Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
File:                     OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft (raw, json)
Hash identifier:          9fcUDC3Y+4bgjo8nePXKu9X1F7HWkJUggYa5LGhvz2I=
Subject key identifier:   AE:46:8E:86:6A:61:C1:1E:84:DF:4D:AD:9D:6F:F7:55:6E:B9:1A:FB
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Certificate issuer:       /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial:       01962E995055FB03706CD400F5308ED924E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
Manifest number:          0AAB
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: 0KlQdT1lu0CsM24p9yilVmugr4k.roa (hash: IYmqpSxBWUxOlCC0FW+IpqPujhd/KHXz7dmBrQJbXYA=)
                          2: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl (hash: IaghdAUIk9w9QTY/464kxv8vErE5HSwyThM5SY4yw6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:50:55:fb:03:70:6c:d4:00:f5:30:8e:d9:24:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=ae468e866a61c11e84df4dad9d6ff7556eb91afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:c7:c2:65:9d:b5:20:2b:0d:09:28:b7:99:
                    36:77:e3:b7:f1:4c:1f:ef:4a:67:7f:e6:09:ad:55:
                    a1:c1:49:d6:92:1e:34:7a:e1:3d:fc:8b:9a:fe:84:
                    bb:d1:07:4d:59:ec:b4:ba:db:63:fe:f6:05:e9:b9:
                    51:66:4f:f8:d0:de:4b:8d:71:1a:74:27:3a:c0:f3:
                    95:55:9e:e8:26:d1:ba:aa:84:4d:23:63:8f:39:ed:
                    49:10:9f:3c:33:0f:40:e9:93:c5:a6:0a:f7:a0:24:
                    6a:da:64:8b:6c:b0:93:d6:20:2f:b4:c2:f1:87:38:
                    69:7b:94:2d:e2:90:35:58:4b:3c:83:c9:85:c8:47:
                    07:f2:ee:05:9c:fe:a9:49:1c:07:2d:fb:a1:0d:33:
                    8b:d7:46:52:d2:a1:e9:f2:d8:38:b5:d9:a6:35:a5:
                    22:f3:c4:eb:2c:27:f3:17:3c:2d:1f:ae:39:1b:ca:
                    3f:c5:8c:a4:dd:67:1f:2e:2b:bd:61:cc:2d:d5:56:
                    70:46:09:ae:09:1a:c3:12:e3:c1:69:a8:49:26:c5:
                    fd:48:b5:e3:4d:8a:0b:fc:4a:d3:54:fa:b6:ea:8d:
                    24:9f:6a:e0:57:f1:43:63:1d:5f:4c:67:59:d9:27:
                    f7:bd:4d:74:f4:9d:80:0d:7f:76:a9:3c:41:ef:56:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:8E:86:6A:61:C1:1E:84:DF:4D:AD:9D:6F:F7:55:6E:B9:1A:FB
            X509v3 Authority Key Identifier:
                keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:18:60:d9:d5:ad:43:96:16:6b:18:a6:85:28:f8:28:7f:41:
         a5:81:27:6a:a5:49:08:16:42:c7:56:96:04:f9:ff:fc:08:f4:
         84:54:9d:bd:2f:38:59:69:7c:16:39:72:ae:67:88:23:1f:ce:
         cc:9d:61:b8:0e:eb:a2:17:fa:1b:4f:38:f7:1e:8c:fd:64:2c:
         a1:c5:51:8d:64:3a:32:1f:ad:f0:69:e6:ad:30:4a:7c:f5:ef:
         5b:22:56:d0:fa:7b:17:ce:41:1d:6b:dd:31:ab:0d:8e:a4:b6:
         52:86:9b:5a:63:3c:08:60:a5:a6:71:aa:e8:31:7c:9e:4d:71:
         88:82:63:43:0e:6a:9c:0c:7b:b9:4c:2d:6a:51:58:20:76:ee:
         1c:29:05:52:86:b4:0e:4a:7e:a4:88:13:03:f0:19:63:b0:89:
         10:93:59:fc:16:6c:bb:3b:a5:f3:2a:57:8f:9e:9f:a5:65:af:
         c1:e7:95:be:17:a4:3a:0e:3d:82:df:0d:8e:cf:3f:35:ed:a7:
         9b:74:28:f2:10:48:68:94:51:c9:00:3f:08:ce:4a:bb:67:f6:
         6a:40:9f:c8:28:6a:a0:88:30:2f:7b:2b:cc:f7:5c:6c:d3:3a:
         4b:ce:7d:3c:dc:68:d5:34:49:50:83:4c:0e:cd:b8:d2:f9:53:
         96:db:f7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----