Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File:                     OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier:          08y5b+wYXXd9j5HWYN+6XJxuYQ6e74D/5ouOGoN0zOQ=
Subject key identifier:   81:04:8F:3F:30:12:BA:B0:ED:A9:54:01:80:0B:8C:A4:FF:13:BA:D9
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer:       /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial:       01962DF435EFAD69B2C9C7F4A6CAB98BB6B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number:          0E4F
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: 4ES8NA/+J1yDh7gjG4GGjYOJh+3LJrEeD4hVtVJgl3w=)
                          2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:35:ef:ad:69:b2:c9:c7:f4:a6:ca:b9:8b:b6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=81048f3f3012bab0eda95401800b8ca4ff13bad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:d4:46:8e:76:de:f9:4b:2b:11:00:02:cf:
                    9c:58:58:7d:62:aa:73:71:f8:42:4c:6f:09:58:83:
                    80:9f:1a:9b:4f:21:ab:ee:f3:33:be:0d:40:3c:38:
                    02:7b:2a:b1:16:36:57:ef:40:5f:4e:33:f0:d0:25:
                    34:03:7f:bf:a3:15:df:bf:15:a8:8f:2c:57:07:0f:
                    8d:a3:fc:75:74:d3:7a:10:8e:41:66:34:e1:c7:4a:
                    64:cc:cb:69:92:7b:52:18:76:21:a9:5e:2a:69:d2:
                    49:63:8a:bf:db:67:30:79:9a:87:a9:5e:f4:56:37:
                    42:b5:d0:8d:13:8d:36:f7:63:d5:49:73:e5:59:01:
                    8d:15:15:e6:a6:96:fd:94:6f:89:77:27:64:2f:ac:
                    87:25:9f:87:8d:48:f5:f0:78:3b:75:8a:96:5e:6f:
                    98:dd:1d:23:06:54:82:3f:d9:c4:40:7a:c7:88:9f:
                    f3:a6:8e:5d:17:09:38:a4:d4:83:28:5c:41:d7:51:
                    f0:95:06:fc:3c:6f:96:ce:22:a6:06:d3:eb:e9:3f:
                    be:4d:df:6a:ce:68:bd:85:de:96:fc:c7:c3:59:c8:
                    9e:f4:2c:9d:06:71:d0:9c:b6:28:44:69:0a:f2:8f:
                    b1:b9:5f:e8:48:e8:9e:0d:f1:67:fa:73:5f:1b:ca:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:04:8F:3F:30:12:BA:B0:ED:A9:54:01:80:0B:8C:A4:FF:13:BA:D9
            X509v3 Authority Key Identifier:
                keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:c1:10:8a:c8:4d:ba:8a:dc:33:b0:b4:47:70:bc:8f:00:
         f0:24:04:4f:91:75:44:04:93:70:91:1e:93:36:e4:7a:eb:f3:
         1a:93:31:00:4f:87:58:3d:7e:c2:ed:c8:51:d7:8e:27:6e:e5:
         8f:cb:9e:a0:49:d5:ae:18:51:d1:c3:5a:bb:14:09:2c:17:b3:
         7f:37:65:46:08:8f:4d:78:57:0e:94:3d:1b:f2:f1:ff:29:c1:
         61:9d:1c:1e:52:08:a0:7e:96:36:fe:d7:66:d6:a2:c6:c9:33:
         69:ce:1b:a6:5b:44:0f:7d:cc:5e:ec:74:00:07:66:e7:f1:c0:
         f4:89:25:fd:49:ad:c5:91:bc:8b:59:c7:eb:1f:3f:3c:f7:14:
         38:55:88:0f:5f:ae:14:42:12:c6:e2:cc:46:42:58:b2:29:a2:
         bb:86:a2:f9:e5:2e:d9:64:69:89:b7:af:1f:49:6b:33:10:e9:
         43:5c:f0:2a:d0:76:f0:39:58:1c:8d:d2:5f:fb:de:96:93:bb:
         15:94:b8:bd:41:63:3c:a5:fb:5b:0b:f5:01:26:72:1a:07:8a:
         c3:90:6e:71:27:46:a7:45:b4:7f:7d:df:66:b1:a5:4e:d5:25:
         16:87:f5:b3:ba:d0:89:6f:95:20:01:da:6b:26:08:45:3e:32:
         a5:cf:84:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----