Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File:                     o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier:          hjXsS3gh2fT6F+dqS6LhJfG408Z3Y3r9KHWrEN9t+Vg=
Subject key identifier:   0A:4A:0F:F6:6B:3F:7B:29:AF:1D:AA:91:71:3F:A8:BA:8B:D6:A0:6F
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer:       /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial:       01962FAB7303FE3B43E8851D642B8EC74810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number:          03DB
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=)
                          2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: zB6US3Yq+WXv2kogAQRd9BgJP72gTvJmwYYC02XbS6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:03:fe:3b:43:e8:85:1d:64:2b:8e:c7:48:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=0a4a0ff66b3f7b29af1daa91713fa8ba8bd6a06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:c2:86:c9:75:45:81:16:b0:ba:85:07:43:
                    cc:97:8c:cd:62:8c:a6:6b:8c:fd:29:b7:82:55:c4:
                    c5:92:b7:26:b4:09:2b:35:a8:63:e6:9c:da:f4:8d:
                    1f:aa:18:61:14:9f:50:27:da:9e:0e:54:f6:aa:69:
                    86:0a:f2:5f:1e:01:52:b2:fc:97:d4:0c:23:d0:ca:
                    2e:5b:b1:12:09:af:2f:83:a2:c5:89:15:f5:33:46:
                    52:52:c5:7b:a6:5b:ef:af:93:27:d3:13:6d:eb:ce:
                    b3:7d:35:6b:e8:b1:a4:52:47:59:c3:8d:5a:1d:1d:
                    49:42:28:ff:7c:03:99:56:30:28:c6:68:e3:d0:87:
                    f0:75:ed:48:d8:0f:ef:0e:a7:ea:3e:bd:2e:7c:4c:
                    bc:76:f5:55:03:98:cd:33:5d:3e:dd:e6:5e:b5:2b:
                    69:ec:b8:c9:06:ab:bf:43:10:ea:6f:56:d0:62:94:
                    9f:60:85:bb:94:c8:7c:f6:64:70:57:d0:04:06:2e:
                    93:bc:68:03:8a:0a:9a:95:80:50:7c:04:ea:c9:77:
                    07:2d:ba:dd:c3:1a:bc:8e:f1:a9:83:e0:00:d6:79:
                    cc:37:0b:d5:88:89:ac:d4:52:7a:7a:c9:48:aa:c2:
                    00:9d:11:09:01:b3:9c:76:29:ef:9f:30:88:06:3c:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4A:0F:F6:6B:3F:7B:29:AF:1D:AA:91:71:3F:A8:BA:8B:D6:A0:6F
            X509v3 Authority Key Identifier:
                keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1d:91:03:e3:01:ed:52:76:d5:71:be:a1:c2:24:ea:d2:3f:
         f1:2f:ec:83:cb:b7:bf:a3:8e:d9:6e:5e:59:82:70:9e:d2:b3:
         a8:b6:a7:41:f3:70:7b:cf:17:ed:14:f2:b3:74:39:3f:7d:c5:
         ab:1b:8e:ed:61:24:fb:0f:d9:89:5f:cd:43:8a:7b:ff:04:99:
         cd:05:8f:8d:64:b1:ac:45:a2:58:5a:9d:98:c1:bd:f6:29:21:
         b0:42:98:71:fa:10:a0:da:a1:8e:6f:06:5b:56:1f:bd:31:05:
         ab:96:11:35:32:01:55:6a:74:2d:49:11:2f:e0:b1:a4:7b:67:
         3d:37:7f:3e:50:9f:54:c8:6c:fc:7b:bd:35:ca:e2:9d:96:f9:
         b2:92:01:f7:5c:44:b6:c5:93:1b:e1:dc:7a:41:3c:96:19:96:
         fc:ab:11:04:b3:5f:74:23:02:3a:00:d5:34:a4:00:38:df:33:
         26:26:61:04:8c:a9:f5:88:0e:2f:8d:dc:7c:29:3a:ee:b7:0b:
         b9:98:4a:b5:4a:74:c8:e9:c1:a7:e3:e5:00:67:4a:80:73:9f:
         48:b4:89:c4:1b:ab:9e:e8:07:6c:8b:db:2f:a0:2a:db:a9:15:
         6f:f3:d0:e3:38:e2:ce:48:61:b5:b4:b8:ee:4e:f3:82:d5:50:
         ae:45:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----