Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
File:                     OUjkpbK65iNUmZE9y-wE38pTHpA.mft (raw, json)
Hash identifier:          NciEp4tzse5v8f4Pmu26ABDTS8O6mH6htlbbPRYGCGY=
Subject key identifier:   4C:53:0D:61:2D:53:DE:F5:59:DD:1F:4C:8D:B8:07:4A:E6:C4:13:0C
Authority key identifier: 39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
Certificate issuer:       /CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Certificate serial:       01962F3DD5372EA6AE911FA9A838289FF02E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
Manifest number:          13BC
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: OUjkpbK65iNUmZE9y-wE38pTHpA.crl (hash: bXbeCt28LSPimDeUlTBl0GgmZaA1sDBujPLmj5XrSVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d5:37:2e:a6:ae:91:1f:a9:a8:38:28:9f:f0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3948e4a5b2bae6235499913dcbec04dfca531e90
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=4c530d612d53def559dd1f4c8db8074ae6c4130c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d9:88:df:60:26:b4:56:7a:e3:a1:36:2c:b8:
                    2b:9d:a9:7a:d0:d7:b2:d9:d1:84:fc:7d:5d:e5:a3:
                    67:f2:52:c4:49:37:14:a1:58:da:7b:e1:13:67:bd:
                    eb:21:91:70:1e:f0:01:40:a0:71:b6:85:67:89:67:
                    ac:3b:3f:5f:11:24:64:b5:fc:9c:d4:e1:f7:91:60:
                    a1:0c:f0:06:da:17:f0:a9:8b:81:56:4e:90:2e:a7:
                    d5:3c:44:a2:64:1f:f2:cd:31:98:df:57:d9:fe:97:
                    88:7c:cf:38:31:75:29:4a:b1:db:35:9e:a0:ef:ec:
                    be:13:49:69:13:9d:a2:eb:77:c6:5d:df:d3:54:51:
                    77:cd:1d:0a:ff:9d:65:fa:5b:a3:7d:1a:dc:08:76:
                    f8:a6:f5:e5:58:1a:79:01:b9:71:2b:e3:d9:2c:95:
                    dc:1a:12:1c:cb:22:8d:75:b8:3e:10:90:9c:83:e0:
                    c8:52:69:d8:f2:3e:6a:d4:bf:0b:e5:f4:6b:95:83:
                    2e:7f:db:d4:c4:56:29:5d:09:b0:82:9f:e3:07:c2:
                    fb:81:bc:22:37:9e:e7:ce:65:50:3b:8e:48:f5:cc:
                    cb:4d:36:0b:10:2c:e1:6b:9c:7b:06:93:9c:a0:6d:
                    a9:b2:64:8c:77:1a:0f:35:c8:09:dc:47:73:f5:a8:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:53:0D:61:2D:53:DE:F5:59:DD:1F:4C:8D:B8:07:4A:E6:C4:13:0C
            X509v3 Authority Key Identifier:
                keyid:39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:14:7f:42:57:b3:41:f5:4f:cb:68:a9:9b:a3:c9:a4:43:
         6b:d6:00:d7:66:bf:d1:15:f6:d4:d1:5b:ef:82:7e:5b:e5:96:
         5a:fb:ef:0f:0d:20:1f:d0:b5:a8:0f:b0:0c:2c:93:98:74:51:
         66:91:b6:d8:8c:1b:08:be:77:92:f7:da:9f:6c:2e:20:32:ef:
         a9:3d:ad:ac:d8:91:6d:0c:5d:af:32:43:1b:8a:c3:5e:03:5d:
         d7:77:de:79:a5:c7:de:9f:62:d7:ca:9f:ec:06:65:ef:ab:81:
         3e:e7:9f:b0:03:f8:77:9f:2e:15:dd:45:27:8a:b2:1c:47:0b:
         d1:d3:09:a3:86:b1:cd:d7:6d:5f:7a:d1:47:06:a3:38:63:26:
         45:13:ad:c6:2b:73:93:7b:0f:9b:cb:fa:3d:4d:d9:f7:06:65:
         97:0a:c9:16:89:65:e9:f8:9f:d5:c2:07:ea:ea:2c:3d:fb:2d:
         62:87:bc:6d:ec:4f:d2:8c:80:33:6c:d7:a6:47:ed:8c:53:b3:
         dd:c5:5d:ba:ca:11:a4:80:0b:b4:f1:86:75:b8:cf:1e:8f:07:
         4e:16:ea:2a:c7:19:ef:3a:9e:7d:30:d1:8d:55:32:7d:d8:fe:
         b5:b2:4e:e3:a3:c8:e3:7c:2d:af:cc:1d:66:fb:d4:18:6d:5b:
         6a:d3:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----