Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File:                     o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier:          1GEHRLCoBh94HfHEShMi/NrbpFTOSVbM70g/5psuIiY=
Subject key identifier:   6B:BF:79:B3:00:82:55:CE:AA:C5:EF:69:C3:F0:97:44:9F:1F:5E:BE
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer:       /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial:       01962ECFB1BFAF2D7904CE32988B071CAA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number:          0A17
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: 407bkeNwwwACH0Nz6QA5nS7zYV86f6B2U7FrD052L5M=)
                          2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b1:bf:af:2d:79:04:ce:32:98:8b:07:1c:aa:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=6bbf79b3008255ceaac5ef69c3f097449f1f5ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:6c:af:4c:5b:49:7d:e9:6d:70:29:89:f0:
                    96:ad:26:47:db:5e:ac:18:50:f2:b6:d7:99:e1:99:
                    3a:cf:a3:03:b5:99:ed:5c:be:28:81:43:a7:62:61:
                    66:95:64:20:92:cd:39:ca:24:57:52:78:eb:ac:ac:
                    7d:11:77:2f:09:6a:b7:9a:14:d4:17:2d:e3:2c:bc:
                    ca:b1:7b:b9:37:62:63:c5:cb:06:e4:27:cd:40:07:
                    3d:c8:19:57:12:de:08:12:a3:e0:38:a1:04:3b:d7:
                    65:bf:82:63:4f:f7:93:c9:51:0f:a8:d5:1d:4a:e9:
                    6c:00:82:21:74:18:b9:1a:16:9e:3a:e1:17:2b:ac:
                    c8:b8:87:be:9c:32:8c:71:87:1b:db:a3:51:ab:be:
                    66:e7:a9:b7:31:65:35:9e:99:c5:8f:33:57:50:86:
                    54:a7:f2:f7:86:74:e0:16:d4:6f:a5:61:d5:67:87:
                    d5:fc:8a:28:f7:06:6b:2e:19:00:2a:c1:ce:ea:9e:
                    04:e9:ef:45:2b:7d:17:e7:c8:b7:75:53:de:23:50:
                    b7:82:2c:70:36:ab:6f:b9:5d:77:50:81:c3:de:85:
                    23:9a:2d:94:fe:97:c6:98:22:00:03:e8:af:cb:07:
                    93:86:d7:02:1c:0e:b1:0c:e6:ee:0a:5d:90:6d:44:
                    fd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BF:79:B3:00:82:55:CE:AA:C5:EF:69:C3:F0:97:44:9F:1F:5E:BE
            X509v3 Authority Key Identifier:
                keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b9:bf:86:f3:32:b7:1a:8e:9a:56:3c:aa:a9:45:ad:5a:86:
         4a:ee:c2:3c:b1:5e:5c:c0:38:4e:21:a7:9b:27:51:a5:9d:59:
         12:0d:24:6b:1a:af:c8:d5:04:a1:94:9c:e0:92:ce:23:1a:a5:
         a7:f2:5c:76:9f:a4:f2:e4:08:f5:ab:69:c0:b4:11:3d:42:8d:
         7b:66:0f:b9:5b:7a:e0:0c:e4:67:1e:d0:a1:6d:61:75:42:8b:
         4a:08:0f:e0:9d:ca:1b:76:e8:71:68:78:e8:bc:28:37:37:67:
         c7:b7:ed:e8:93:a8:9d:8b:c8:86:a8:ac:16:6b:08:59:94:f4:
         fc:e2:a2:a1:95:a5:fa:7a:d7:cc:e2:d9:d9:07:de:95:b3:6c:
         df:de:5a:48:97:c1:5d:d8:b1:db:45:6c:85:ce:18:96:17:0b:
         81:92:c1:cb:42:ec:f4:e6:5f:9a:a6:ef:e6:66:bb:c6:f2:73:
         37:a6:5b:d0:7e:fb:c9:67:a0:2c:a5:b8:2e:d4:99:8e:48:52:
         7f:83:e6:4f:9d:2f:fa:cd:0f:3d:35:f4:0c:4d:ba:89:86:23:
         de:c6:4f:2f:83:24:90:ba:3d:f4:cf:fd:3b:70:99:96:c6:ea:
         43:80:da:34:3a:5b:92:ed:e5:99:07:4a:05:94:57:89:9f:7e:
         84:b3:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----