Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
File:                     Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft (raw, json)
Hash identifier:          FYjIWzrxjHTKI/pK5Pr41yfato3QbUDAjR6ZjEtIvZk=
Subject key identifier:   AF:43:97:A9:B4:1C:6B:9C:25:85:BC:6E:AF:20:A9:FD:E1:01:FF:D2
Authority key identifier: 3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
Certificate issuer:       /CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Certificate serial:       01962E2AC79C4BF0A529CCBFA72E10C8DF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
Manifest number:          0630
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: M82sfYNUsyqK13nZZfstvwDd7Fs.roa (hash: Pwd9phO+f2VaYBcGPbgT8icjGcqdGdD4Q6fe+fixav0=)
                          2: Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl (hash: YdBEzn5S4IbeI2WI8p7C7ArXLUtrAHgCrZ3OpcJn77A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c7:9c:4b:f0:a5:29:cc:bf:a7:2e:10:c8:df:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=af4397a9b41c6b9c2585bc6eaf20a9fde101ffd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:f7:b1:5c:c0:a6:e1:a4:16:a0:a9:8b:72:
                    8d:bb:55:a4:e4:0f:e7:80:7b:95:38:2f:9e:41:78:
                    87:94:df:7f:95:35:1a:62:9e:d1:ac:5c:db:35:8a:
                    68:89:7e:93:c5:2c:96:cd:87:0b:e6:3e:8c:48:98:
                    89:87:5b:45:7c:81:7d:71:e9:20:a6:d7:a0:01:76:
                    e5:a5:13:94:78:33:ab:a9:13:33:e2:8c:61:e1:ef:
                    83:d3:9f:93:9c:7e:aa:8a:65:b9:7f:5d:99:fa:07:
                    36:60:4a:f1:2f:49:7b:1c:07:73:1f:f9:85:89:46:
                    3a:04:e9:f4:8d:b1:d8:bb:e5:06:5c:49:f3:41:bb:
                    5a:87:d7:1c:fb:16:30:42:0d:27:b4:ff:6f:a3:74:
                    c7:4a:4d:de:51:7e:b8:f9:89:da:ce:2d:f7:3b:37:
                    74:12:70:37:05:7a:d5:0a:49:50:a8:db:44:62:d3:
                    c4:98:83:d4:b4:31:7d:b4:f1:f9:78:9d:40:21:84:
                    f6:28:85:5e:50:57:c8:36:45:b8:34:80:7b:aa:bd:
                    16:bf:1c:fc:89:15:ce:37:6d:83:5c:b9:14:09:2c:
                    e6:19:a7:5b:a3:f5:47:84:6c:a2:bc:f1:7c:74:8f:
                    53:a8:3c:74:ac:46:d1:e9:dc:c1:66:71:33:96:d9:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:43:97:A9:B4:1C:6B:9C:25:85:BC:6E:AF:20:A9:FD:E1:01:FF:D2
            X509v3 Authority Key Identifier:
                keyid:3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:63:91:68:b9:3a:5c:ec:e4:f0:a2:d4:95:15:52:80:a2:72:
         23:62:4a:02:bf:c0:18:61:a7:5e:5c:d5:8c:00:98:43:9c:7a:
         1b:af:a5:ce:97:6c:ba:bd:4f:15:6b:c2:a3:5a:8f:21:31:02:
         fa:94:da:14:77:af:16:88:3a:7d:d7:0c:e7:f0:24:c0:2e:dc:
         d5:c5:9a:e1:3e:30:76:10:5f:1f:24:25:22:cb:8a:e3:89:62:
         bb:d5:b2:1c:07:7b:78:ac:52:ef:a9:78:85:2d:20:1a:64:42:
         8c:76:37:e7:9e:45:f9:49:81:10:e2:46:0f:9e:51:7b:3d:12:
         81:4c:59:59:1e:38:61:d2:ad:fa:db:14:ab:54:ee:f8:03:cd:
         0f:22:60:7f:ff:4c:37:65:d6:af:2a:83:cf:e2:e4:b7:66:c1:
         c6:2d:a0:b3:39:4b:27:76:fa:18:65:75:08:fc:dd:c1:a3:25:
         13:ed:6e:b2:9e:df:c0:6e:84:5a:1a:69:86:ae:98:93:95:d3:
         c2:64:10:9a:c6:b3:4d:c7:2e:47:e0:88:44:de:f0:b6:3b:6b:
         80:9f:4b:49:e0:7a:8b:53:bc:01:4f:ef:58:f9:22:18:65:6a:
         07:e8:6f:1d:c3:5a:f0:b8:b4:79:7a:5b:49:9f:fe:d1:01:32:
         9f:e0:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----