Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
File:                     Ony1ktfk7HG2eFXR38VdnQZwVHE.mft (raw, json)
Hash identifier:          4T6jhcravPM2WoBAh+7vL0IrSU+fBUjusrvUPzGK7Ik=
Subject key identifier:   67:40:ED:C4:20:8A:D3:19:58:2A:F6:1E:23:91:F6:E2:30:42:B2:CA
Authority key identifier: 3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71
Certificate issuer:       /CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
Certificate serial:       01962F06A88286BB2149174BC699EE53B34D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: 5FA6usbApR1_cX5AgsEzHiEcMB4.roa (hash: 7OuczURaJl5BP/q53z8kXUiqcwX3Z4OY7NVnaBx1Pg0=)
                          2: Ony1ktfk7HG2eFXR38VdnQZwVHE.crl (hash: Yi0Peg/qU6WVj9Xt/oC9MT4TJcMGVPyN2vq86qAXq0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a8:82:86:bb:21:49:17:4b:c6:99:ee:53:b3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a7cb592d7e4ec71b67855d1dfc55d9d06705471
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=6740edc4208ad319582af61e2391f6e23042b2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:85:ec:7e:af:3e:a2:74:9a:e8:87:41:f2:
                    ad:61:5d:33:ff:f1:e4:33:f0:64:6d:e3:b5:61:f1:
                    30:52:a3:dd:34:51:f3:39:04:c8:9c:d8:1b:aa:9b:
                    c0:78:f3:47:71:ae:19:35:f9:ea:fc:91:12:b1:f2:
                    3a:19:97:04:77:81:cf:1c:08:6f:b4:92:c5:65:5a:
                    70:82:92:32:20:10:9f:e5:62:56:29:99:5e:3a:ee:
                    fe:03:59:46:ab:30:ea:4b:43:05:a0:18:50:10:07:
                    eb:06:3e:99:aa:97:ba:b6:0e:bd:b3:47:d5:42:e6:
                    bf:4e:a1:53:ae:40:33:4b:07:76:a2:72:08:5e:28:
                    20:7c:54:25:55:1b:c4:18:ea:a6:61:e9:ca:90:5e:
                    e0:1a:7d:fa:1c:22:a6:a0:7c:5c:79:98:46:3d:f4:
                    a7:82:f3:93:45:92:ff:f9:d4:36:14:c1:7e:47:b8:
                    9f:48:17:fe:47:22:7c:20:ec:1a:f1:f3:c2:4a:fd:
                    0a:d0:7c:6d:dd:d9:d0:aa:bb:c8:3c:c8:b0:c5:e3:
                    f2:95:39:56:34:43:c7:11:70:7e:ca:0d:3c:fb:b9:
                    0d:b7:b0:63:74:3e:d3:10:95:94:17:9f:06:b4:d1:
                    92:8d:d0:f6:c6:96:e8:c4:1e:69:47:ca:73:f3:f2:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:40:ED:C4:20:8A:D3:19:58:2A:F6:1E:23:91:F6:E2:30:42:B2:CA
            X509v3 Authority Key Identifier:
                keyid:3A:7C:B5:92:D7:E4:EC:71:B6:78:55:D1:DF:C5:5D:9D:06:70:54:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ony1ktfk7HG2eFXR38VdnQZwVHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf4aa6-28ca-4e71-8aaa-3cc592898789/1/Ony1ktfk7HG2eFXR38VdnQZwVHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:74:e5:7c:88:79:61:03:63:5b:7e:bf:54:e8:60:7e:e8:7e:
         1e:bf:6f:eb:e9:ca:15:bc:98:da:63:05:ef:12:d2:9d:68:8d:
         ec:20:2a:26:e5:e1:66:09:e1:b6:40:eb:e4:38:b9:6e:8c:d5:
         2e:01:f7:bf:e0:9b:ad:90:b3:ea:4b:78:ce:7f:3d:11:d7:91:
         82:34:2a:6c:4b:36:2f:09:47:00:92:fa:92:95:c6:48:33:42:
         50:b3:e7:cc:51:fb:6b:d9:ad:22:66:28:4c:3a:cb:d6:42:8c:
         34:87:0e:b4:b6:df:50:af:3f:f7:c2:80:aa:f7:79:98:cd:96:
         62:0f:88:56:21:b3:ed:56:03:3c:02:c7:3d:0b:74:56:ca:d0:
         4c:10:c4:6b:a1:13:ab:d5:68:35:54:6b:e2:bf:82:72:32:c0:
         ea:24:97:25:06:e5:1a:50:dd:bc:68:a7:1e:e2:33:2d:9f:77:
         a5:fc:7c:95:9a:33:da:16:32:5b:1f:10:d9:7a:71:28:7d:fe:
         c6:7c:41:f8:0e:c9:26:d2:90:84:5e:c0:89:a4:66:25:c5:a9:
         1e:a3:0a:13:c8:9a:1a:f8:37:88:c8:a9:65:76:49:7a:37:89:
         fa:f2:dc:e5:8d:b1:93:87:c1:b7:56:04:d6:e2:94:8d:a4:27:
         2c:49:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----