Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          H/iNciU9t1241MIeW1PBHMn7O+6LVd/NmHgC9ccuOmU=
Subject key identifier:   FA:5F:0C:9C:E9:C0:6B:31:22:2A:62:D6:C9:D4:68:82:B5:8E:E5:EF
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       01962ECFD8B1643B22885821EA9DEC8DFE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
                          2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
                          3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: ZSEyfjKZD2NyIdCDxaXSCksQ7XkNMtaJ/44UIWHobuw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d8:b1:64:3b:22:88:58:21:ea:9d:ec:8d:fe:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=fa5f0c9ce9c06b31222a62d6c9d46882b58ee5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:ac:10:c5:48:24:02:66:ae:db:f2:8f:6e:
                    31:d1:5a:77:ff:c5:4f:60:72:eb:a9:9f:a4:62:b7:
                    4a:14:0b:73:ce:e5:39:15:5e:4e:80:05:f5:3a:cc:
                    31:d5:d3:63:5b:27:af:20:09:a6:b8:44:09:2f:f5:
                    aa:85:f7:7c:6b:9f:82:c0:2d:da:95:50:e7:3f:c7:
                    25:31:5a:b0:01:cd:ce:db:5a:c3:e2:ff:d8:54:79:
                    34:4c:98:0c:aa:0b:40:63:58:fd:6f:ff:0f:9b:d3:
                    ee:28:a6:d9:33:bd:25:04:42:a4:e2:f4:e1:d9:7a:
                    af:03:0c:8c:ec:8a:ba:9f:4a:ab:b6:88:6d:f8:76:
                    b5:55:05:86:ae:5c:e5:3e:36:58:6d:a0:b2:99:41:
                    ce:b8:9f:b0:09:1e:ed:8d:79:30:85:fb:08:c1:fa:
                    cc:3d:56:f3:48:f6:09:09:d2:73:e1:b6:ad:7e:cc:
                    70:dd:91:b2:f9:2d:71:c6:0f:75:f0:b0:ca:03:6c:
                    46:c3:09:1e:e1:e9:1e:6c:10:ba:71:61:03:db:9c:
                    46:fb:7b:6d:18:8e:8d:09:63:a7:ff:ae:ab:d6:99:
                    fe:83:cd:56:26:a6:ed:41:36:1e:fd:f9:37:50:bf:
                    65:ab:bb:fd:d7:41:9f:df:d5:90:37:e9:ee:08:09:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5F:0C:9C:E9:C0:6B:31:22:2A:62:D6:C9:D4:68:82:B5:8E:E5:EF
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:0d:f9:1e:39:9e:03:af:eb:03:1c:49:2a:1a:e3:79:8b:
         1d:57:95:b6:84:5f:21:d5:3a:87:49:ca:81:c9:27:78:6f:26:
         fb:9c:28:17:65:63:cc:1f:3b:f9:7f:df:02:6f:b2:fe:70:bd:
         81:0c:76:ba:66:2a:00:58:ef:9b:c9:23:a7:7f:f3:51:19:eb:
         1c:23:58:f9:7a:52:9d:65:54:05:5a:cc:4e:ac:a3:f3:14:ce:
         46:a7:bc:5c:a1:54:06:fa:11:24:a1:91:17:4b:98:c9:d6:c0:
         ef:db:06:1b:32:ce:d1:5a:ad:a9:47:21:42:bb:bf:1b:a4:85:
         3c:04:04:eb:68:d7:eb:68:62:8f:cb:5b:e8:73:d0:50:86:d8:
         2a:33:cb:31:d8:ce:d9:a5:8c:aa:61:1e:c6:11:b2:74:fa:20:
         6a:d7:0b:d5:3b:82:7a:34:37:1b:06:7d:23:07:e5:a3:42:09:
         1a:a7:98:24:92:34:5b:12:e2:26:ed:af:42:03:f1:21:cd:81:
         db:01:45:1d:b8:cf:0b:74:2e:2a:99:1a:38:6d:da:04:09:a7:
         f3:88:b7:6b:cb:ee:2f:aa:8b:3a:52:05:fd:1e:bf:2b:09:ee:
         f4:c4:9e:fa:55:b7:f8:b6:76:fa:b6:c5:37:8a:fb:65:1c:cc:
         f0:7c:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----