Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File:                     OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier:          986bnMjEgr9EJQb7OxRZJQcky7MhITWp8TPKXdePoaU=
Subject key identifier:   3A:8C:45:26:D4:AC:90:FB:CC:6D:9F:F9:46:FC:B4:6D:06:8E:48:FF
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer:       /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial:       01962F0705F23D05B6B1366D32005E5CD6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number:          1415
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: iB8Gx85b7Y7th8YFO54ZtM8F72tECTcXlawiIM4PLrA=)
                          2: RzHN7Dslblmf2SWetMH6DUd-Es8.roa (hash: 2K0PSVlUZvtFJCr5mNlFcXi4Xq9NSfuA5JwXa1JJxuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:05:f2:3d:05:b6:b1:36:6d:32:00:5e:5c:d6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=3a8c4526d4ac90fbcc6d9ff946fcb46d068e48ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:8a:f6:5a:87:70:8f:7a:8e:37:03:ca:e4:
                    d2:b4:eb:39:6f:50:18:d1:57:f7:9a:16:e9:28:1c:
                    a6:4e:db:8b:e8:6f:d7:20:3b:57:53:fc:3b:19:8a:
                    41:72:a6:9a:5b:b3:15:05:91:5f:c2:18:33:7b:36:
                    06:5d:29:7c:2b:e0:9f:92:67:b9:6e:47:f8:92:2f:
                    a5:91:9d:fe:3f:93:03:ae:46:da:b1:5d:27:24:dd:
                    07:2d:24:07:1a:4d:d9:17:0b:e9:65:3a:fb:90:86:
                    dd:7b:a9:90:f3:33:33:01:f7:6b:4f:ce:45:b0:fc:
                    c2:c8:62:80:d3:21:53:b6:c6:d4:da:d8:5a:c3:1b:
                    78:2f:ee:3c:1c:a8:3d:8b:f3:20:75:59:90:77:e5:
                    64:58:bf:aa:3f:b5:80:bd:a0:24:e9:37:4c:23:76:
                    51:0a:b9:31:63:df:ab:10:de:ed:45:86:5e:8d:e9:
                    85:49:1a:02:56:5c:da:b9:2b:9e:dc:24:df:20:da:
                    f5:e7:97:d2:e5:96:93:55:57:2f:72:a6:33:ad:23:
                    ab:c8:1b:a5:33:f0:dd:93:39:8f:87:66:ab:ed:2b:
                    03:6a:d3:14:5b:e1:9a:96:db:70:d4:e6:c1:cb:3f:
                    e7:7a:0a:3e:3f:06:ca:09:65:af:8f:ae:39:93:2e:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:45:26:D4:AC:90:FB:CC:6D:9F:F9:46:FC:B4:6D:06:8E:48:FF
            X509v3 Authority Key Identifier:
                keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b0:84:f7:d2:fe:25:23:e5:2c:6b:bb:98:00:23:a1:e5:36:
         94:b6:5f:e6:f3:f3:19:3f:50:47:df:5e:32:f1:41:66:93:9e:
         4f:2a:03:82:e4:7b:f6:f2:d1:2f:70:81:c2:15:30:01:e8:2e:
         8c:69:59:e0:8c:63:a3:b2:e8:e8:da:af:45:ca:9a:5a:fd:06:
         af:73:70:b8:ad:c5:85:a8:85:01:d0:ce:b3:90:41:2b:99:e1:
         7e:b8:5b:95:e4:e0:82:dd:d5:63:c4:04:61:4c:81:85:8d:30:
         42:68:08:5d:ab:99:31:6a:4e:12:60:74:fc:7f:b4:62:69:1c:
         e6:2d:bf:48:fc:db:02:27:46:24:22:4b:91:2a:06:32:67:db:
         c4:73:5c:b9:50:fd:b0:63:80:b1:2e:a3:8b:7e:d4:a7:ba:dc:
         dc:18:ec:0c:aa:8a:7e:c9:ff:fe:98:2a:da:21:de:66:84:56:
         81:f3:4b:e7:66:d8:bd:26:c3:10:68:e0:31:09:a6:71:75:82:
         69:0a:ce:b7:bb:83:b7:70:0d:5a:7c:6b:90:f8:86:a5:aa:dc:
         11:21:d1:da:c9:87:e6:ca:cd:3a:e3:05:56:7f:68:f0:5b:46:
         08:8d:36:20:0d:cc:51:7d:50:54:c2:23:0a:71:6f:00:0a:11:
         24:dd:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----