Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File:                     mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier:          FsU49F3Zxbw8Tyu/YAHJjBVqv1hsI7Cf+sm0MXsqFlw=
Subject key identifier:   90:1B:7D:56:05:D1:1E:5B:DC:8E:08:E3:7E:3A:16:FA:D0:01:7F:47
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer:       /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial:       01962E61BF4099AB183676ECB1A2D5FDD0C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number:          0AFD
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: 2SOKJdtN9bMMMVnN7XnVjTb3ui0.roa (hash: 72GA0BgMQTTnlKlYqdGi0oxjId4FdqmjlR9jbXjscag=)
                          2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: 3iNoeJ0KoUjECJ6CdJrOnsLKm4FAHoZgR9D+J/S+pvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bf:40:99:ab:18:36:76:ec:b1:a2:d5:fd:d0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=901b7d5605d11e5bdc8e08e37e3a16fad0017f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:4f:00:37:71:0f:cb:9e:77:dd:f9:2f:f8:
                    6d:56:dd:73:5d:6e:5e:74:3d:35:94:9d:e3:a5:e3:
                    fb:cf:06:2e:63:63:e5:c6:d6:58:37:d6:db:c2:45:
                    78:83:80:f0:f3:60:9c:b5:42:2b:77:23:6b:65:ad:
                    0b:df:ec:66:40:58:34:9a:ae:a1:3c:f3:d3:f1:1a:
                    62:07:e2:fd:3b:06:fe:6a:e8:dd:4c:48:79:7e:bf:
                    4b:81:ca:61:33:b2:a2:8e:f3:a5:4a:8e:b3:2f:86:
                    27:9a:4f:66:54:68:64:9a:6e:fb:c9:ff:56:52:6d:
                    b6:05:e0:eb:ba:5a:55:94:03:ad:ed:a8:22:ab:42:
                    48:aa:38:cd:8f:6f:96:05:a1:84:ed:7e:f2:25:f7:
                    2b:02:49:a8:3e:b2:b0:f3:94:07:f4:9d:66:11:47:
                    9d:73:29:da:57:25:70:48:fc:b5:55:ef:f8:b8:31:
                    72:55:69:63:a2:a4:5d:5c:89:b7:22:91:fd:2c:c0:
                    ef:04:01:1e:a8:1d:1b:fc:fe:27:0b:5e:f3:c4:ed:
                    15:01:fc:65:74:02:03:64:6f:1f:cf:58:da:13:2c:
                    0c:a4:fe:b6:91:b4:28:34:c2:05:13:1c:aa:a6:99:
                    c2:65:01:f6:5f:fb:53:d9:b9:18:f8:6c:20:7b:26:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1B:7D:56:05:D1:1E:5B:DC:8E:08:E3:7E:3A:16:FA:D0:01:7F:47
            X509v3 Authority Key Identifier:
                keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:65:17:63:b3:3a:75:68:83:c3:04:88:34:23:98:6e:9f:47:
         bc:f9:2b:9f:4d:44:86:f5:dc:6e:ca:6b:43:a1:7d:0a:bb:6b:
         5d:65:0f:d1:ed:71:6d:16:90:02:12:22:91:3f:90:2e:c6:c9:
         cf:5f:4a:13:c4:b1:1a:39:d7:23:52:e1:86:15:d1:30:a1:e6:
         f3:36:e4:a3:f3:0c:ea:a7:11:10:8d:f8:86:01:5e:e8:3a:95:
         13:5e:e6:60:f0:89:f7:ce:8f:10:be:82:a6:d8:d4:10:a2:e3:
         98:e4:82:22:79:8c:d4:97:9b:cc:f0:82:0d:a8:5a:c0:6f:ae:
         80:51:d3:f3:10:9f:8a:24:c0:0c:ac:52:bd:19:d6:d6:d3:80:
         28:ac:e1:2f:a3:98:dd:de:88:e9:32:45:e2:27:90:0a:03:6f:
         a8:e4:af:b0:ee:4f:bc:7e:2c:f8:64:14:25:12:ae:6b:af:f1:
         af:aa:42:78:d8:3f:ef:a4:8a:cf:e2:ce:cd:4b:db:aa:64:e7:
         39:4a:16:25:b3:b2:a7:4d:62:db:fb:aa:96:c4:e2:cc:05:2b:
         7b:a1:9f:d8:ee:ed:b0:40:54:05:86:6d:3f:62:bc:7e:36:3f:
         df:b2:fd:d2:78:d4:fc:a1:46:37:60:9b:16:a4:90:3e:92:3f:
         07:34:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----