Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File:                     oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier:          i+Ow6tn/KVDLVJ4QxP9iyzGXX2w4cncYBPRKifrEPZE=
Subject key identifier:   C4:96:FE:0C:8A:E3:71:85:6A:08:C2:FE:29:94:30:23:82:0E:67:80
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer:       /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial:       01962F0664597D54B97189A1E0427E766131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number:          0A30
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
                          2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: W0Hj3AYQLlbop2dXoqj71iLDIz4LHnVN6cFl7o6sJIo=)
                          3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:64:59:7d:54:b9:71:89:a1:e0:42:7e:76:61:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=c496fe0c8ae371856a08c2fe29943023820e6780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:b8:43:f0:c0:1b:e5:19:1e:56:6e:7c:d1:
                    6d:30:4a:4e:d6:a5:62:aa:19:c5:90:06:da:e1:7d:
                    32:ba:03:6a:59:6a:d0:ec:ca:ca:03:ca:b2:b1:78:
                    fc:cc:cc:25:c3:14:88:2f:51:0f:4e:9f:68:4c:e2:
                    fd:f9:1f:c5:c0:0b:22:13:41:92:a9:a2:83:38:bd:
                    5d:d7:78:81:bd:52:08:90:f3:28:6d:79:c0:40:25:
                    0c:ca:c7:fa:16:a4:be:70:87:08:02:5b:4a:11:50:
                    aa:67:99:7b:e8:f9:8a:98:cd:b7:c7:da:b2:36:95:
                    e1:f0:6d:aa:0d:b3:04:64:a0:ce:b5:31:00:42:47:
                    32:32:cc:f3:d4:2c:6b:6c:63:ec:6d:c0:b6:9b:d1:
                    24:2d:d7:5f:17:73:4f:5e:39:86:16:65:d5:1a:7a:
                    6a:6e:02:d2:74:26:da:6a:cb:b4:54:bf:46:57:e3:
                    7d:80:35:bb:98:cd:9c:ce:6e:33:56:94:bb:21:b3:
                    b5:72:e5:88:16:22:a7:b9:09:e3:76:9d:3e:a5:91:
                    ed:82:05:52:b4:2a:48:27:58:81:38:75:0e:c6:15:
                    60:64:cb:3a:05:99:ec:d0:10:dd:7e:76:b4:64:de:
                    9c:6c:9a:b2:c2:96:61:dd:ca:df:05:29:66:9e:55:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:FE:0C:8A:E3:71:85:6A:08:C2:FE:29:94:30:23:82:0E:67:80
            X509v3 Authority Key Identifier:
                keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:96:98:e0:e4:3c:af:ba:10:e9:c1:36:8f:ff:3a:04:f6:f5:
         4f:cf:b7:90:6f:a5:f6:f9:05:03:39:eb:df:01:ba:7f:58:bf:
         bf:bb:35:7d:93:85:36:b2:e9:30:19:de:b4:5d:ed:bf:51:f0:
         4b:a4:76:d3:36:8a:d5:d2:06:14:d2:9d:20:1b:a0:79:ef:6c:
         9d:ef:44:a3:43:86:3e:82:2b:a8:9a:18:15:c8:15:8b:47:ff:
         97:58:be:1a:92:11:93:f6:d2:4d:22:e0:06:62:d7:67:28:cd:
         35:a7:0c:8f:f7:97:d0:ad:98:52:fa:59:35:28:7f:7d:09:2b:
         34:14:91:93:e8:ea:d2:31:0c:3f:65:3d:18:77:a0:b0:21:c4:
         e9:16:4e:e1:84:35:d9:c9:0c:c3:fb:0d:66:39:4c:64:c1:0e:
         9b:59:25:1f:14:f3:3c:ce:8e:19:81:24:9c:22:61:c0:26:aa:
         0d:f9:50:b6:8e:3c:99:3c:ff:81:f8:51:a5:64:6f:ba:6c:c9:
         42:5d:2c:12:62:e7:a2:0b:05:4d:6d:53:96:7e:63:a9:ec:9f:
         e1:9f:36:a1:85:98:9d:eb:e8:c8:f8:f5:f8:aa:87:18:bc:9a:
         55:46:7d:10:93:cb:4d:86:20:88:ea:77:41:66:55:63:f5:f2:
         16:c7:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----