Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File:                     o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier:          r4IYd34WHsqEFCOE5Prjffry+dMINl1Ugb9h0kQzCnU=
Subject key identifier:   16:5F:04:77:5D:55:66:4D:74:43:22:7D:74:B8:AC:BB:5E:DC:89:17
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer:       /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial:       01962FAB5E06399247C0D5658887E5C0C881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number:          1056
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 3REEAprnZIBusO6q6WWrCX9P-HM.roa (hash: vH8qgeYWcERpU9E7qeOHsrxBazYwgyfC550mI+D0FkE=)
                          2: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: 4fCqwrAM5fJehQbZ5G/8O9CfTV05RvDgIDbOr1kzODg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5e:06:39:92:47:c0:d5:65:88:87:e5:c0:c8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=165f04775d55664d7443227d74b8acbb5edc8917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:77:45:6d:76:26:ab:e9:e4:cf:6e:87:bf:
                    28:ab:bb:c4:bc:98:7a:53:a9:c1:b7:5d:6c:47:5e:
                    09:b3:5c:2f:68:f2:0c:05:c4:54:ec:5c:c7:f8:a5:
                    93:a4:75:93:99:46:06:5d:c0:4b:31:11:57:b4:9b:
                    39:65:48:fc:ad:21:e5:0f:41:39:1a:2f:60:14:e2:
                    46:4e:dc:de:d8:4a:2e:48:62:72:63:40:5d:06:94:
                    7f:41:d9:7e:0a:ad:f7:d3:06:f7:90:0b:de:93:ba:
                    45:52:ab:15:bf:08:da:f8:00:e4:94:82:f0:6c:db:
                    cd:54:21:df:c1:f4:be:85:48:b3:fd:82:b1:9a:94:
                    57:68:43:94:04:0b:50:a2:39:97:74:be:8f:95:5e:
                    fa:6b:5d:22:fa:dd:12:d9:3a:02:a9:3a:45:12:6f:
                    6c:f6:ec:e8:4b:c1:25:94:13:6a:1d:d1:a7:e5:70:
                    1e:d4:4a:fd:01:d2:ea:d0:d8:76:0d:b8:07:d8:8a:
                    8a:f6:d6:09:bc:fc:c3:29:3b:31:ec:16:bf:f7:1a:
                    1d:d8:e6:51:5e:c1:f8:10:e5:5a:84:10:c6:68:9b:
                    fd:29:4c:4c:f3:22:90:74:4c:a8:16:0f:39:a1:76:
                    8c:c9:b5:08:0e:6c:93:7e:01:46:84:51:f9:61:0c:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5F:04:77:5D:55:66:4D:74:43:22:7D:74:B8:AC:BB:5E:DC:89:17
            X509v3 Authority Key Identifier:
                keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:67:04:85:85:35:37:da:b9:d0:5b:57:67:f5:a1:57:f0:60:
         0e:ad:ac:9f:53:82:eb:63:84:f0:e3:4b:0e:2b:92:01:f4:a5:
         38:40:9a:cb:44:6b:8d:28:74:fe:34:e4:44:e2:7d:cc:eb:fd:
         12:37:fb:8b:6d:9b:02:e1:26:09:2a:61:40:7a:91:ad:1d:d4:
         95:b6:6e:38:f4:47:3b:aa:93:57:ec:80:66:6e:2c:c1:34:99:
         18:c8:70:01:21:42:ff:04:34:ae:ac:67:68:b7:5a:0c:19:d9:
         ff:66:b9:a2:03:1d:a7:3e:c6:02:85:54:64:d0:76:f9:60:b1:
         be:fb:9d:9c:e9:a7:ef:6d:1c:2d:39:01:05:8d:a7:91:89:94:
         4a:9b:31:54:9f:72:25:44:2b:37:b8:04:31:b0:e9:ca:ce:5f:
         8d:78:f8:07:df:52:93:23:a3:59:66:99:d2:68:3d:8c:0b:19:
         84:46:5d:d7:52:05:ae:f4:ff:4c:cc:b1:5d:d0:bf:ae:cd:e8:
         f1:94:c4:01:2b:b8:3a:be:ce:df:1d:31:9a:ea:0e:f3:42:e8:
         3d:12:cb:92:ac:9e:d6:53:df:b1:12:f4:38:cf:c5:00:92:d1:
         68:75:9b:28:d3:fd:3f:09:c5:8b:78:74:68:93:4d:1f:32:19:
         71:7d:33:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----