Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File:                     oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier:          WMrOpG4vH4Y50QNmd6YhcbeWt2SqNwxtpgI63W35w3g=
Subject key identifier:   0F:C7:2C:64:D7:40:F9:FB:22:09:4E:3F:72:A5:B9:5C:79:F1:34:76
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer:       /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial:       01962ECF77C491DCF6988957D3BFFEB5240D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: XdvLjOMIxq79zNksX3Rg69+OHgAYUIddBOuVdWkn5OE=)
                          2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:77:c4:91:dc:f6:98:89:57:d3:bf:fe:b5:24:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=0fc72c64d740f9fb22094e3f72a5b95c79f13476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:e9:fc:98:ba:11:88:7a:ad:fd:b3:02:a4:
                    7f:2a:fd:54:15:f0:b9:92:dd:ca:56:59:3d:be:c4:
                    b9:9c:b3:a1:1a:d9:d9:6c:23:67:93:29:33:10:86:
                    25:38:b3:0e:f6:2c:a4:dc:e4:82:38:cb:91:a9:bd:
                    3d:18:52:de:94:1e:8a:0a:e9:69:82:22:9a:b0:9e:
                    28:34:8b:77:78:cd:1e:42:61:3f:52:99:16:bd:d6:
                    c4:87:68:53:9f:e7:7e:49:59:af:c6:70:82:dc:f4:
                    cd:89:30:0c:78:02:8b:99:1a:9d:7e:fe:94:60:9b:
                    c2:c1:2f:cf:b5:5f:d0:f7:44:6e:10:20:e6:bb:85:
                    19:ca:6d:d7:60:2d:a8:48:0b:6b:7d:c1:29:ab:c6:
                    82:70:d0:76:b5:2c:87:3b:13:00:46:48:1e:44:0b:
                    72:0b:7f:3f:bb:00:5d:4a:fb:2c:26:60:5f:72:99:
                    1e:97:82:81:03:09:b4:4a:0c:26:c2:dc:9c:67:26:
                    2b:af:60:cd:3d:42:3c:b9:b9:00:f1:46:eb:02:7c:
                    38:de:c4:be:12:c8:52:47:d7:29:17:2c:cf:86:b5:
                    63:17:c4:4a:cb:22:88:59:1e:19:e2:7a:17:2f:e0:
                    12:f0:b8:26:d1:1b:37:33:2f:1f:8c:1f:f7:7d:33:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C7:2C:64:D7:40:F9:FB:22:09:4E:3F:72:A5:B9:5C:79:F1:34:76
            X509v3 Authority Key Identifier:
                keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8f:66:7f:af:ce:94:c2:dd:f9:04:95:48:14:c4:13:ab:2e:
         59:02:33:2d:6c:73:ea:8c:f4:21:22:91:66:3d:10:f3:7e:f3:
         4b:06:56:e3:49:a2:c9:21:c7:d3:42:74:76:2c:0d:b3:ac:f8:
         1e:04:63:69:be:04:c7:6d:9e:f2:67:c2:f7:db:1f:c4:6a:82:
         06:29:63:28:c0:71:71:6a:4a:74:b6:e4:4e:61:37:f3:2a:8b:
         25:be:73:6d:a7:86:a2:38:17:e3:96:59:cd:c8:1f:19:73:db:
         37:7c:7c:e3:20:67:48:6e:bc:17:f6:0c:4b:16:82:5a:5f:3f:
         fe:55:f4:1a:09:2c:f2:d0:61:a7:44:68:45:5e:2f:94:50:2e:
         06:0d:fd:71:46:5c:bc:a6:07:f0:fa:43:9a:cb:f2:1a:1c:cc:
         4d:c5:ae:57:4f:51:80:c4:d6:1b:b3:de:6c:36:36:07:4b:e5:
         dc:e9:f7:39:07:f9:9e:79:c1:24:df:72:0c:b7:0d:c7:6a:0b:
         d4:fd:de:1b:d9:99:e0:70:50:f0:23:28:e5:85:6f:97:4d:4d:
         d4:8c:0a:3a:5c:67:d8:e3:6c:9e:75:8c:cd:ea:63:01:99:f9:
         47:48:4e:01:94:1d:7f:ed:37:01:18:74:fa:50:01:6a:7a:3d:
         2a:fd:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----