Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File:                     ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier:          hwGhJTekoHoKnzhfU8ifDi2LUaSGeftAT83TXUwDGIU=
Subject key identifier:   66:E8:11:32:BE:56:77:75:2F:E0:C0:87:DE:15:EC:10:69:79:D7:D6
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer:       /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial:       01962F742A90029295BDC11D1AD247B6E6AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number:          07F4
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: XYcheSKHJ9xWig1+JuznAKISWOJPbqTqDNOJR1nGCPU=)
                          2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2a:90:02:92:95:bd:c1:1d:1a:d2:47:b6:e6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=66e81132be5677752fe0c087de15ec106979d7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:c6:d5:ba:d0:da:12:42:9f:8e:13:19:26:
                    8f:7c:31:90:46:c7:65:0f:d9:d4:33:48:e2:24:47:
                    46:a7:c7:a8:3d:ee:df:5c:e9:9b:eb:e3:20:df:b5:
                    f3:4f:7c:f0:bc:dd:91:a8:7a:29:06:84:71:7d:49:
                    97:e6:f3:05:4a:ce:65:d4:4d:85:1d:c8:24:96:ed:
                    7e:de:f2:56:2f:aa:a9:90:a2:c1:07:25:45:0f:fa:
                    bd:fb:b0:9a:87:ee:2a:8b:40:99:11:4e:39:b6:8e:
                    f2:80:30:db:13:a5:f5:7b:4e:39:d6:45:bc:41:dd:
                    32:aa:a5:94:5a:fa:cb:b3:77:53:f7:dc:14:23:22:
                    b2:79:53:3f:e7:36:ab:63:ca:2b:18:3e:33:cf:07:
                    58:17:90:d7:b6:9a:28:24:8d:74:51:15:3d:6f:54:
                    93:54:d1:10:17:7a:69:3d:f8:42:ec:b0:83:b7:af:
                    fa:50:7f:95:bb:32:86:1b:d1:1a:50:95:5d:5b:b3:
                    76:a4:80:58:9d:d6:f9:5b:4c:ac:08:d9:c0:51:59:
                    be:7a:6f:0f:6d:8e:c0:c6:cc:bb:83:73:e2:ce:1b:
                    7e:19:42:96:a3:c5:ad:af:94:7c:e5:bc:e7:af:42:
                    ab:5b:e7:a3:4c:f1:9a:ec:72:5d:d6:7b:41:df:17:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:11:32:BE:56:77:75:2F:E0:C0:87:DE:15:EC:10:69:79:D7:D6
            X509v3 Authority Key Identifier:
                keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e1:fb:e9:dd:a1:35:4f:64:7f:4a:ff:cd:19:90:46:6a:22:
         f0:35:a6:9d:28:ef:71:89:d9:3c:f4:8a:1a:d4:91:1a:ee:9d:
         01:17:5e:2a:77:ee:24:0e:ce:c9:f6:24:45:a5:2f:5b:c2:23:
         08:6c:1d:ea:89:72:6f:d9:a8:77:d3:58:9b:46:f3:66:17:de:
         1f:8e:c2:df:5e:9d:ac:c1:81:27:ec:c4:d1:01:bb:e9:a9:f9:
         26:b6:bd:85:4b:33:5d:b8:0b:6c:6e:9d:7b:42:e8:51:1a:c1:
         88:f3:43:8f:90:19:69:d2:14:07:b2:8b:36:78:9b:ad:06:8c:
         9d:cd:73:37:8e:54:37:38:bd:22:b7:c9:89:d3:54:1c:98:8a:
         04:7a:cb:e0:dd:96:89:3c:09:d9:9e:90:60:0d:0a:ba:12:2b:
         30:95:3e:b3:cc:e9:30:be:dc:64:98:b5:6e:c0:c4:85:b0:14:
         79:c3:b1:dc:78:65:e9:8e:99:9a:18:b7:64:6c:40:c5:57:63:
         e4:78:54:ee:f3:58:65:a2:f8:55:bf:15:19:d4:b3:e8:48:cc:
         69:0b:a7:fe:87:fa:4e:ae:22:7e:dd:b9:10:b5:f4:7f:a4:b4:
         eb:2a:c8:6c:24:51:58:02:ef:22:0a:aa:97:b5:1b:fe:fb:0f:
         4e:42:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----