Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File:                     oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier:          lNdrSJ7X88amoIc4vNkfNKTqB0JgmSOm+G7FVA8B62k=
Subject key identifier:   FE:7F:45:65:22:EA:90:A8:E0:6E:83:24:66:45:66:D7:27:89:7B:6C
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       01962F74D01F63F40C6B683AA6EB6EA99665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number:          0DAC
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
                          2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
                          3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
                          4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
                          5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: 8Oat6WlwUlNI85szhi4ypu6r+LDQoYOr9RRCMxCyeK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d0:1f:63:f4:0c:6b:68:3a:a6:eb:6e:a9:96:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=fe7f456522ea90a8e06e8324664566d727897b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:48:40:21:ab:0f:95:75:e3:49:19:b9:d0:
                    13:e5:c8:2a:43:1a:63:06:46:77:98:85:92:35:ac:
                    94:4d:30:4f:0d:ca:0b:37:c9:cf:7f:49:db:a6:e7:
                    4c:31:51:68:d4:06:d6:10:46:e7:4d:b7:6e:7c:94:
                    48:bd:7c:86:67:a6:bf:a6:0d:0d:dc:18:be:63:c5:
                    6c:1d:e1:9d:9a:c5:98:dc:e4:ae:fd:44:ae:4c:50:
                    7a:db:d0:9d:ad:7d:a3:2c:36:b9:6e:03:bc:af:c4:
                    03:d7:e8:0b:37:85:73:52:6e:2b:c5:bf:93:4a:0d:
                    6b:2f:b8:c1:83:96:16:59:47:4f:e0:a8:87:d4:fc:
                    19:a7:c4:7e:43:6d:4f:20:a2:55:c6:7e:73:6d:87:
                    4d:a4:d5:81:98:ff:5e:0e:18:77:a0:2f:53:29:9c:
                    46:91:98:6a:d3:80:cf:88:72:34:be:46:a1:18:bb:
                    53:26:6a:af:c6:25:ee:de:4f:be:e5:86:cb:33:12:
                    a7:56:72:d2:df:72:24:50:49:be:26:99:0a:91:1d:
                    35:19:a3:3d:ee:c9:f9:ab:c2:71:79:3a:6b:e6:a1:
                    a4:ea:91:48:88:ee:d2:a9:4a:e7:ce:69:40:b5:d7:
                    ab:61:5c:85:d9:be:14:cc:ca:d3:1f:07:5c:d7:a6:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7F:45:65:22:EA:90:A8:E0:6E:83:24:66:45:66:D7:27:89:7B:6C
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:de:ad:66:16:8a:37:90:8c:e9:3f:93:80:da:3d:86:eb:
         53:f8:d0:1a:55:3d:a6:b6:be:2c:34:ee:8e:1d:f6:f1:89:50:
         2a:e7:e8:77:0b:e6:86:9e:8c:bc:86:08:75:aa:e7:6f:1d:6e:
         4e:85:87:7f:73:a4:58:35:d9:f9:b2:66:1d:48:c6:6a:35:67:
         e4:a4:45:0f:51:b3:b7:87:4a:2e:80:d6:9c:a6:44:b1:10:eb:
         24:d1:a8:bd:d7:70:32:e2:7e:34:5a:29:e4:0f:fc:aa:90:2b:
         28:26:80:25:32:e9:26:10:33:d4:66:13:10:30:de:86:0e:eb:
         65:ba:ed:5c:1c:e3:69:54:d5:9d:3d:f0:b1:8c:f6:6e:d8:5f:
         5c:55:6d:fd:ec:bf:c5:9c:6a:35:54:a9:74:6b:6f:f6:c3:46:
         7c:3e:63:57:68:c5:1c:e2:dc:f2:00:1c:c6:97:cd:70:51:c4:
         e7:26:d4:da:d2:82:d2:16:fc:db:03:d1:c4:49:6f:c7:3a:a5:
         3f:bd:7e:04:85:59:d7:60:19:9e:b1:6f:38:63:01:56:f1:6b:
         d8:45:fe:63:bd:b0:2c:a9:0a:51:b6:f0:4a:aa:71:80:7d:29:
         e9:05:84:10:0c:85:5b:02:a0:fa:de:72:89:4b:68:3e:ca:74:
         63:70:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----