Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
File:                     OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json)
Hash identifier:          4ce7OBaE8qjI3p0K8CTynflPNpyRbbPv0jKBX4sqGXU=
Subject key identifier:   B2:6B:BE:BE:CA:65:76:8D:8E:F4:7D:B0:D9:C8:D9:7A:97:AD:18:C0
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Certificate issuer:       /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial:       01962E61C2C665989FACA0848CDCEBD26902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
Manifest number:          0BC9
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: 1KqfloRTHvXkD8NKovtOfezt30zg5FacgRTk7w+s2rY=)
                          2: b85MZ4WinFf_UE0cBlcSvifgg7I.roa (hash: uJf/EeGTiSuFi2jO3q5f34ZIMuvCCFqx997bjLZrpdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c2:c6:65:98:9f:ac:a0:84:8c:dc:eb:d2:69:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=b26bbebeca65768d8ef47db0d9c8d97a97ad18c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:4b:9e:63:5b:27:d0:0b:d8:41:42:e9:74:
                    c9:6a:53:95:03:b8:bf:e8:ed:1b:8f:df:79:31:3c:
                    c1:66:39:f8:79:dc:ce:44:6b:10:64:4d:14:cb:e8:
                    fc:b5:ba:a1:24:bc:33:61:bf:d8:c1:e0:82:6b:da:
                    0a:45:63:77:12:75:de:b5:10:1b:88:34:49:ad:8b:
                    bd:44:78:85:5c:5b:a3:d7:06:ac:ca:35:aa:2a:fb:
                    b9:30:a7:f5:c8:6c:cd:34:d8:1e:83:94:f9:c8:3a:
                    04:ae:19:61:67:f4:d1:40:74:76:31:c7:f9:23:26:
                    97:92:5b:58:01:e2:cd:c4:db:5d:e6:86:e1:2f:ad:
                    38:8c:fe:3b:ae:6c:b2:2e:9a:f1:5d:02:fc:07:a5:
                    d8:d5:e9:10:3d:18:bc:84:66:f8:84:f1:3a:8f:d5:
                    6c:68:af:94:a6:a8:82:3c:bd:6e:ab:66:4c:21:b7:
                    9d:28:5c:2e:54:a5:ae:04:44:64:6d:4d:7b:1c:50:
                    8c:84:bb:7d:1b:ae:c9:f4:dc:42:1e:72:ab:c0:00:
                    b3:37:70:0d:0c:13:36:55:94:d0:cf:1d:64:40:d1:
                    97:c6:08:6e:00:bf:9d:48:d7:43:52:aa:1e:ef:fe:
                    02:47:5e:aa:d6:16:ad:d5:41:8e:fd:7d:a3:90:7f:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6B:BE:BE:CA:65:76:8D:8E:F4:7D:B0:D9:C8:D9:7A:97:AD:18:C0
            X509v3 Authority Key Identifier:
                keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3b:40:32:4b:7c:6b:90:9e:d1:d3:86:69:52:d9:6a:e3:96:
         ce:e2:59:46:49:a5:16:01:04:43:2f:66:10:28:e2:86:32:4b:
         6b:8a:ad:22:1c:fe:3e:b1:3b:f3:15:bd:2b:d2:3e:dc:c1:44:
         16:dc:5a:96:fe:08:40:e8:8c:ad:13:fe:9c:76:65:d2:fc:76:
         53:99:7c:89:43:37:73:24:56:19:d6:90:d4:ac:f4:a9:e1:23:
         7c:06:49:de:88:2e:3b:46:a7:4b:60:8e:87:01:a9:8a:23:e5:
         6b:48:60:ae:46:7e:34:87:28:80:0c:31:af:56:38:c0:07:0e:
         74:fc:e4:47:c4:d4:02:d0:f9:d9:87:9c:64:de:7f:db:a1:3a:
         0a:9a:5a:93:1a:b5:25:56:40:51:f7:cb:01:36:8c:58:3e:46:
         e2:45:8a:9c:1b:e7:ef:6e:bb:a3:c2:15:c2:1e:05:93:95:e2:
         d3:26:b4:55:23:93:54:ca:92:cd:fb:fe:af:72:99:fb:58:ab:
         31:15:1a:1d:c1:11:cf:79:12:8f:07:39:57:c5:21:54:c0:fb:
         3e:c9:bc:83:0e:0e:16:6b:ae:fc:27:a6:60:92:f4:de:c3:3f:
         79:8c:28:87:58:24:b4:1c:e6:21:40:a8:19:e7:5b:b6:05:c5:
         de:f8:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----