:b8:7e:54:b3:56:e2:61:1e:3b:0f:
                    84:db:4a:3c:f8:c8:2d:44:45:07:13:66:28:e2:a0:
                    e3:33:7e:a4:25:95:98:e6:1f:1a:64:95:69:9a:f5:
                    4f:79:9e:8c:48:bf:55:cb:a6:4c:5b:6b:8e:c5:42:
                    44:4e:cd:89:54:e2:19:ab:52:79:dc:c6:97:f9:52:
                    bb:fa:aa:92:e8:36:8c:5b:f9:ac:5e:4a:bd:44:b8:
                    bf:e8:62:60:92:30:e7:5f:69:fe:35:7e:ca:c2:8e:
                    12:ea:2b:67:b6:e8:29:9f:81:c8:81:11:86:2d:01:
                    07:77:c6:d5:c4:3a:cc:6e:da:69:36:8d:4b:41:86:
                    68:a9:cc:18:71:38:97:3f:d9:39:b9:6a:60:97:f8:
                    af:dd:93:6a:09:c5:99:a4:ca:65:b4:64:a1:88:36:
                    4f:4e:34:1d:0b:9a:3f:55:85:34:a2:ef:83:39:3e:
                    0d:dd:a3:b4:0a:c8:3b:b0:51:43:f1:5a:ff:a6:6e:
                    17:e4:d2:64:fd:6d:54:e3:ac:9a:2f:84:f1:be:6f:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B6:35:BA:B4:AF:A1:80:1B:2B:C4:9D:BD:E8:F4:F2:0E:57:16:F9
            X509v3 Authority Key Identifier:
                keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1f:fd:42:c4:46:b1:22:79:cf:2a:54:c5:f9:e8:b7:a0:52:
         52:53:74:ec:dd:dd:4d:a1:95:72:26:d7:0c:cb:2c:e7:6c:f5:
         ab:78:76:07:c0:d2:c9:40:59:a5:d7:4a:ba:5d:ba:c8:68:34:
         ca:7b:30:25:87:ff:ce:36:79:66:c6:95:f2:20:79:a2:ae:f0:
         4d:19:48:48:d5:71:03:e5:fa:8d:ce:ea:60:ed:74:c9:81:69:
         0d:24:4e:18:cf:4b:ef:11:84:08:4d:98:36:0a:59:11:9f:b9:
         0f:f0:bd:8d:83:88:ed:fc:2e:be:38:04:45:83:12:be:3d:87:
         68:a2:8c:d0:3f:37:01:b8:03:c2:28:3e:6a:9e:73:5c:85:3e:
         99:25:ef:d7:4e:76:50:74:5d:7f:f2:4f:26:a0:71:58:e9:41:
         f0:7d:f8:ab:05:55:31:5f:c7:78:55:da:64:3a:31:32:7a:46:
         74:59:ad:e5:28:88:0b:bd:2c:70:4c:f2:da:eb:7e:31:29:86:
         ef:21:47:5a:38:ce:59:ce:34:e9:18:30:88:4d:8a:ff:00:09:
         5f:48:13:12:91:0b:92:19:1d:ed:78:02:9e:e7:54:42:87:a0:
         ea:81:44:11:10:78:2f:74:cd:2c:8a:d0:ce:7d:03:e4:ac:2a:
         6c:4a:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----