Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File:                     o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier:          TBE6zQ9X1EqnFocnH/9W7a5hr//5ju80CO0d2NK1hL8=
Subject key identifier:   B4:C2:C0:82:5C:0E:F9:32:50:F2:6E:02:43:66:74:11:30:AC:E8:DA
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer:       /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial:       01962DF3FBE84D88E4F064AEA5AA56DDC1E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number:          0FEB
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: dM8ue4QsbABqpycB_HrMjLWl-Ek.roa (hash: 6OKHBYa4aX8P3AT8g1+RNo8KpQbjldC66CV5IU1+Dk8=)
                          2: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: 6ATkDcJHorTS850GCfF2ajo8iujpC5dFq+ksirGoVmw=)
                          3: syr1WAsKdpbK3B-2acqa83QBouY.roa (hash: 7AhmNgpdXoA3dOcpljZ7vHI4I+47jOSplCREprRNiXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fb:e8:4d:88:e4:f0:64:ae:a5:aa:56:dd:c1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=b4c2c0825c0ef93250f26e024366741130ace8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:da:c5:5e:03:9c:d9:37:60:52:d6:fa:48:
                    ad:1a:53:7f:f0:84:ea:6e:71:89:8b:2b:81:94:e9:
                    81:12:a6:69:59:70:50:d8:f1:78:68:fa:90:1e:3e:
                    b9:00:a0:e8:db:96:f2:9f:5a:02:35:bf:3a:e5:47:
                    2b:36:b7:4b:bb:74:2c:41:a9:a0:8b:6f:d6:96:da:
                    b1:2b:21:20:2b:e4:2c:81:76:16:c4:57:04:d4:62:
                    ca:f8:7b:b0:ac:f2:33:4a:d9:b2:4b:c9:db:f8:3e:
                    4d:46:f6:d2:58:ca:9e:cc:86:d2:c8:af:60:29:f3:
                    91:82:3d:1f:64:1a:f8:aa:9e:d4:52:9c:7b:59:39:
                    e4:53:5c:da:1f:a0:d9:fa:b1:7a:3a:e0:bf:39:ce:
                    b8:b6:e0:63:1a:8f:a3:f6:99:17:99:53:d9:89:55:
                    5f:c3:6c:a5:a8:7e:ef:69:83:dd:b3:a8:d4:dc:0c:
                    21:61:84:cf:53:8c:0d:61:f8:64:9a:92:6c:1e:f8:
                    70:57:da:23:d4:31:48:53:c8:c9:5b:1e:32:88:46:
                    6a:6c:8a:3a:f9:ad:0b:83:7b:90:9b:c4:4e:70:a1:
                    d0:1a:36:34:41:ff:8b:9f:b7:9c:87:09:51:45:f5:
                    76:12:ad:09:c1:a4:49:4e:18:a6:d4:46:af:af:3e:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:C0:82:5C:0E:F9:32:50:F2:6E:02:43:66:74:11:30:AC:E8:DA
            X509v3 Authority Key Identifier:
                keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:09:f2:cb:20:0d:5e:c5:e4:fe:6a:41:20:8e:fa:f9:fa:92:
         10:b5:36:06:a6:8f:2d:9a:70:39:cd:57:8f:1a:fc:82:f0:4f:
         b0:fe:c5:9c:a9:0a:08:0c:53:b4:24:59:c9:8f:78:1f:5d:95:
         59:0a:a5:da:69:19:2d:99:28:1c:7c:14:b2:d4:7a:14:56:01:
         e8:e2:65:1e:15:28:2c:62:9a:62:99:b6:45:39:dc:e7:ac:d6:
         39:12:14:48:ca:cf:e3:4c:72:42:20:0a:fc:d1:8a:62:65:70:
         93:84:41:d0:6f:e8:73:21:b8:84:1c:64:3d:77:83:b1:f3:43:
         fe:0e:b7:9e:62:f5:2e:a1:d6:42:c9:57:48:91:8f:97:ae:60:
         b0:d4:f3:bd:cf:d7:d7:d9:c5:a9:cf:9e:5d:7f:f6:72:6d:ab:
         b8:ad:0c:7a:72:af:83:31:5a:b4:97:79:58:39:b1:c7:68:8a:
         3e:6c:9d:08:61:b5:7f:19:03:1d:5c:c3:03:aa:1a:b3:27:58:
         23:48:58:f9:eb:c3:e1:6d:51:a5:ca:48:9a:d4:e6:36:92:5b:
         14:8f:ff:86:5a:ec:bb:3f:6a:02:65:a3:e5:7f:c2:97:23:2b:
         90:3f:c9:c6:39:c6:67:09:e4:f2:e3:9b:fd:e9:9f:ce:02:81:
         41:77:d2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----