Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File:                     OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier:          Gdk5m5hn1d85zxQycK8wlayT+AxxtXzmEM7brX7rS1A=
Subject key identifier:   D1:81:47:48:60:50:B2:87:AB:DD:6B:17:F7:2F:F7:7D:0F:0C:CD:45
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       01962F0731D825368E388A4B96A9E1B29CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number:          0C86
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: E8pnZAwdco6rqZPYbTvktaE1H_E.roa (hash: mJU1Xr9YV7h0pCMVQKe6h9rLN6ylm3PlXlO/99QSzGM=)
                          2: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: tY3LBL1ig8SsWIUHHb9el7ny6H7pBpaDjbBMNOjC4Oo=)
                          3: PosgbjBEN3JIZPm6yklNyzwEmB8.roa (hash: LxPaPYdBVWlHlKrzs8JwxQbkpaWJXSY0yo3gaOhFHFk=)
                          4: iYqIMSLhd13kAtHmsyVRJLCRELQ.roa (hash: Sy2brI825JIDwfnRYmv5+hBpQhClnbRKdRnTs+cKh/c=)
                          5: trRwMwj1TozbbVDdJBYsUBjss8A.roa (hash: R2jnNGJ/7Zo+ytylzMHKu/XH3p37UtlobvuFEWQLQHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:31:d8:25:36:8e:38:8a:4b:96:a9:e1:b2:9c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=d18147486050b287abdd6b17f72ff77d0f0ccd45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:d6:b8:91:64:21:59:32:52:0d:ba:52:42:
                    ed:e3:4e:e5:0d:95:72:16:e2:ba:ed:fb:70:ab:b3:
                    9e:42:51:61:1e:38:5b:a3:ef:d7:28:81:d8:51:3e:
                    fb:65:c5:ab:72:ab:8a:0e:e6:67:61:b2:c2:04:60:
                    8b:72:83:5b:3b:ed:a9:2b:6f:3a:de:1e:52:2a:ed:
                    ad:f7:43:47:a0:21:64:72:b0:11:f8:36:19:9c:f0:
                    df:0c:08:c8:e7:71:c8:5e:d4:93:13:64:c1:98:39:
                    50:38:c0:f3:27:06:67:fd:33:02:22:d9:33:05:82:
                    e5:15:99:30:36:0b:6a:24:ee:c8:12:6f:2e:df:f2:
                    ee:12:30:81:d3:7d:38:2a:f8:58:9c:13:cf:dc:8a:
                    34:e9:3e:b0:1f:30:f3:ca:f6:f7:c1:39:8f:52:bd:
                    db:a7:27:f3:61:51:4a:93:18:a0:8d:26:ef:34:4e:
                    5d:ab:d9:b7:44:05:06:1d:f1:db:04:79:59:80:b8:
                    16:34:c9:dd:4f:9c:0b:ff:cb:46:e7:96:aa:e2:33:
                    f0:76:6e:2f:58:8f:b1:6c:d6:7b:92:49:0d:d1:85:
                    53:6c:3d:64:a8:31:9a:fc:71:f6:c0:fa:6c:ef:fb:
                    32:99:08:cf:32:63:fe:4e:99:12:de:4b:ce:92:d9:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:47:48:60:50:B2:87:AB:DD:6B:17:F7:2F:F7:7D:0F:0C:CD:45
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:8b:40:9f:7e:31:41:7d:e2:c4:81:d4:67:82:f9:fe:f2:
         bf:9d:87:93:8a:20:fe:dd:fe:ed:d8:49:4c:6e:13:b0:48:bb:
         8f:8c:47:ee:37:23:bb:ec:7a:8e:0a:f8:39:b9:72:12:a7:a5:
         90:4a:42:51:52:c7:2b:88:de:46:9f:7f:1a:ae:09:cc:20:1c:
         0e:f4:3b:b8:f0:8e:85:cc:f3:99:98:d2:21:12:0d:cc:15:cc:
         b8:1c:20:43:b5:53:42:a2:ac:29:e1:9f:13:d8:af:c8:22:b3:
         a9:f0:9e:91:7b:6e:35:d3:8c:17:7d:6b:99:0c:40:83:52:90:
         89:47:b6:5b:ba:57:d3:6e:52:6b:c7:21:ec:d5:ce:17:2e:93:
         8d:d7:3d:3a:ea:c7:ba:4a:fa:c6:0c:8e:60:78:2c:5d:4f:3e:
         5a:b5:85:fe:e9:44:d9:a2:93:9f:b1:d5:cb:71:e4:9f:db:dd:
         7c:35:89:20:1c:57:4d:8a:89:25:73:d2:a9:6e:fa:47:90:c5:
         15:93:1c:94:a6:c5:fd:5e:d6:0c:8d:16:0e:a8:40:68:4f:2e:
         62:ef:b0:8f:5b:38:6a:aa:e2:70:9d:d5:03:7e:40:97:22:cd:
         91:13:6d:2a:b9:8f:34:2b:77:ad:f4:76:ac:12:ad:a8:2f:22:
         41:7d:be:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----