Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File:                     o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier:          vRR+LXnpSlstcW4SVcf4mI/4eu1/yMHI/x1bvsnO37c=
Subject key identifier:   12:2C:EB:C9:C2:88:A8:D5:92:69:51:C7:CB:8B:EC:01:5D:2C:C4:45
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer:       /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial:       01962F748D8FCAE5A6B23B2A265493F906E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number:          11AD
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: BKO9_ka076C-tXU0qbN-UGwmJGI.roa (hash: XdjBZ6slflGj5L2hVm6yPejyKM1/cZtcRCLImvpU8/c=)
                          2: TQC_J_n_-TEcjtQ--Snxo_Bz6IQ.roa (hash: OYVJWqinUu1yhTH3sZjKq6EGQxrkbvI8drSvSE0FOvI=)
                          3: hJb28BPhkPKFBgqvGsU8_1tv0Q4.roa (hash: VXcAvS0yl0OmKbIx5rn61FhcJXudPrnwGtfqe8chNNI=)
                          4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: E4Z0A3TJeiB1TztUXbk6GmO1pHsNmUvYuqTAW/QY0z8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8d:8f:ca:e5:a6:b2:3b:2a:26:54:93:f9:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=122cebc9c288a8d5926951c7cb8bec015d2cc445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:b7:d7:74:f5:b6:47:07:6a:13:4e:12:fa:
                    54:44:03:1b:00:2f:42:65:1a:f9:15:be:52:4b:a2:
                    57:15:64:52:13:e6:01:c8:e8:94:8f:e4:f6:92:7d:
                    b5:da:b8:20:09:7f:16:52:47:41:30:b5:b1:06:b3:
                    7d:e9:b3:d4:20:5c:70:e7:3f:d0:ad:33:ac:46:78:
                    86:46:8b:12:85:a9:c7:ed:e6:ba:2b:6e:23:44:36:
                    f7:b4:20:4e:3e:8c:61:48:ff:09:34:94:ee:78:2e:
                    56:ee:cb:cb:41:a7:75:ed:ea:31:9a:20:95:5f:9d:
                    e8:02:30:d9:5e:78:e8:d1:ba:09:79:9c:ec:16:78:
                    b3:68:90:7d:88:59:69:f5:f9:a8:0c:f3:b5:37:0c:
                    3d:75:3f:a8:84:3e:69:55:43:f3:62:92:06:78:c9:
                    e0:4d:5b:9b:9e:68:ff:ff:fe:1b:1f:00:3f:e8:49:
                    4a:d3:df:16:85:dc:16:c4:64:ba:b7:cd:f1:a1:4d:
                    8d:8d:5a:3d:5a:ef:73:eb:d9:1e:8f:9b:4b:c7:3e:
                    3b:bf:d2:8c:64:9a:d9:a5:5f:96:b6:83:14:6b:4b:
                    a2:16:e6:83:e6:a2:c5:74:85:95:c7:61:93:7c:dd:
                    ec:33:e0:c7:bb:e5:ae:ae:c7:e9:8e:47:36:e1:ca:
                    61:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2C:EB:C9:C2:88:A8:D5:92:69:51:C7:CB:8B:EC:01:5D:2C:C4:45
            X509v3 Authority Key Identifier:
                keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:52:bd:ff:6f:59:31:ce:2f:91:a0:55:40:c3:4a:f4:02:
         59:40:c3:1a:5a:ca:e7:0b:d1:43:d5:7f:d6:13:c7:6b:c8:75:
         4f:c2:3d:06:97:c8:89:3e:a8:22:39:d8:c6:30:ca:ac:25:b6:
         33:36:5d:e9:c0:de:1e:ab:ee:29:2e:b6:96:62:0e:0b:91:bd:
         ba:f1:ea:54:fc:37:ef:f9:54:41:0f:c7:60:46:c2:5d:92:0c:
         27:f3:90:89:5c:80:c2:8b:43:bf:ae:a7:42:d0:52:83:5a:60:
         78:4b:9a:7b:bc:ba:64:0d:4c:f5:de:fd:f5:be:fe:1e:fc:5d:
         29:75:2f:c1:1c:5d:31:5c:07:ad:57:20:d5:bf:00:82:89:d1:
         60:73:8b:84:12:a8:5f:f1:58:fb:33:0f:9b:61:1f:f0:ff:f2:
         1e:8d:24:90:eb:fb:f1:3f:8c:b5:28:41:23:ea:5b:c1:95:cc:
         34:87:b4:e3:95:b1:48:d2:10:3a:88:88:24:85:52:52:27:23:
         58:5e:ad:5e:a1:be:23:08:5b:59:65:39:39:47:94:17:96:cc:
         3d:f2:42:72:8a:30:77:2d:f2:46:07:0d:96:62:ed:78:76:48:
         8a:d0:b0:8a:ea:4f:a5:13:c3:a1:ee:70:2a:97:b3:b8:b7:68:
         c2:35:7b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----