Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File:                     OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier:          TMRGCSBbWCSO6HaW1prCYSzDL80VKZ2o19nKnhLrS6Y=
Subject key identifier:   F0:F3:F0:CF:AB:31:89:78:1A:08:65:5F:3C:39:E7:82:27:81:5C:A1
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer:       /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial:       01962E99C313C6E07CEEC214B433904012AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
                          2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: 1Y86q2KoKKJBwBQMAJ0TJWHE74vI3xD2ogAV92/PhN8=)
                          3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c3:13:c6:e0:7c:ee:c2:14:b4:33:90:40:12:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=f0f3f0cfab3189781a08655f3c39e78227815ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:4d:f8:b4:6a:00:15:70:38:13:f1:b3:21:
                    72:3e:c7:ae:72:7d:7b:2f:0e:0d:34:f2:da:39:26:
                    9b:1f:52:2d:0a:23:9c:0d:66:83:47:96:79:dc:7a:
                    76:58:bb:d0:e3:21:ef:1b:e1:71:54:19:af:d0:73:
                    04:0a:16:de:49:83:77:a8:dd:a9:3f:d9:cc:90:ad:
                    24:61:9b:ad:3c:84:6e:82:af:73:a0:b5:ad:fe:5a:
                    ca:1d:44:0d:ac:be:d0:52:93:58:94:c4:58:64:83:
                    0e:71:c5:c7:dd:cd:47:58:e1:02:ac:ee:c7:5a:c5:
                    44:41:97:34:9d:29:ec:98:32:b9:63:e0:4b:92:cb:
                    ed:8f:1c:32:2c:33:d8:f7:f7:98:08:08:80:b7:96:
                    b4:29:bb:b8:f8:5e:8d:48:4b:8e:29:cc:2d:b5:c1:
                    7a:67:78:ed:46:f1:70:7e:b9:df:cc:ee:10:6c:e6:
                    ad:82:e8:35:44:9d:9c:51:ce:1c:3e:9b:cb:26:85:
                    63:1c:eb:b4:5d:23:d5:54:92:77:7d:43:16:d6:f3:
                    e4:ae:1b:ca:d5:7a:51:e8:c5:33:a5:5c:9c:b7:cd:
                    7c:74:91:ef:da:e1:0f:75:e2:1e:9f:e0:b3:4e:a7:
                    81:70:a1:ec:8d:28:91:71:cf:47:c6:0b:06:80:52:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:F0:CF:AB:31:89:78:1A:08:65:5F:3C:39:E7:82:27:81:5C:A1
            X509v3 Authority Key Identifier:
                keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:7c:66:df:e3:cd:86:26:0d:3d:16:5e:16:f1:19:20:0d:
         ae:4a:a3:bc:34:5c:af:cb:0d:aa:5e:78:ab:1b:a3:a8:bc:81:
         94:15:ef:59:89:96:90:3e:81:bc:f3:a4:43:b0:a1:2a:21:16:
         99:83:f8:a3:d2:b7:03:82:9e:e9:ae:fd:25:e6:3b:5e:3a:e1:
         3d:5d:9d:ec:1c:ff:b9:99:4d:34:d3:99:30:3e:94:ca:c6:9a:
         0a:35:b3:e2:b3:58:db:c8:b9:90:42:54:4e:21:b1:06:70:b3:
         a6:fa:4d:df:08:2d:1f:8b:b1:65:6d:70:d9:2c:26:03:63:06:
         6f:eb:22:ad:6a:70:d0:b4:48:1b:b7:58:ce:99:7e:1f:02:13:
         3b:d7:cf:42:d0:f1:f8:b8:58:c2:09:0e:a7:63:61:35:19:5b:
         b4:99:2e:b0:b1:38:3a:d3:44:21:7c:a0:5b:12:5e:ff:ab:d1:
         9c:c0:fa:bb:1d:57:ee:b0:70:ef:a6:88:d6:b9:d2:09:d4:1d:
         d9:31:1d:1c:ab:06:4a:f8:4d:ac:9a:a8:a8:d2:99:2d:02:74:
         c3:cb:56:c7:53:64:76:f4:6d:2a:19:60:2b:e1:03:86:5a:20:
         ad:6d:80:fc:4c:7d:bf:2a:2d:91:dc:a4:85:b6:55:13:e3:64:
         ed:2f:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----