Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File:                     0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier:          HWIxruamHC4tgnH6PcnvxNA9u9PnWVWCSCugfQJjNH8=
Subject key identifier:   49:EF:97:9F:BA:B6:45:58:35:93:D0:2A:6D:38:90:F6:F0:99:82:E6
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer:       /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial:       01962F3DDEF694DCF8A1525F05781038187B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number:          016F
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: QFo92YxRwLw3/TdqWVN+L9ifC8ddYWRExlDFTk5b54o=)
                          2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:de:f6:94:dc:f8:a1:52:5f:05:78:10:38:18:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=49ef979fbab645583593d02a6d3890f6f09982e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:3a:6a:22:5e:76:93:e4:73:1d:35:26:1a:
                    e0:91:00:81:3f:98:4d:6a:25:84:d8:9e:88:0c:1d:
                    f8:09:af:ba:bb:4c:2d:d5:01:10:57:2c:b7:d7:be:
                    07:93:7d:2a:31:40:e0:1c:02:8f:2c:52:47:ae:61:
                    43:b7:a3:77:46:19:6b:21:3b:19:f0:b6:17:0c:5e:
                    7b:ce:19:06:3c:60:b7:e3:74:5e:d3:4a:41:16:67:
                    27:ab:c1:c8:a2:0f:9b:e1:52:eb:01:2e:14:cc:96:
                    27:cd:0c:0b:ff:b9:e4:3f:eb:5c:5b:6b:7a:69:fc:
                    4e:c0:19:e9:05:c4:1e:9a:4a:a9:df:48:84:10:55:
                    81:2e:c8:0b:1e:03:83:7b:9a:3f:ba:d5:bb:81:d0:
                    40:45:9a:8e:4d:a9:8e:18:bb:0d:46:18:1f:e0:21:
                    72:29:1d:e3:5d:81:4b:35:cd:0d:96:f8:a4:d2:9a:
                    de:f7:bb:fb:1d:d7:0b:4d:10:cc:36:dd:5a:fe:11:
                    7e:9e:13:ba:94:7c:3e:48:e9:20:a9:a9:bd:4b:7f:
                    2d:44:f3:46:b0:99:e9:df:c9:68:29:01:25:36:aa:
                    d0:4e:9c:4f:fc:d0:ae:ee:3d:fa:80:d4:9a:d3:25:
                    1f:f8:44:d2:eb:99:e4:08:ca:8d:0b:54:95:ff:2b:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:97:9F:BA:B6:45:58:35:93:D0:2A:6D:38:90:F6:F0:99:82:E6
            X509v3 Authority Key Identifier:
                keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:52:59:92:df:bb:04:6c:09:53:75:89:a6:a3:eb:13:60:
         5d:6e:5e:56:35:1e:ff:84:14:44:85:42:97:f5:30:8b:da:d8:
         63:ea:69:89:7d:12:55:78:c7:08:cb:36:4b:07:94:57:56:75:
         e8:d5:12:65:8b:64:a7:7c:cf:8b:2c:33:c2:85:40:40:5e:e2:
         1a:ad:33:27:43:24:8a:dd:56:9b:be:ff:fc:33:eb:0f:4a:64:
         3d:91:e0:ec:3d:27:a6:56:f6:94:1d:d6:b3:10:33:12:3f:c6:
         79:69:1d:4a:68:dd:2c:f6:b5:70:a0:42:f1:54:85:f7:d9:66:
         83:53:41:c4:19:af:52:0a:6e:ee:70:07:ec:18:27:5e:b6:d1:
         f5:a8:0e:23:75:23:af:87:19:1a:24:1f:41:e0:e6:97:3d:38:
         4a:30:86:b7:4f:1c:2d:01:cf:1f:11:89:35:ac:c0:4a:e2:07:
         bb:09:05:10:48:16:a6:f4:bc:54:9c:1c:fb:49:1c:83:34:91:
         55:1c:25:e3:85:2f:72:7d:8c:f3:96:4e:00:e8:c0:06:d5:14:
         c4:bd:4b:29:46:0d:78:a8:bc:f1:94:9d:ee:2e:08:a1:28:5f:
         9a:8d:76:c9:25:6d:91:00:79:3b:b2:8b:98:b8:b6:5e:e6:3c:
         c7:8f:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----