Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
File:                     o2CNaw6ApkMPtq9D-uFooOgBH-4.mft (raw, json)
Hash identifier:          VOBALzXB0s1v/FkKAAw1jeyuFFhtc2LmgOJ3INCfpJU=
Subject key identifier:   2C:3F:87:76:37:40:E3:1A:8F:5D:4E:8F:D8:58:08:58:B7:67:F1:44
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Certificate issuer:       /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial:       01979B9684618CE57194AE5381BAC6987147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
Manifest number:          0B4A
Signing time:             Mon 23 Jun 2025 07:00:22 +0000
Manifest this update:     Mon 23 Jun 2025 07:00:22 +0000
Manifest next update:     Tue 24 Jun 2025 07:00:22 +0000
Files and hashes:         1: 1-zT9mAEBlOTW17BpRdhhq5CBopo.roa (hash: fOlZL/jmt7x24Mq2vq6+5+VHvePQon8h2vdvdk/CniI=)
                          2: 2jdvbPuVX3DvnSLzJ7PbPhY084M.roa (hash: TmyuM6Y9MB09UaiU4ubKUXZL1rxE4bCb1tGRI62YtN0=)
                          3: BjXm0XT4BTtEmIMPFFa63S__K7c.roa (hash: ETSjvpbNZrkoFW+0i09JYHs/YF4PfB7NXGdhRYyZxZs=)
                          4: Y8I7Cdrc3qJFqRL0cpCQD0-SJXM.roa (hash: kJVt9rCeoDhUmKwMAQa4mtxvjszoPS2OFInBbvhBp0I=)
                          5: o2CNaw6ApkMPtq9D-uFooOgBH-4.crl (hash: YMbHhbPFCc3ZUG299LjA8Pp44o47UMjm4TDvlMcPXG4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9b:96:84:61:8c:e5:71:94:ae:53:81:ba:c6:98:71:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
        Validity
            Not Before: Jun 23 07:00:22 2025 GMT
            Not After : Jun 24 07:00:22 2025 GMT
        Subject: CN=2c3f87763740e31a8f5d4e8fd8580858b767f144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:6a:51:90:df:ce:3f:22:4f:f1:39:c8:d3:
                    85:8d:f2:2e:fc:ca:47:d1:0d:5e:18:b8:23:28:93:
                    08:f1:db:55:b7:d7:61:2d:a6:09:3d:1e:ef:70:11:
                    95:7b:dd:42:7d:79:a4:d7:d7:31:52:61:5d:71:a5:
                    9d:91:ed:8f:28:97:93:1d:d8:7d:7f:5b:ed:70:59:
                    7a:b5:04:1d:9d:a2:f3:2c:cf:05:b4:1f:fd:9f:64:
                    38:5a:05:c0:eb:a5:c2:97:0e:84:70:29:43:7b:1e:
                    60:8a:81:ef:51:73:5d:32:f6:90:c8:e4:bf:9f:91:
                    0a:5d:f4:97:88:b8:bc:27:6f:e0:49:a4:25:73:90:
                    b5:d2:73:f7:b5:40:4a:45:db:34:29:3f:46:e6:4b:
                    2e:86:4f:43:d5:15:6c:bf:63:bf:e5:54:83:97:1a:
                    0c:7d:ca:78:26:26:ad:9b:d1:23:a5:07:a2:7e:2a:
                    6f:13:a1:ac:ee:e8:4a:cd:23:06:af:3a:46:10:a3:
                    23:dc:b0:54:bd:4a:24:b9:72:53:cd:44:cc:72:74:
                    5b:28:54:e9:02:3b:5c:59:01:18:bb:48:a9:30:5c:
                    66:f4:e9:1c:66:b9:6d:80:70:65:2b:f8:66:e8:4a:
                    29:d3:98:21:98:84:3e:42:b7:5c:97:f6:1b:ce:86:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3F:87:76:37:40:E3:1A:8F:5D:4E:8F:D8:58:08:58:B7:67:F1:44
            X509v3 Authority Key Identifier:
                keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fc:fc:07:4d:87:d4:81:2c:e8:21:02:ba:b9:61:c6:cb:14:
         99:76:d7:f3:26:33:2c:6d:86:bb:33:63:30:61:9b:ba:dd:af:
         1f:a9:aa:65:d4:50:cf:36:a9:e0:6f:79:5f:04:4d:7f:0d:e1:
         4b:b5:ef:ab:aa:4f:ea:2a:f9:bb:24:23:ee:60:55:e9:95:30:
         69:6c:f0:d7:c9:c4:e8:ab:95:b8:c6:b8:55:24:0c:8f:40:65:
         64:3b:ec:62:d9:b8:08:46:dc:f8:da:97:2b:a9:0e:84:31:28:
         44:a6:b1:67:e0:74:2f:ef:9a:cc:9f:11:a2:ac:c2:fe:fd:99:
         5b:8e:9f:40:e1:1e:8f:c0:49:1b:4e:df:76:4a:42:5d:ed:61:
         a5:bc:b6:2c:df:89:9e:1d:7f:a7:9b:79:1c:f1:8e:e4:40:1d:
         1d:bd:df:5b:00:12:df:8e:42:73:3d:6a:52:4f:48:08:67:1b:
         3f:25:f8:5e:e7:1e:cb:9c:b9:1b:74:cc:f3:0b:c7:1e:89:9c:
         9c:e2:b2:d4:5d:c7:7b:92:cf:4c:ba:a7:b6:a4:86:35:3f:9d:
         22:1b:e3:f0:9c:60:b5:62:3e:c6:cd:f1:a0:93:f3:fd:78:15:
         68:c7:1e:15:26:98:1b:d0:b5:c9:a2:03:18:4c:a6:cb:6b:aa:
         ab:02:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----