Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File:                     O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier:          Ybj4zew1z8fybBdPCfig5aoqKl7dXxePGRvNPPY9aoo=
Subject key identifier:   39:8E:C3:A6:3B:1C:33:56:84:3C:2F:3A:B8:BD:D3:B0:1B:11:BD:FD
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer:       /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial:       01962DF4218A4996B5E2E345DB46E5564F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number:          11EE
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: D3xqbgtxD5pR6BaUM7DsgH7rv6is31LwKJD61by1qZ4=)
                          2: hv7umvI_Ed2T9Pd9d7RaxMNZ_A4.roa (hash: JaoBtJPnKetAcsAKSYzZugD1L/s0rkCRonZhSkC43s8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:21:8a:49:96:b5:e2:e3:45:db:46:e5:56:4f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=398ec3a63b1c3356843c2f3ab8bdd3b01b11bdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:1c:64:61:42:3f:d8:49:11:92:d0:21:84:
                    a6:7b:47:27:c7:97:89:7f:34:64:8e:76:e2:d7:1d:
                    bd:8d:f5:31:c6:df:b1:de:28:3b:dc:3e:01:7a:1f:
                    c4:12:a6:8f:e5:49:a6:0e:cf:e0:0c:63:77:b9:cb:
                    3a:62:44:6b:d3:fe:fd:93:25:2b:32:b8:4e:ba:3f:
                    34:53:05:56:36:58:fd:b3:90:e5:94:37:78:b3:ea:
                    62:d0:b5:12:44:37:e0:31:f3:62:62:b6:b3:ac:5a:
                    89:2a:c0:bf:a2:91:ba:6d:c5:2f:40:df:db:38:10:
                    45:29:36:9e:e4:73:75:80:da:77:c3:0a:98:c8:5f:
                    a7:45:4d:14:b5:ba:c2:95:06:b8:83:d7:90:cd:55:
                    6a:09:0b:c4:25:f3:1f:d3:c5:46:8d:b0:54:1b:04:
                    a9:d4:eb:5f:45:9b:7e:87:eb:ee:be:f3:ab:a9:87:
                    0f:ab:2c:9a:79:33:5f:46:13:cb:5c:8e:49:4a:da:
                    b0:9e:6a:bf:72:cb:da:9f:42:8a:10:f3:93:16:52:
                    08:71:82:1c:ec:60:2e:5e:54:33:c9:be:61:3a:ec:
                    cc:d2:9d:af:21:37:40:85:58:55:e3:9f:a7:5b:26:
                    7f:da:6b:de:b0:da:1e:d6:3c:5f:3c:e1:bf:06:ad:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8E:C3:A6:3B:1C:33:56:84:3C:2F:3A:B8:BD:D3:B0:1B:11:BD:FD
            X509v3 Authority Key Identifier:
                keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:54:6c:c0:d0:17:36:56:e4:ab:89:b4:a5:39:b6:76:e6:80:
         b8:58:56:e5:8a:96:54:cc:98:70:82:e4:f2:ff:ed:64:9d:0c:
         1b:48:73:02:9b:d6:0e:02:2a:5e:b6:91:18:aa:3c:29:93:cf:
         1a:86:f7:cf:4b:18:60:68:aa:28:b1:60:c8:02:ee:92:f2:7b:
         57:ba:40:40:11:b2:8f:19:16:5e:bf:60:1f:49:78:99:02:1c:
         14:ba:27:7f:63:6b:5d:58:cc:64:cd:57:b4:1b:e6:2f:12:ce:
         e9:cd:87:fd:96:95:f1:a6:c0:2d:bb:c3:67:91:55:fd:ec:cf:
         93:13:c1:1e:b1:52:0e:2a:c6:c7:7f:79:b3:b7:26:10:6d:f7:
         8c:83:54:28:0f:6e:33:74:a8:b0:e4:0e:17:11:35:56:b1:8f:
         44:f7:d5:cc:2e:ae:37:e5:66:6c:b6:4f:97:b0:c4:a2:bd:ae:
         90:83:5a:54:a4:bd:01:f8:6f:ea:13:48:97:e2:a8:d4:5f:d0:
         b0:f9:23:40:2d:07:0f:ba:d3:2c:cd:f7:9a:40:b5:90:4c:2d:
         38:85:81:c6:98:08:e3:90:fa:2b:91:36:4e:de:28:f8:a1:21:
         d1:d1:8d:a7:a1:7d:4a:4f:b5:26:96:9b:90:df:87:40:c4:5e:
         24:8f:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----