Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File:                     OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier:          gIMMHrgE1nV/YQtd5IBj8pk0kL1wyGEeZREEO7XEfOM=
Subject key identifier:   1C:E1:05:CF:E2:52:3B:55:98:76:0B:C3:24:80:F1:0A:A0:B5:E4:1B
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer:       /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial:       01962DF4350310B3949433DA51A70A9F7806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: wwE0CAqYv0NivVsnkHUWayZhLVGhI5LblZXWpXCMmj0=)
                          2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:35:03:10:b3:94:94:33:da:51:a7:0a:9f:78:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=1ce105cfe2523b5598760bc32480f10aa0b5e41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9a:a6:e4:8a:8b:5e:f7:f2:bb:6a:03:7e:82:
                    01:d1:56:ca:f4:24:6c:86:25:12:e4:5e:b0:ab:56:
                    38:e2:6a:15:22:9a:e8:7b:86:73:07:a2:a9:22:94:
                    c3:a2:6b:2c:76:37:1f:ef:53:17:10:4a:ec:dd:96:
                    b5:22:50:71:51:8e:b6:3b:27:38:f2:19:b8:70:72:
                    c4:af:95:c3:d8:f1:cd:24:29:2f:ed:1d:aa:3d:20:
                    fb:bd:5a:7f:9c:09:22:a2:48:99:f7:4d:17:85:01:
                    19:f9:1a:2a:b9:a8:9a:af:84:01:81:5b:46:c6:04:
                    fa:b1:2b:bc:83:88:70:da:11:7f:55:30:63:0a:09:
                    c2:87:aa:06:ac:fc:a6:89:e4:df:dd:95:d2:b1:4a:
                    e8:61:56:4c:44:80:ee:1e:6f:7b:53:1a:26:2b:04:
                    f2:fc:75:e7:6a:e8:dd:7c:ab:3c:d1:c6:05:ea:bc:
                    68:7e:98:4f:b3:77:fe:95:44:9a:df:46:9b:54:60:
                    40:43:28:b5:c1:d5:32:53:f4:d7:31:70:92:9e:0e:
                    4e:8d:f0:ac:b1:61:74:a9:81:96:63:f5:08:06:09:
                    91:64:74:2c:81:d3:a5:48:e2:1d:25:35:f0:a8:b8:
                    aa:94:d2:71:1a:11:13:45:42:f8:58:54:72:a0:9a:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E1:05:CF:E2:52:3B:55:98:76:0B:C3:24:80:F1:0A:A0:B5:E4:1B
            X509v3 Authority Key Identifier:
                keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:25:4a:83:55:e5:b4:9e:64:b7:54:4e:c7:e7:7e:3a:3b:c2:
         ce:2f:56:bc:d9:74:f1:4f:1e:3b:f5:af:4c:4e:98:95:47:0d:
         f2:52:56:ea:92:6c:ba:f5:07:57:f4:3c:74:11:2c:03:96:65:
         01:e2:76:7c:20:07:94:e3:9f:26:b9:2b:2b:69:ad:cc:45:9d:
         89:a6:ee:28:62:7e:31:ae:30:e7:15:df:f9:9d:68:b9:bd:33:
         20:a8:ec:34:9d:af:af:8f:7c:5b:7f:56:7b:a4:46:c8:e2:e5:
         76:7a:02:aa:53:de:67:15:d9:5d:79:01:c9:25:10:34:03:09:
         42:c8:e2:ec:f5:55:48:7f:2f:73:ab:f2:d8:87:82:bc:20:90:
         30:36:2d:f3:4e:59:17:d7:db:5b:f6:11:d4:6a:6d:6c:b0:70:
         9b:a2:03:5e:3d:b3:b6:fd:7b:8c:da:91:85:79:36:39:70:82:
         f2:65:92:d3:a8:6a:92:9d:4e:82:a1:9c:64:f9:7a:1f:45:7b:
         79:d8:65:37:8c:4d:f3:10:ee:cf:d4:8e:71:13:59:63:1e:b2:
         8c:97:9a:98:42:7d:14:ea:25:ed:82:75:e6:53:86:9c:9b:81:
         19:23:d6:27:88:a3:84:7d:c5:ea:c2:2d:f1:d6:83:cd:fa:68:
         98:7e:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----