Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File:                     OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier:          16+Jky7sJ8WxAJNxGBWVevhd8+/eUKReqFFv7MDekZc=
Subject key identifier:   F9:12:96:99:76:BD:B7:10:30:6E:B2:2A:BB:CD:7A:13:C7:C4:32:0B
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer:       /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial:       01962E2ABAFEF304AEB03BCB5FF3CAFF52AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number:          65
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 4TBEbTwznRUyfO-99-DGzicdpVY.roa (hash: NUzc37NEChJ2ehR4MuI3RA+Wwr1maBIZ+yC3jO0gtfU=)
                          2: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: 36rOjwoV/J++mqFrJ/6UlIvu7e0EbkWFnzP9JJKPk+E=)
                          3: dsqp4bxyFCCs7RL2PZGSdi7KthE.roa (hash: LpothYWyfl3DUg9u8R+0xehBO2vE3vsq9xV0G0H4C0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ba:fe:f3:04:ae:b0:3b:cb:5f:f3:ca:ff:52:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=f912969976bdb710306eb22abbcd7a13c7c4320b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:ef:37:7b:1f:69:c4:57:4e:70:0b:7c:9a:
                    48:c8:25:5a:fe:84:91:60:0e:7b:54:3d:41:1d:c7:
                    68:78:f1:9e:aa:f8:5d:e9:ae:02:8e:57:a5:e5:e1:
                    8d:d8:46:06:14:52:c3:99:ba:23:bf:cb:b4:8c:e3:
                    1d:5f:e9:e7:3e:d4:54:59:11:85:f4:29:82:1f:39:
                    d6:c7:79:59:79:ee:17:15:c7:00:03:90:b1:af:3b:
                    0d:50:99:f6:82:cd:ff:41:ca:cb:ab:94:b6:7b:17:
                    ed:98:fb:67:83:24:8a:c4:17:5e:0d:75:2b:09:b5:
                    9f:74:5c:68:6b:01:e2:74:e9:a0:70:f6:3c:04:03:
                    57:c1:f4:5d:d0:af:ea:5e:22:7c:00:11:96:4f:c7:
                    89:0a:63:41:d6:e4:54:21:a4:45:2c:9c:57:76:5b:
                    bb:e2:05:25:a3:b5:c8:72:de:ef:5f:ed:28:83:b0:
                    48:33:8a:7c:9f:ee:38:ef:c5:d0:ca:f1:6f:5e:20:
                    75:30:c5:bb:aa:c4:e6:25:72:e0:2a:08:f9:c7:95:
                    6d:64:09:d0:b8:fc:69:15:80:ed:d8:79:85:10:00:
                    7f:82:f1:94:82:8f:f1:4c:8d:b0:ef:dc:0d:38:3c:
                    27:5b:f3:eb:dd:cb:cb:0d:57:b4:1b:df:06:ab:b6:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:12:96:99:76:BD:B7:10:30:6E:B2:2A:BB:CD:7A:13:C7:C4:32:0B
            X509v3 Authority Key Identifier:
                keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:df:f7:d5:90:8a:88:03:8c:04:5e:d8:e0:9b:f3:a4:a7:d2:
         88:f7:49:6b:cc:ba:99:e0:a1:e8:d1:b7:46:73:bc:96:a8:a4:
         1c:e1:c6:00:d2:6d:a8:04:05:6b:30:22:58:3d:ed:60:7e:a5:
         24:7a:f6:61:2a:2b:87:ea:15:5f:59:47:49:10:1e:4e:46:7d:
         c7:d3:69:3b:45:df:a7:1f:06:44:b6:ea:3f:58:dc:df:5b:45:
         1a:2f:c7:65:02:d6:c5:fa:f5:33:27:36:bd:51:d1:1f:4d:45:
         f3:c4:81:e3:04:a8:7c:66:fa:a5:95:3f:d0:f1:14:53:90:7f:
         73:16:57:d8:ed:3e:ab:50:2e:76:7d:40:49:1f:8a:49:24:18:
         96:ff:46:ad:84:9c:a6:ab:34:90:a7:8c:62:64:f5:a6:32:8a:
         ac:5b:2a:d3:98:a0:b5:fd:1d:85:d5:58:55:b3:9d:d4:7a:97:
         2b:b7:5e:7c:97:53:87:ef:3a:96:db:89:fa:9c:dd:34:9b:3e:
         9b:1c:8e:c1:be:21:db:69:3b:86:f9:0e:78:59:e1:89:d5:79:
         7d:d2:a0:15:59:65:a8:81:c2:c5:0d:07:2f:b3:a3:ec:d8:7e:
         e9:3d:50:e0:b7:ab:c6:24:cf:4b:64:ae:3e:e6:5e:b3:3e:f1:
         98:66:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----