Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File:                     oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier:          3raWUrXXSxJo+z76+BXyw/g0RlAk1z+n+wlyKmt8lbI=
Subject key identifier:   31:5A:29:99:6C:11:AA:93:86:63:F3:54:B1:62:7C:7A:AF:96:71:AE
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer:       /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial:       01962FAB187D4E161A08540C85F3500D6362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: SxgKNPaYJVhAK36SOSTuyxJmYzI.roa (hash: iBEUhnRScZ+rajzC9bqU9rcXbnYIQMvrpQOY+tW8FQc=)
                          2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: qAkrT2Qg+5Y8sUgAo8I45blsVNNTiHFTLJyWhqWy32U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:18:7d:4e:16:1a:08:54:0c:85:f3:50:0d:63:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=315a29996c11aa938663f354b1627c7aaf9671ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:c1:de:8d:e0:4c:f4:ff:49:6e:72:9e:e6:
                    cb:07:5c:91:db:f9:32:5c:7a:f8:27:d4:d0:12:5f:
                    9d:db:b6:b2:0b:ac:5b:bf:a8:2c:c9:27:74:ee:ce:
                    25:7c:de:12:92:6c:a0:8e:5a:04:08:b5:95:15:48:
                    41:86:26:fc:ca:8d:fc:64:d8:25:46:e9:25:74:fb:
                    4a:18:2e:22:5d:ea:d7:15:69:c9:7a:72:1f:91:be:
                    9f:26:80:46:50:79:a7:a6:23:2d:90:b8:19:ce:04:
                    0b:4c:be:97:dd:b0:16:18:5c:a1:c7:94:6e:0f:b8:
                    12:f0:69:a6:0b:b6:82:e3:81:60:2a:fd:9b:23:b2:
                    6a:78:de:b0:40:c8:7a:c1:da:c0:e8:cc:a1:21:13:
                    8b:2f:08:47:41:f0:5b:5b:2e:26:e6:8e:19:dd:30:
                    8b:6b:1f:47:dc:0b:e6:7a:0d:53:b6:de:c5:c1:9a:
                    ed:6a:45:ca:30:7f:02:32:ce:7f:e0:9d:22:29:a4:
                    7f:7c:aa:ad:77:eb:de:60:f5:6e:87:c7:80:42:3d:
                    4e:16:af:99:82:74:14:3a:54:d4:4d:e5:0f:2c:a9:
                    27:7b:34:ce:20:db:8c:e8:8c:3f:a5:2f:98:e0:e4:
                    06:bd:e2:2a:7b:a5:2d:21:34:39:64:df:11:ce:45:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5A:29:99:6C:11:AA:93:86:63:F3:54:B1:62:7C:7A:AF:96:71:AE
            X509v3 Authority Key Identifier:
                keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ae:1b:8b:13:f2:7f:87:9a:6c:63:32:1a:8a:3d:fc:67:5d:
         5d:4d:c6:1e:43:83:8f:43:72:b7:cd:ed:d9:a3:84:9b:54:ff:
         88:15:0c:e0:de:85:da:a3:a5:75:3f:1a:4a:4e:e9:d4:bd:8d:
         e7:b9:93:a7:23:5e:93:5a:25:3a:99:e0:c3:d7:c4:5e:f6:34:
         46:2e:5d:8b:8e:95:4a:7e:ca:b8:62:fa:87:90:57:b9:b9:32:
         5c:3e:9e:4b:be:19:c5:7b:9e:6a:50:4c:3e:76:8f:2c:b7:ec:
         96:3a:d2:7c:f0:4b:b1:fc:99:81:a4:17:6d:fe:4d:0c:f8:e8:
         37:47:a6:11:b0:49:bc:92:7d:94:05:40:56:80:94:fc:40:6a:
         6a:0e:53:00:d7:2e:ad:ca:7e:b3:fc:ee:94:62:61:80:37:bd:
         3d:7d:62:50:30:a7:e7:fa:7d:f1:1e:86:78:b3:cb:e0:73:e1:
         3b:60:97:fd:21:a4:c0:61:6e:32:cf:7d:d0:9b:ea:06:f1:27:
         2a:78:e2:5f:ea:25:3f:66:5a:72:93:f3:f2:2a:07:a4:b2:0e:
         4c:f5:19:1c:39:4a:c0:99:50:47:82:c3:02:01:4b:c1:af:b8:
         87:8a:10:2a:7e:4b:eb:81:4f:67:8c:61:df:38:db:8e:5b:84:
         d5:d0:aa:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----