Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File:                     oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier:          W9t30KiGFJ1THAnhfv8qz5c6eQ95lKbi+HhEMtp/4J0=
Subject key identifier:   F0:A1:ED:71:D5:E1:EE:19:74:99:9A:B0:C2:2A:FC:E0:01:05:49:E8
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer:       /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial:       01962E618E1411E03497322C7E5DBD7722CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number:          0F3B
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: Bo1myrpN4GYHDeA8eZrww4v2MYk.roa (hash: iX1wfmXvs8NDvW8ILAABxp5yjw4VCOGlhTOgUXPFMOo=)
                          2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: YMtR9ETww0WiBBKqfh8wqxpgogSeb7yb1TFNyaO05Ag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8e:14:11:e0:34:97:32:2c:7e:5d:bd:77:22:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=f0a1ed71d5e1ee1974999ab0c22afce0010549e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:e6:1c:64:8f:66:3e:8a:82:a4:79:68:88:
                    fd:95:71:75:93:94:1f:01:f0:3e:57:fe:5f:c6:9f:
                    99:3a:1f:b3:e0:0b:1c:40:35:1f:f1:0c:70:e7:dd:
                    87:0d:68:20:52:9e:40:7c:1e:65:d8:bd:17:20:72:
                    2e:90:03:48:fe:b4:94:f5:30:60:3d:87:95:33:dc:
                    6d:1d:53:5a:80:6d:30:f7:a2:94:86:1a:43:84:3d:
                    2d:6c:1b:1f:57:84:96:3a:52:4e:e8:26:dc:8e:d5:
                    07:bb:ff:bb:c1:34:62:61:e2:a8:64:da:03:ca:78:
                    81:dc:a7:60:08:95:66:e9:b5:40:1e:9f:0f:95:ef:
                    c1:40:60:c9:36:e0:f2:53:fb:93:8f:51:f0:07:3c:
                    f4:d8:00:fb:e0:ce:17:03:d7:b4:7d:e5:9d:dd:58:
                    d1:2e:a9:f7:d5:b1:4e:de:b3:28:3a:28:32:cd:24:
                    68:f6:43:86:c3:30:e0:f5:ea:06:bc:23:4a:7d:4d:
                    32:a5:6b:dc:81:b8:d7:7d:12:f2:44:ba:7e:c7:ba:
                    47:73:2d:1a:5f:a8:c8:a3:cc:ec:6e:ca:be:98:99:
                    89:c9:0c:44:1e:0d:c2:43:1c:4a:ec:a2:3c:43:37:
                    dd:f0:8c:d1:c0:4a:b8:18:36:2d:11:dd:77:e9:23:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A1:ED:71:D5:E1:EE:19:74:99:9A:B0:C2:2A:FC:E0:01:05:49:E8
            X509v3 Authority Key Identifier:
                keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:1d:88:42:63:6b:c3:7b:c4:30:04:51:1d:d3:c3:fe:b7:
         cc:14:e8:23:7e:d6:5f:61:24:85:b8:8b:02:cf:30:64:5d:0c:
         0f:51:51:10:21:6e:fa:da:c7:f7:ea:14:86:ae:f4:2d:7d:a7:
         d7:3a:4b:28:2b:30:f3:99:fd:7e:c3:0b:22:38:53:9f:d7:02:
         7f:ad:a1:62:f2:dd:9f:b3:8e:5b:ce:06:52:b0:a5:24:8c:f6:
         d2:fa:4b:56:af:c7:c3:7e:89:31:70:e1:a3:fd:24:aa:86:cf:
         bf:49:12:88:bb:5c:17:e9:6c:3e:d5:b6:5d:a2:3f:06:b1:e9:
         ae:9b:95:50:ac:8d:6f:24:e6:27:ac:af:ea:50:9d:2d:61:11:
         6f:ac:14:ee:73:78:1b:ea:28:8f:bd:0d:c9:6e:9d:b8:b4:12:
         a3:54:1b:ef:8a:4f:62:3f:d2:05:06:5d:ab:b7:f8:9a:ca:82:
         43:85:01:8b:a5:7c:6b:48:68:38:32:8a:94:92:60:21:a5:34:
         f8:5b:e4:00:de:54:ff:bd:42:1c:88:6e:18:5b:8a:ea:2e:a3:
         76:66:a8:ed:d7:6e:a1:83:41:64:12:e1:32:79:ad:19:d3:b0:
         ea:c4:b0:4c:e4:59:16:9e:33:07:73:bd:9a:08:56:f7:8f:6e:
         f5:e5:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----