Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
File:                     o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json)
Hash identifier:          dZ/6BjsD9ml2XkLODjbFaaWBS2DQVcmTkYS1LV1wZIk=
Subject key identifier:   CF:70:B1:F0:E1:FA:09:DC:44:AF:08:D7:B3:22:E1:4A:31:57:B1:F0
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Certificate issuer:       /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial:       01962F7481A6140B09EE65E31C8EE119E093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
Manifest number:          1518
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=)
                          2: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=)
                          3: 5Ni6TTomkpPGcPlO3kSvRsrQu-U.roa (hash: 1JbN0aQZgu8I5lbFUp1QWBBO58Y4WN7qnz2P+FqHbJQ=)
                          4: 7S8CxuCZgwEuPwPQrodHEuixK_c.roa (hash: Qpde78GgRiZiGUxC0MztnIMZR2EI3yqwC8R5K89O7xs=)
                          5: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=)
                          6: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (hash: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=)
                          7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=)
                          8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: wYKvPbJdJefsX/GKX1MVnGR7EcdVoli1lHrPqZwayaA=)
                          9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=)
                          10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=)
                          11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=)
                          12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:81:a6:14:0b:09:ee:65:e3:1c:8e:e1:19:e0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=cf70b1f0e1fa09dc44af08d7b322e14a3157b1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:9b:87:f2:1a:68:2d:55:6d:83:c5:c1:b9:
                    0d:23:fb:10:9a:3e:8f:2d:56:dc:e2:6a:53:7d:f5:
                    15:1b:f4:c2:dc:bd:03:80:66:bc:1e:16:de:03:e5:
                    84:b5:f4:07:f6:0c:7e:06:7d:58:49:a3:33:9a:aa:
                    80:25:ff:22:ea:d2:5d:4f:63:7d:98:b7:e0:a4:38:
                    79:2a:56:57:47:a5:dc:10:89:55:5b:f4:9d:70:b4:
                    fa:87:d9:0a:0c:09:8f:66:8c:c3:ea:a4:6c:16:47:
                    2c:45:db:ba:6f:b8:86:0a:7f:22:24:ec:d5:a3:b2:
                    16:70:6f:6a:dd:8f:4b:8f:bf:15:ef:7a:7b:75:07:
                    db:4f:0d:50:d8:b5:89:87:81:84:7b:1a:79:ab:a9:
                    5e:39:e4:f0:8a:02:b2:ad:f0:21:d7:09:55:e2:86:
                    94:2f:dd:22:e6:d9:a1:f8:ba:73:0b:2c:7d:39:19:
                    c1:64:c5:90:b7:80:3e:e1:26:50:2c:fc:14:21:d5:
                    c7:81:a1:c4:11:dd:4b:b5:bd:2d:ea:9e:32:91:ea:
                    c0:55:9a:7e:be:9d:96:a4:c7:0e:4e:a2:aa:50:d6:
                    61:69:b5:46:6f:15:50:90:f2:42:3e:42:86:bd:a5:
                    e4:a6:24:1e:b1:70:14:db:57:16:aa:32:8f:36:cf:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:70:B1:F0:E1:FA:09:DC:44:AF:08:D7:B3:22:E1:4A:31:57:B1:F0
            X509v3 Authority Key Identifier:
                keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d0:bf:35:c4:65:8c:82:74:ae:ee:1c:e3:0d:88:7d:63:64:
         e8:8a:bb:80:4b:d1:99:e4:b5:e7:4a:0b:e2:76:da:5a:49:c3:
         db:23:13:d9:16:d4:be:16:62:74:5e:76:aa:08:56:c2:fc:b1:
         bd:cd:c2:45:73:aa:61:72:1d:fd:c1:4e:c5:0b:ea:7b:c5:6d:
         2f:3b:00:16:be:58:f3:8d:1f:e2:1d:8a:f4:6c:f7:fb:07:93:
         2c:6f:c0:d0:20:08:68:47:cf:f5:37:d8:98:22:76:5b:a0:a1:
         3c:06:09:63:b8:cb:10:52:2b:ba:d4:ac:6e:4e:f9:85:08:99:
         ef:92:13:7b:aa:9c:fe:46:7f:af:f9:eb:bc:5a:7a:73:58:77:
         fc:53:b3:2f:18:ee:75:1c:13:30:2a:47:33:02:17:44:df:27:
         7a:0e:73:4a:74:fd:c0:80:78:64:9d:64:24:88:7c:29:3c:c5:
         d8:b7:d1:e8:6c:e1:b3:1a:12:55:f5:ab:c3:c1:fa:38:18:da:
         92:03:a5:09:43:b1:0d:ff:6b:ef:7a:38:11:4a:28:3b:39:b4:
         c6:86:0f:98:9c:62:a2:c3:dd:aa:6f:f7:e4:36:a0:eb:fe:de:
         51:03:66:f2:3b:78:19:6e:0d:5d:31:66:a7:22:4a:e0:63:3a:
         e5:c4:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----