Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File:                     ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier:          0AGm/BEZFsNdKD1dUfohmSr/QW1qPf57nq6eHS6ZCi4=
Subject key identifier:   04:6E:FD:E4:6C:E2:B7:9A:B3:57:E7:14:72:3E:0B:FA:C2:E7:21:CD
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer:       /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial:       01962F743C82D33103B5273FF19CC53B6080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number:          01F3
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
                          2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
                          3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: WPdbS8a6cXAqJvADiw4hC9HpfL9N+Uhu54UBpgSOyoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3c:82:d3:31:03:b5:27:3f:f1:9c:c5:3b:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=046efde46ce2b79ab357e714723e0bfac2e721cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ba:f4:b1:48:e8:f7:14:10:7f:18:26:c5:b4:
                    10:0d:8a:f5:1e:5a:64:9e:eb:8b:4a:66:b9:5a:cf:
                    3f:7d:87:c9:b2:94:5a:61:b4:89:d0:7b:86:ce:d5:
                    41:50:f1:b5:83:13:3a:55:b6:cb:bc:e4:8d:d8:ac:
                    fc:f3:52:56:b6:7f:a1:4b:52:77:79:bc:5e:7f:eb:
                    e2:8a:5f:7d:9f:1f:68:ab:82:61:64:42:30:7a:fe:
                    5b:6e:c3:2e:af:6b:f9:90:15:79:e2:18:c5:00:cf:
                    8b:51:a5:73:76:1f:03:69:b8:a5:32:08:9d:fd:24:
                    fb:31:2a:e4:75:4e:f6:5c:c3:4c:dd:c8:04:f5:07:
                    80:fa:aa:fb:f5:2d:9b:5b:49:3c:46:fc:8c:fb:43:
                    6b:e3:28:d9:b9:30:60:a4:fc:d5:72:7b:9a:3b:27:
                    59:40:34:ef:ef:3b:a4:50:30:eb:d9:99:ad:26:ea:
                    ab:ab:93:cb:71:52:1f:67:dd:85:07:98:05:da:75:
                    8d:d8:a4:92:0d:5b:8a:22:ed:ef:8f:3b:52:24:5e:
                    03:c6:74:61:bd:c7:e6:a6:f1:8c:2d:40:7c:78:79:
                    79:0f:77:88:e2:cc:26:0f:54:bd:67:9f:d8:4b:1d:
                    38:5c:b3:11:68:c3:1e:61:fd:ce:37:90:f8:71:88:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6E:FD:E4:6C:E2:B7:9A:B3:57:E7:14:72:3E:0B:FA:C2:E7:21:CD
            X509v3 Authority Key Identifier:
                keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a9:45:b4:75:d1:8b:72:cc:ee:e0:c9:8d:0d:e0:c7:72:9b:
         6b:9b:67:b7:bd:c2:18:8f:e6:e2:99:20:a5:45:0c:78:7f:6c:
         48:cd:0b:54:db:fe:ea:70:99:0f:28:b3:70:a4:79:9c:f1:c3:
         ce:e8:38:42:6a:c2:6c:1e:38:e6:1d:33:a0:d5:4f:c0:db:41:
         a5:dd:f9:59:d7:f0:5c:cc:14:51:37:83:d0:64:33:88:a4:b9:
         0f:d8:4e:3f:ff:35:0d:82:03:74:99:0d:b9:a2:6e:27:81:c7:
         8f:6b:e5:0b:cc:d3:63:1f:96:26:f4:fa:df:6a:3a:dc:5e:b4:
         40:54:40:33:d4:52:81:9c:a9:11:d3:af:da:10:6e:0d:ad:f7:
         66:99:7e:23:31:00:7d:5c:c0:13:ba:32:75:64:f2:50:e0:da:
         52:43:0c:75:77:ad:0c:42:88:d8:23:ea:e0:b9:08:7b:a6:06:
         3c:c7:fa:9a:6d:8e:d4:73:d2:bd:42:c0:9d:da:54:c3:5f:c4:
         b1:02:23:ae:10:81:16:cc:7a:31:39:f9:3c:71:ea:cf:7b:d4:
         69:ac:c7:3e:cd:d0:13:0e:84:4f:7c:e9:4b:0c:0c:3d:51:a1:
         4f:d4:48:2b:28:e7:4f:6e:9a:3a:0e:0c:64:37:21:0a:4d:1d:
         b8:92:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----