Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File:                     oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier:          N1a8tLPg6HH6YfYQP5Xu2Gko7qrPJTJJ7LjuvuFUriE=
Subject key identifier:   0D:1E:69:35:16:25:1B:4F:5D:C9:D2:A0:85:36:F9:2C:BB:F3:79:F6
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer:       /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial:       01962E98978E39C2530B8E792C9FA3175709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
                          2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: W8bVD8xXw82xTE7eFwjSlrYKgHl/PUhQ+DMyyyRuEEs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:97:8e:39:c2:53:0b:8e:79:2c:9f:a3:17:57:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=0d1e693516251b4f5dc9d2a08536f92cbbf379f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:25:bf:30:e4:35:5d:29:40:46:1b:64:27:
                    cc:c0:89:d7:a9:d5:8e:d8:99:60:13:df:d7:fd:56:
                    f7:0e:ae:04:35:1a:dd:9b:9c:d8:22:9f:81:75:7a:
                    4d:8c:85:0e:ee:79:50:d0:01:d2:a6:ae:eb:28:0e:
                    a8:21:fd:04:10:4e:db:e4:44:95:3a:77:6a:09:1f:
                    2b:05:82:79:46:f0:d6:7a:e3:11:8f:14:53:74:eb:
                    cc:de:eb:e7:15:dd:d0:5f:73:e5:ff:6e:5c:5e:ba:
                    be:3e:75:3a:cf:c7:f6:2a:cf:0e:09:9e:a1:97:04:
                    f1:1f:d4:59:1b:18:7b:b0:6d:41:d2:b4:40:67:90:
                    93:02:61:f4:37:9e:19:2a:30:13:17:91:97:88:d2:
                    46:a3:ca:0b:33:68:6b:0d:4e:1a:06:15:06:7c:cb:
                    dc:3f:b8:10:6e:cd:02:bf:ac:bf:c6:93:b6:98:8c:
                    fe:9c:16:49:02:6d:43:38:cc:34:a8:17:9f:60:17:
                    99:76:54:d8:32:37:96:a3:a2:64:57:46:4c:95:9f:
                    e7:b9:51:88:6e:b8:3d:a7:ff:c7:12:85:3b:7c:19:
                    c3:66:8c:94:71:5c:b6:72:28:01:c1:d0:9f:29:e0:
                    b9:ac:50:32:24:2d:aa:53:94:df:2a:c6:a1:5b:48:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1E:69:35:16:25:1B:4F:5D:C9:D2:A0:85:36:F9:2C:BB:F3:79:F6
            X509v3 Authority Key Identifier:
                keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d5:14:4b:68:1d:88:b1:4b:58:b0:86:ab:36:6e:ce:39:19:
         a3:33:91:74:a9:01:38:aa:fc:d1:9e:ab:18:10:b5:51:c5:f5:
         26:82:df:88:b0:36:cf:47:54:59:20:dd:94:24:6b:5e:6a:5a:
         de:a6:52:a1:f4:08:2d:9a:fc:f1:db:06:6d:bc:d5:5d:22:e0:
         2f:ab:69:94:59:71:9f:f1:4e:f4:d5:c4:6c:df:74:42:c3:2b:
         58:da:59:60:ef:92:c7:aa:76:26:76:cc:f8:b1:1d:e4:41:26:
         bb:1a:f5:8e:ca:03:72:5d:07:ba:99:fe:85:3c:35:f7:81:8e:
         48:92:b7:b1:25:53:f9:44:39:7d:39:45:a2:0c:47:43:31:f7:
         64:a1:cb:fe:62:78:ad:4c:21:93:a3:c7:82:e2:f1:9d:d2:01:
         27:84:01:49:30:96:8d:69:a2:69:36:db:79:5f:27:10:d4:7c:
         78:af:59:2f:34:64:16:ca:06:6b:22:fe:91:e7:ba:ee:95:21:
         92:53:ff:f8:8d:72:a3:33:34:4a:98:76:7b:b5:62:dd:d7:0f:
         ee:5b:5b:a4:e4:05:fc:72:ea:d0:04:26:88:dd:82:57:ea:5d:
         d2:af:ca:02:e9:e2:82:05:2e:14:5d:10:30:21:72:32:84:1c:
         36:39:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----