Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File:                     oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier:          dMp53yaHiuHP8aiE8PgCwoP5UjwVxGWJ/8rlFd3vqiM=
Subject key identifier:   8F:09:91:D8:F7:FA:94:08:E2:B5:88:D0:79:71:63:97:EC:43:FA:D1
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer:       /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial:       01962F06E5A9CA49CAA7D69A40C9EFB4EA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number:          0F91
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
                          2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: itPrZ/5Vjp0hknlh/ipRXrxurJH5yrgUk8ta0nr0SHs=)
                          3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e5:a9:ca:49:ca:a7:d6:9a:40:c9:ef:b4:ea:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=8f0991d8f7fa9408e2b588d079716397ec43fad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:81:86:ce:9d:0f:63:8a:0a:c4:8a:e9:87:
                    46:97:5c:77:c6:90:12:5a:19:dd:22:83:c1:25:22:
                    f0:d5:a6:a4:78:0e:0e:a7:4d:d3:7a:6e:8a:63:6d:
                    82:eb:fa:f7:24:52:42:0b:69:46:ee:7b:2a:13:6f:
                    f0:27:84:71:4d:59:20:98:9e:3b:88:65:9a:f1:9e:
                    f5:0d:ac:3e:e5:95:82:b0:17:9e:45:3a:7b:ee:20:
                    4b:44:08:5d:ca:7e:cd:86:43:91:03:a8:45:e6:fb:
                    7e:7e:a3:91:65:87:1a:b7:01:2b:14:26:54:2a:07:
                    d8:dd:0e:4c:cb:7f:40:56:d4:cb:89:08:9d:67:65:
                    9f:df:04:96:6a:59:0a:50:6d:bb:01:8b:a8:19:93:
                    5d:17:c6:8b:63:b3:89:9c:02:c9:77:9b:92:f4:26:
                    eb:e0:c8:95:4c:8b:41:80:7a:8d:02:af:1e:23:5a:
                    29:5c:44:6b:84:65:4d:c1:11:66:d4:04:b9:70:61:
                    12:c5:c7:91:7f:b1:0d:0a:6f:5e:56:a3:a8:ec:98:
                    57:25:01:5a:18:75:1d:a9:85:09:77:1f:50:67:1a:
                    e7:ec:7c:b1:a1:3b:97:b2:cf:5c:39:a7:10:0f:ad:
                    48:3b:b2:e3:2a:71:8b:cc:10:12:fa:9c:5d:9d:64:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:09:91:D8:F7:FA:94:08:E2:B5:88:D0:79:71:63:97:EC:43:FA:D1
            X509v3 Authority Key Identifier:
                keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:93:39:74:03:7a:cd:9e:3a:78:a1:e1:bf:23:d5:f5:db:
         11:d0:cc:4c:3b:15:31:75:49:fc:aa:2e:1d:f1:af:e4:b7:4b:
         26:94:7a:2b:51:16:d9:69:e1:34:63:01:88:8b:ca:29:49:ab:
         3f:35:b6:fd:2b:3a:a6:21:8b:00:a4:62:98:51:ff:01:b3:e4:
         41:ac:1c:ea:17:9a:23:62:4b:49:85:36:cb:4f:04:b6:60:57:
         88:04:df:00:b8:02:36:8b:e0:67:45:42:46:8d:0c:90:83:7e:
         04:cd:56:e1:61:6e:de:e0:1f:90:dd:43:13:95:dd:0a:a0:d8:
         38:f2:fb:1c:1d:27:19:70:aa:83:7d:4c:97:3b:7c:9b:a3:45:
         68:2b:cd:64:a3:66:65:21:b2:79:f4:c0:b0:dc:94:11:46:be:
         c2:73:44:3c:67:25:f1:e2:0b:58:f1:a0:e7:c1:2b:6a:7f:15:
         85:b4:4b:d3:84:a6:70:fc:4f:69:0a:a9:da:bc:86:95:43:f3:
         e1:e5:8b:aa:87:9b:63:5e:dc:e0:63:ea:c1:28:d3:ba:5c:e5:
         16:67:3b:8e:7b:51:03:cb:05:75:5c:7f:3c:47:18:d0:d9:43:
         9b:f4:cd:f5:35:0d:d7:09:45:26:a3:8e:fd:dd:25:d0:68:a6:
         df:79:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----