Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File:                     OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier:          hXDodbINOkvQb2deIIbSe+7VePYjCI9DUWMhg1WzkIg=
Subject key identifier:   74:81:6A:CC:DC:B1:98:BE:C5:84:4F:D6:6D:EC:77:FD:83:1A:80:27
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer:       /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial:       01962E2B3679F247B101419CFC5CFDA5A169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: O8Ie2UFyR26_in9H9ZehlUhv6CE.roa (hash: op5RgQZfGCiE+Ienp4xwxhQmRHhljBmY6akepNSvK9c=)
                          2: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: 8vj56chaa9JWpoNSI8zp8/TGkVKrrMopQQxPO3Wq36s=)
                          3: ySyYBbjTtcDUqBz7Jvsy_dqOh5M.roa (hash: y0xUTw1/EmIP+eH68EDACE2M7Q+xfY7/HmSGSbV7MZE=)
                          4: zQEbsK0Mfs127lWIZftoKrVUELY.roa (hash: udDscKWp8MO7KqgzFMOIvaY0+h3LjwRagPNX+vFbHKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:36:79:f2:47:b1:01:41:9c:fc:5c:fd:a5:a1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=74816accdcb198bec5844fd66dec77fd831a8027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:9e:ba:22:fd:91:1b:a3:74:2d:64:b6:f0:
                    09:81:f3:65:71:21:06:09:cb:d0:05:5e:9e:94:19:
                    f3:5f:ba:0e:b6:e8:cf:cd:2f:47:4f:33:81:9f:57:
                    82:13:0e:10:fc:0e:b0:05:78:45:53:ee:14:e4:4c:
                    16:6a:54:55:85:f2:77:97:06:ca:80:66:18:71:2a:
                    5f:4e:46:49:33:62:d7:5f:19:73:0d:5b:fe:ce:8c:
                    c0:3f:ae:0c:62:51:85:27:a4:d0:60:8b:3d:75:9a:
                    e2:aa:70:cf:d4:9b:78:86:cf:7d:cf:a0:8f:fd:25:
                    40:0d:85:ab:8e:8c:05:2b:d5:41:7b:69:53:ea:e5:
                    91:ef:34:e6:85:a8:a5:7a:d3:2a:ba:fa:17:9c:41:
                    25:12:2a:de:75:ed:5c:67:3c:dd:00:44:06:36:4e:
                    f7:c4:b1:e0:5c:f8:27:8a:45:e9:47:1a:39:dd:fb:
                    e0:12:85:16:27:5e:0a:89:fc:4e:6f:b4:f7:53:08:
                    fc:7d:aa:7d:7b:a4:41:37:41:12:2e:13:1c:bd:a3:
                    28:df:1a:1a:2a:a6:63:f5:4b:60:53:e6:52:1d:7f:
                    bf:81:a0:35:6c:4a:ce:44:bf:6f:8d:c8:69:eb:a0:
                    1e:d5:16:e1:5a:8b:87:49:07:b8:6a:53:57:70:a8:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:81:6A:CC:DC:B1:98:BE:C5:84:4F:D6:6D:EC:77:FD:83:1A:80:27
            X509v3 Authority Key Identifier:
                keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:95:2a:e3:99:f8:58:92:c8:83:90:8b:07:e6:cb:15:0e:
         36:12:36:ae:2f:d9:6f:9b:9c:8e:4c:33:00:94:a3:86:6c:46:
         2c:c1:e3:aa:c4:62:ee:26:1d:72:43:23:0a:8d:1d:b0:b2:18:
         a9:82:6e:c0:52:44:06:0c:09:de:94:7c:b0:6d:9e:4e:d2:08:
         84:db:6b:72:5a:e8:b1:5a:9d:cc:f9:27:20:cb:9f:7d:3d:38:
         a8:ce:19:1a:53:0f:fa:d2:37:76:c1:46:54:6d:14:ff:bb:51:
         5d:24:d6:a1:db:4c:f7:42:1a:10:8c:48:b4:17:a9:5a:a5:53:
         cb:3d:43:4d:64:58:40:98:36:e6:ca:64:62:50:0e:3a:51:f9:
         be:60:89:f3:21:b8:e8:2d:c9:13:d5:28:49:4e:62:e2:76:88:
         26:e7:15:c9:3a:ae:48:11:4d:b5:99:5d:31:85:e7:64:4e:0c:
         70:f0:de:e4:1e:06:44:2e:d7:d4:d5:85:c8:11:af:5d:b2:0c:
         dd:17:70:1d:82:7f:b9:71:ba:5d:dc:32:4b:09:18:a3:0d:ca:
         fa:79:f6:d5:05:65:f8:cc:7e:cc:7f:44:42:1d:ba:84:61:43:
         d4:39:be:af:08:49:51:f9:44:77:ca:62:85:bd:52:1a:da:9e:
         e3:8f:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----