Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
File:                     oCN2bGLetRKXFVcI7MtCHIsEeAo.mft (raw, json)
Hash identifier:          ooXh1qgMJnHH9/4l/oEFJZAcycw/8Kc3q72k86V5s08=
Subject key identifier:   E7:A4:A4:B9:8C:90:AF:58:14:F9:F9:3A:87:4B:43:12:40:BD:DD:A3
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Certificate issuer:       /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial:       01962F74DE4AD7B3EE260E527FD37A044DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
Manifest number:          123C
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: CHrue45DLIyJD4ONNTGJ0TL9VsA.roa (hash: u/OfuNsymZa5oGvy4EyVltbtk9eDJK5E1jdXxm1UcXE=)
                          2: oCN2bGLetRKXFVcI7MtCHIsEeAo.crl (hash: MMNwUBXsvZSkDblCH92QD6iJg6OFkHwpTHkCwF9YW2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:de:4a:d7:b3:ee:26:0e:52:7f:d3:7a:04:4d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=e7a4a4b98c90af5814f9f93a874b431240bddda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:67:bd:30:9c:4b:38:49:a9:e6:b3:a2:d6:
                    85:53:96:7b:aa:b4:31:24:c6:f7:02:b5:97:8a:58:
                    d3:4e:a7:42:14:af:e4:a1:dc:8e:bc:0e:a4:6e:83:
                    90:54:13:a0:f3:56:1c:86:38:87:71:cf:1a:5d:01:
                    cd:6e:b1:12:73:94:fb:6b:22:b4:da:7e:b1:f6:82:
                    e3:db:a1:30:cd:d1:dd:66:80:98:b0:a4:9f:b2:29:
                    b2:4e:02:37:4b:22:1d:a4:d3:29:b0:2a:e2:22:74:
                    67:9d:d4:e1:a5:9d:43:45:88:46:fe:c8:77:c2:6d:
                    22:c0:cc:74:07:d7:cb:9e:57:06:fc:42:61:30:9d:
                    9f:7d:ed:16:80:8b:8a:88:97:9e:67:1f:bb:cc:75:
                    2d:7a:a2:59:7d:5e:71:b5:46:66:52:4d:60:fe:4d:
                    0e:34:c1:4b:10:97:8f:dc:4a:f3:46:4a:9a:4c:df:
                    89:03:e4:04:67:77:fd:56:6f:32:81:53:f0:17:74:
                    69:b6:e6:67:6d:5a:06:c2:1a:a2:35:c9:0b:d5:f5:
                    3b:b0:1a:bb:55:88:cc:29:ef:a3:6a:39:96:e8:4b:
                    28:25:8e:a8:fd:01:85:3c:2f:90:5a:60:ab:d8:12:
                    58:fd:ee:3c:a9:a9:cf:75:e0:de:8e:a8:8b:2e:07:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A4:A4:B9:8C:90:AF:58:14:F9:F9:3A:87:4B:43:12:40:BD:DD:A3
            X509v3 Authority Key Identifier:
                keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:85:21:53:35:92:c0:a1:05:00:3d:a5:50:bc:79:f2:8d:ac:
         55:b0:88:ee:cc:53:d0:2f:68:8c:08:5f:c9:7b:0f:f7:49:f1:
         f8:45:a5:96:ae:4e:9d:4c:b9:4f:fd:a6:7b:1f:65:7b:d2:94:
         c3:91:7d:31:c7:16:63:c4:af:08:32:76:e8:50:15:f9:e4:56:
         ac:a5:c3:5c:9f:ea:e0:de:1d:72:67:cc:5c:d2:5d:8f:81:82:
         3b:09:c8:d5:8f:fb:ca:2f:f3:7d:4a:1d:5b:cb:ad:cc:12:3d:
         57:ec:9d:78:00:d9:61:ec:16:d3:13:46:0f:5f:33:58:08:61:
         21:d3:b7:ff:b9:6c:5a:b9:cf:1d:66:0c:a7:4b:2b:d3:d7:1b:
         51:74:19:7b:f8:8f:7c:a6:ea:81:5f:e0:57:91:df:d7:ef:7e:
         c9:74:03:26:e3:11:c6:37:c2:c5:5a:51:68:1e:55:2c:a7:2d:
         e1:c0:e5:3c:6f:03:4a:55:ed:cd:0d:19:e0:bc:4f:dd:85:6e:
         a9:30:5c:ec:5b:d4:22:e2:82:ca:74:62:97:7e:b6:39:a2:c7:
         2f:75:42:b1:c9:67:5b:86:fc:2e:0e:0c:ca:92:45:78:26:27:
         2d:d8:e4:d3:8a:be:5f:7c:8a:3d:84:78:c7:d9:d4:f7:d5:04:
         94:c5:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----