Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File:                     OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier:          p8RnqO3p4+uNwKBbpYN6PjlGHM8GQE0t9mZWhxYM1h0=
Subject key identifier:   3E:C8:13:5B:41:9B:DF:B6:3C:16:AB:BA:B1:D2:FD:9B:0F:C5:59:A3
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer:       /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial:       01962F749B988B2510E13F3C6B07DA924E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: dD6k95dwfx/Hz0YpPRKsrImQKlI30C1JHp52jcTUtvQ=)
                          2: TmqgT8a6A5MGUn5mkLtQ8qR97F4.roa (hash: V4gF7PSkd2779yOJRGcz3efKoncCJTVpp0G+/wVgtGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9b:98:8b:25:10:e1:3f:3c:6b:07:da:92:4e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=3ec8135b419bdfb63c16abbab1d2fd9b0fc559a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:81:02:af:91:21:0b:20:89:ec:28:a7:dd:71:
                    1f:b2:e7:ec:74:09:c8:74:ef:a4:07:89:5b:27:66:
                    d8:f2:74:e4:3f:d2:7e:69:0a:f6:70:fd:6a:2c:5a:
                    34:6b:42:fd:89:6e:7c:ff:56:11:72:4a:39:a1:c0:
                    1d:1c:af:6b:22:ed:66:04:dc:33:98:15:d3:87:38:
                    b7:ef:a1:64:41:61:d5:6d:1e:90:95:b8:91:0d:c5:
                    18:16:89:66:24:a7:87:2f:fd:9c:ed:b3:06:2b:16:
                    0c:fc:ec:fa:14:5d:46:89:e0:de:77:9a:0d:e6:06:
                    37:6b:28:57:19:58:2a:7c:84:c8:58:96:70:91:01:
                    99:1e:5b:db:78:3b:a3:7b:7d:b8:75:c4:9b:b8:9d:
                    87:91:19:f6:6a:16:89:e1:29:5a:0c:01:18:63:65:
                    6e:fb:e6:e4:6d:28:83:8f:c9:55:ba:a4:24:d3:a7:
                    ff:43:61:2c:f0:7e:9b:19:87:21:ed:05:e5:aa:f8:
                    ea:f0:ea:d3:75:75:ae:fc:d9:d6:40:e1:a1:c0:43:
                    9b:33:d1:cc:84:2a:cb:8e:19:8a:61:b6:a1:a1:1a:
                    6b:3d:06:7b:bb:45:0a:6d:6e:e6:fc:de:dd:93:39:
                    b5:04:bf:e9:8f:db:1a:37:59:aa:7a:22:d7:83:57:
                    9e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C8:13:5B:41:9B:DF:B6:3C:16:AB:BA:B1:D2:FD:9B:0F:C5:59:A3
            X509v3 Authority Key Identifier:
                keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:52:28:f3:38:2b:b9:67:03:f9:2a:c1:81:35:a6:82:f5:97:
         e6:da:7d:6d:ec:6a:56:22:5e:df:51:17:04:5b:f9:61:ed:ce:
         3b:2b:35:31:c2:f6:d3:68:ca:27:87:36:e9:11:30:8e:3c:27:
         84:81:12:a6:28:9f:5e:db:3a:1a:7e:05:b9:a5:99:f0:d2:16:
         05:16:4d:6d:b7:47:78:e6:af:09:6c:96:ea:b8:4d:b2:0b:5f:
         b6:e7:e3:14:7e:3e:5d:fe:2d:c1:d5:1f:4c:06:4b:11:b7:5f:
         f9:64:be:59:54:34:df:76:08:8d:78:39:05:66:df:0f:cb:8c:
         79:61:a2:68:cf:02:5d:41:98:08:3f:13:02:e2:cc:0f:a0:0a:
         64:c3:c1:27:20:74:52:9e:ca:a0:f0:90:b1:8a:77:55:23:fa:
         a8:18:0a:57:9b:95:85:88:db:64:14:2c:77:b3:fc:99:cc:c2:
         87:d5:3d:f2:f6:ab:ba:d0:05:1b:41:51:de:af:6b:eb:67:01:
         fa:fb:2b:ba:44:7a:41:6a:34:e6:ff:4a:ea:b9:ce:f8:47:1f:
         bb:5f:9e:0d:59:a3:5a:68:2b:5c:6e:4f:e8:f7:b1:32:01:f2:
         0e:1f:a7:a3:a3:9a:d2:4a:85:90:7f:0f:43:12:f1:59:cb:bf:
         77:58:a5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----