Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File:                     OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier:          NL4UIXOMhJT4ux2KIL2cD5ESGVNRp3pe1ySvkezIbms=
Subject key identifier:   1A:5A:98:EF:03:E0:24:D9:1A:7D:5D:47:8F:90:97:39:41:2F:0C:AA
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer:       /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial:       01962DF3A8DB32951D77752E3F224FAE39EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number:          04A5
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: mUDKcOu4LD/HYdr62y0XiS7YehQvxAJ7deXZMVAWxbw=)
                          2: YKP2-mUbLqVt8YjjDalCzO3YP4U.roa (hash: Yz1Fy2JsuM7B/qCN027yJ5VSafRq6NaaRWcEtGjJrwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a8:db:32:95:1d:77:75:2e:3f:22:4f:ae:39:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=1a5a98ef03e024d91a7d5d478f909739412f0caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:07:5a:f7:84:6d:02:e7:eb:1a:c9:58:61:
                    44:7d:20:d5:89:79:86:f0:d2:b9:9c:16:4e:8a:49:
                    d9:47:3b:8f:08:db:a5:46:b2:c7:29:c0:01:68:f5:
                    e7:0e:a4:9b:a8:2c:6e:ac:1d:72:8b:22:c2:8a:d3:
                    c8:2e:d5:72:cb:a5:8f:67:ac:37:cd:63:94:5b:99:
                    8c:26:ea:3b:4a:d4:b7:01:9b:33:f0:1e:e9:1c:3a:
                    30:69:53:f1:04:df:e3:2e:ea:c7:e9:60:f7:95:05:
                    a3:a2:e3:92:af:8b:d6:25:7b:4e:78:52:82:85:d3:
                    c3:35:b7:72:ae:39:36:a4:ec:cb:ea:ef:0b:7f:14:
                    d4:65:34:e8:25:04:91:13:3c:fa:0e:25:ed:97:bb:
                    16:de:07:ae:bb:de:61:94:82:3e:df:5e:21:a7:4d:
                    d0:21:66:e2:f9:9c:20:87:cc:10:75:6c:ed:6e:74:
                    2a:6f:d3:33:c6:83:5f:08:cb:03:96:ac:af:31:09:
                    73:7a:f8:10:2a:bf:3a:61:2d:ae:97:35:71:62:14:
                    9d:7c:59:49:07:bb:53:1b:2b:56:f7:d5:c8:39:6a:
                    b9:99:37:b7:2a:c8:a1:2b:0d:7f:ff:9c:2e:e1:0b:
                    f4:70:9d:43:a9:04:0f:2f:92:38:e8:0a:57:d4:6a:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5A:98:EF:03:E0:24:D9:1A:7D:5D:47:8F:90:97:39:41:2F:0C:AA
            X509v3 Authority Key Identifier:
                keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:2a:04:83:01:82:79:52:66:83:37:23:9d:d5:93:6b:4b:
         5c:d0:8e:b1:a1:66:36:01:41:5e:cd:a1:6d:01:e4:dc:af:73:
         64:4d:ec:37:42:59:10:71:67:80:70:64:59:9a:2b:2e:dd:80:
         1e:35:7a:f6:20:7b:43:c5:29:e2:b5:ad:bd:06:44:eb:ce:fe:
         e2:18:ec:4e:b4:88:fa:87:84:f4:34:99:cc:9a:e1:80:21:d2:
         9f:13:6d:f0:eb:f4:45:38:3d:a1:85:53:c2:89:6f:8d:79:11:
         07:b4:64:ad:84:80:04:f3:bb:d9:a9:d4:b4:0d:31:1e:e3:f7:
         1d:13:16:2d:c7:2f:c5:56:62:72:18:93:5f:60:c6:9d:f6:4b:
         e1:db:e0:06:f1:a6:f4:d4:cd:2a:d0:35:aa:f9:1a:f4:84:e6:
         1c:ce:55:1c:3a:9c:7f:43:1f:bb:6f:dd:2f:b9:de:2e:2f:51:
         61:1f:39:1d:95:24:e8:a7:f3:44:af:29:7f:68:41:aa:8e:4c:
         f4:d9:6b:d2:e8:0e:4c:3f:b8:bc:f5:b1:8f:37:ae:ea:9b:51:
         55:c3:75:0b:f7:ac:4a:83:08:17:f5:3f:cb:ff:fb:e5:1b:c0:
         2e:f7:52:6f:14:17:89:53:e9:54:6e:b4:ba:25:11:46:a4:61:
         60:59:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----