Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File:                     OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier:          f0Z08+fe8lFDIiYp229J1yg8jC4Mo0zI8tvIwM+Mmy0=
Subject key identifier:   30:95:B6:BB:AA:D6:FC:FA:73:2D:F9:FA:ED:81:4E:68:90:DC:B5:AC
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer:       /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial:       01962E98760E1D3569044C0F1ACEEF95E3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number:          0D58
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: pKj+xeBWiixMZ3FjFTHi3JLPv2ohyOPw4ccLxsgQOdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:76:0e:1d:35:69:04:4c:0f:1a:ce:ef:95:e3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=3095b6bbaad6fcfa732df9faed814e6890dcb5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:54:ac:f6:c9:97:98:39:f7:e2:e8:80:5e:
                    13:7d:4a:dd:01:95:f4:88:22:7c:4a:81:8f:74:9a:
                    09:35:2f:a4:1b:64:2b:e3:94:b4:1d:60:32:3b:33:
                    b9:a2:2e:20:65:b8:1f:58:4f:4d:2d:0d:5e:9c:46:
                    67:45:72:54:52:84:f2:ab:92:1a:f7:d3:fd:f3:20:
                    98:7e:6e:81:31:75:63:f7:5f:ef:a3:b2:ea:cd:91:
                    64:d3:1f:df:86:8d:6d:97:d7:03:a2:bf:0a:3b:0c:
                    9f:b3:01:d0:5b:72:34:cd:5b:a6:2b:04:29:9a:c4:
                    91:bc:e6:53:74:79:dc:b2:53:30:0d:a1:80:0d:3c:
                    cc:f7:a6:66:f3:70:48:87:12:58:78:d3:09:46:02:
                    bf:6a:82:b0:b4:01:25:f4:44:22:e0:8a:6f:06:21:
                    6f:b8:e0:bc:c8:13:36:4a:53:68:26:5e:1e:d0:2e:
                    63:02:c7:a7:68:d0:23:82:3e:3f:8f:c8:57:ae:c9:
                    07:25:87:63:b4:e2:d1:62:71:59:41:b3:19:dc:2d:
                    20:f9:c4:20:00:b1:8a:5e:81:04:c2:02:73:70:bb:
                    28:6b:4a:f5:39:35:00:78:64:2c:7f:4b:53:59:98:
                    65:35:c9:57:ff:c7:62:67:c4:7c:74:9d:6e:18:dd:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:95:B6:BB:AA:D6:FC:FA:73:2D:F9:FA:ED:81:4E:68:90:DC:B5:AC
            X509v3 Authority Key Identifier:
                keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:90:51:61:a4:91:03:e6:47:d1:7b:ee:8d:bf:6f:29:e7:
         68:f6:52:b7:e4:c7:b8:86:73:22:2b:1e:b4:b3:e5:30:39:7b:
         2b:46:e6:37:7b:37:4d:e5:6f:fe:ae:f4:2d:79:37:3e:34:35:
         f5:b1:7b:3f:58:53:ff:a3:66:96:12:da:b0:65:53:36:80:74:
         a9:8c:b3:3b:72:47:ae:d4:7d:30:8c:60:54:50:8a:0e:18:35:
         dd:62:a3:94:18:25:09:eb:67:c3:2a:4b:1d:34:5e:5d:dd:f0:
         e2:4c:52:84:38:2c:34:e6:c6:96:a4:51:38:3a:a5:d4:d6:43:
         01:fd:12:9f:c8:cb:a8:62:29:f0:e0:04:38:0b:85:5f:e1:d1:
         71:64:c6:f4:e3:14:32:ac:c4:17:69:18:ca:15:85:57:06:16:
         78:65:37:d9:b2:9c:b6:ad:d9:2d:0f:12:64:3a:df:2f:5e:86:
         92:18:04:ae:97:b9:5d:4c:fb:af:36:13:6b:71:c5:82:7a:d8:
         36:3f:c0:8e:c7:d1:ba:e0:b6:e7:46:e1:39:da:a6:c8:7d:5a:
         12:41:4d:31:c3:5c:13:ff:82:b3:2f:98:82:5f:2b:58:2b:a1:
         20:e7:6a:0f:af:6a:63:ef:42:65:45:a2:99:7f:1e:a0:11:2b:
         23:5b:d4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----