Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
File:                     o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json)
Hash identifier:          6wbHsDOX/vOPCNquYYHHdU8IhooN6LZ4+dpm5J8QsXA=
Subject key identifier:   1F:5E:56:4C:5C:7E:23:A5:42:FE:34:B3:31:FD:BF:A9:D9:91:D9:68
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Certificate issuer:       /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial:       01962E98F8DBFBBB965D5CFB970580415A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
Manifest number:          02B2
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: RJ5sc4ZtiQu34iYpMQBd3L2KovXpQA+VHXW1GqAejzs=)
                          2: p2sBhjkKrSOlFMpQrw-wv6_TqKg.roa (hash: ldQS4P3nrNFNOkVsta5Vmi47wIthwLabohDFSWJ5xpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:db:fb:bb:96:5d:5c:fb:97:05:80:41:5a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=1f5e564c5c7e23a542fe34b331fdbfa9d991d968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:a6:e3:fb:95:e2:42:4e:c8:f6:9f:be:2b:
                    68:8a:7c:1a:05:16:92:b0:44:ae:dc:d0:b4:c6:f3:
                    89:c8:ee:70:41:2d:18:0d:53:85:13:33:f3:29:ab:
                    74:9d:e7:cf:45:f9:59:17:57:fb:cf:1d:a6:4b:80:
                    ec:5e:61:4b:dd:aa:3d:45:8e:b1:4e:52:2d:19:ab:
                    f6:e0:80:76:2c:b2:bf:c8:3b:ac:04:88:ba:d8:68:
                    45:cd:9d:1c:e6:6c:a0:36:e4:07:5a:e8:8d:67:cc:
                    a8:8f:a2:1a:7c:6c:d7:2c:07:6f:ec:02:87:00:24:
                    20:62:51:53:2c:a8:ab:38:9f:63:ec:57:ba:24:dd:
                    64:5a:01:04:29:63:7a:64:52:e7:f4:4f:5d:0a:72:
                    4c:ab:6a:2c:64:7e:7b:29:6b:64:0a:97:bc:18:eb:
                    a3:50:77:58:b9:3f:6b:3b:be:fe:bd:8c:9b:0c:1d:
                    62:b1:8c:32:80:ee:f4:1d:5a:f9:a8:0e:c6:07:a7:
                    26:89:c1:fd:2f:02:6d:25:cf:70:3b:7e:5f:a2:e7:
                    8c:90:0c:dd:30:aa:b0:07:f7:3a:1d:c0:a5:ea:d8:
                    96:b7:60:e5:a6:68:c5:95:6a:91:be:dc:f9:db:9c:
                    3c:6b:ae:f1:c5:38:8a:ee:e9:d3:58:f4:8e:bd:51:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5E:56:4C:5C:7E:23:A5:42:FE:34:B3:31:FD:BF:A9:D9:91:D9:68
            X509v3 Authority Key Identifier:
                keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:cc:b6:55:61:bc:29:8d:05:05:7d:c9:4e:ff:5b:17:fb:a6:
         af:06:52:fe:84:54:e4:91:00:1b:7e:cd:a7:b0:66:d1:0a:82:
         91:f8:6c:58:d4:bf:f5:dd:b2:a2:e3:49:f2:95:82:74:71:9f:
         7a:09:92:ee:1c:40:2f:8a:d9:db:0e:fa:21:5e:2b:66:f4:e9:
         6d:60:52:6c:ba:de:b3:63:c2:b8:e2:76:ce:e3:64:da:30:e8:
         65:2f:4c:dc:1b:eb:f1:86:a2:f6:72:48:e5:93:b1:a1:fe:6c:
         2d:ee:06:25:e9:ef:28:5f:85:63:42:6b:b0:ab:10:1a:4c:37:
         d3:78:ce:0e:1f:5f:eb:5c:3d:0a:ba:c8:0d:fd:25:84:54:04:
         11:40:a4:06:47:d5:3a:95:57:19:f3:8b:93:26:2c:93:d6:e9:
         d9:c3:d5:a8:dc:fc:42:8a:91:13:4b:ab:e1:5b:af:05:82:50:
         55:33:b5:5a:94:3c:65:17:e5:7a:22:e1:38:f5:07:a6:8a:fe:
         fc:fa:a4:5b:7a:df:e1:c1:ae:eb:2b:88:ad:9c:c3:b2:9b:2e:
         1b:4e:88:86:f0:d8:1d:d3:05:93:60:ed:e4:1a:84:6f:b3:9b:
         2c:ec:97:95:fc:5f:56:32:0c:86:c0:a9:f7:03:3c:c7:02:87:
         2e:3f:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----