Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File:                     O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier:          SD7zlCI76Pye2Z7v3fZlC1BZFlJNPIPZzpRBPSk766c=
Subject key identifier:   2B:78:67:10:92:A6:31:2E:70:E3:DE:A2:77:45:C1:D1:D1:11:C7:F7
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer:       /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial:       01962E2B1FFCEF1FE1F281AF8E0ECFBC0F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number:          027B
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
                          2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: zgn+Z+SVpHgAaIvUDbo/fnOTVNhYM57YbHYr7YAFsSY=)
                          3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
                          4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1f:fc:ef:1f:e1:f2:81:af:8e:0e:cf:bc:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=2b78671092a6312e70e3dea27745c1d1d111c7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:1b:d5:57:67:79:bd:8d:4d:8d:11:a9:87:
                    c6:f8:e8:c3:2f:99:9f:74:1a:d9:61:b6:95:b8:95:
                    fd:6c:07:07:6d:ea:b3:72:0c:7c:ee:0b:f8:28:4b:
                    76:a9:ec:8f:2d:63:ec:25:83:f0:34:0c:f6:24:4e:
                    89:8b:68:ad:0a:53:ba:86:b2:37:cb:06:e6:a0:c4:
                    42:cf:db:39:3e:a5:0e:34:52:3a:3c:14:e8:03:28:
                    f9:b4:89:f0:73:ec:1b:e5:fe:3b:b5:5c:5d:a6:59:
                    79:bd:a0:7e:9a:54:bd:b9:f1:0b:23:21:d6:1e:8c:
                    6e:2a:f9:c3:70:47:f8:cd:f7:f9:b1:74:94:c6:b8:
                    37:35:51:3b:71:8d:46:6d:f9:38:cd:f3:db:ee:61:
                    68:ef:d5:b0:00:cc:a1:9d:68:f7:45:9e:28:d8:68:
                    96:d2:c5:05:ca:2e:ca:94:61:41:78:c2:0b:40:13:
                    f3:bd:74:fc:53:45:65:b5:bc:18:a9:60:b4:58:5c:
                    f3:83:8e:0c:9d:b8:d0:ad:4a:86:87:2a:04:46:2f:
                    99:21:29:2e:8c:75:41:2d:3f:bd:7e:51:b0:a9:19:
                    9e:cc:2c:4c:97:c9:45:cf:6a:ce:7a:25:2b:49:4e:
                    18:78:07:76:2b:1c:f3:5e:5e:94:7c:3a:6c:f8:79:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:78:67:10:92:A6:31:2E:70:E3:DE:A2:77:45:C1:D1:D1:11:C7:F7
            X509v3 Authority Key Identifier:
                keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:70:ad:8c:af:05:9c:2c:62:9f:4c:e8:07:67:5d:b8:73:c7:
         d2:10:8b:22:d7:4e:76:be:ce:df:9e:7a:4f:44:e1:b0:db:59:
         80:b8:fa:fe:2c:43:ee:67:92:7e:73:25:6d:ba:2c:b7:64:21:
         24:0a:42:b3:df:88:b3:f4:8d:80:6d:e8:cc:34:f1:70:c4:4c:
         61:44:be:6e:eb:2b:41:bc:13:7a:fe:9f:f6:f2:98:65:a7:62:
         5a:bf:dc:02:43:67:80:a5:e5:76:b1:bc:ee:f5:71:e9:16:7d:
         c4:d2:2c:0b:22:fe:5d:29:a5:41:f4:1c:f9:33:bd:af:8e:09:
         15:08:a1:d9:92:6f:38:94:e6:e7:21:a5:6e:7d:2d:1f:87:85:
         89:e7:3b:8a:0d:93:db:e9:50:b8:02:05:40:ad:25:32:fe:28:
         cb:68:a0:64:1e:99:37:72:9b:50:6e:da:a3:45:41:5e:fc:20:
         b5:d8:86:af:84:47:78:eb:60:49:ba:da:55:8b:19:76:4b:f3:
         51:27:3e:38:1b:c1:a5:92:90:e7:b7:ea:74:e7:47:4a:ea:29:
         5b:5c:d1:02:70:dc:58:df:0e:2e:c4:3d:d3:ad:ac:3c:1d:a6:
         4f:60:6c:94:00:83:53:eb:1c:b5:14:0a:ab:84:fb:ce:fd:b4:
         14:ef:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----