Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
File:                     OFt-lPpg22hRcc8TabHO-24g8zQ.mft (raw, json)
Hash identifier:          IIln1lPbRPr+7onO117onPcTxTDUoI6/4dijxV32GDg=
Subject key identifier:   A2:53:40:23:B2:67:51:F4:B5:68:9D:F5:8F:ED:DA:73:BF:F5:74:0E
Authority key identifier: 38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
Certificate issuer:       /CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Certificate serial:       01962E98A3D6DC4A3B41032529FEAD8CF8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
Manifest number:          043D
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: OFt-lPpg22hRcc8TabHO-24g8zQ.crl (hash: Pi8nLBpAjzikfw+5c/wrlPxEu7WggPUV/VVASCyVTOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:d6:dc:4a:3b:41:03:25:29:fe:ad:8c:f8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385b7e94fa60db685171cf1369b1cefb6e20f334
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=a2534023b26751f4b5689df58fedda73bff5740e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:57:aa:4d:fb:57:9a:cb:b8:fd:20:30:33:
                    03:72:e5:55:63:f2:6a:9d:ab:b4:fe:7f:13:68:1e:
                    5d:c0:f5:77:94:33:68:21:48:81:33:93:a0:7f:23:
                    25:31:7a:14:6a:48:3e:35:03:36:ca:e5:78:df:1e:
                    9c:74:f6:0d:2e:43:4b:52:f6:de:36:06:62:af:a4:
                    d8:21:03:97:54:06:c3:51:56:ad:f4:62:18:d4:dd:
                    4d:8c:3c:b7:b7:f2:7b:ff:f0:15:76:6d:ca:2d:8d:
                    f0:19:6c:51:2f:9b:ac:e9:13:07:65:a3:5a:83:ef:
                    5b:82:b8:10:16:3d:3c:53:1d:43:c1:0f:8d:24:6b:
                    4a:b2:4f:5c:79:c6:4c:3b:15:44:38:2e:57:98:65:
                    be:a0:bc:b5:73:a9:40:67:75:af:2a:a5:b5:60:25:
                    b8:b8:3f:e2:e9:a0:85:d0:3b:4e:61:46:40:1c:0e:
                    6f:4b:30:9d:7c:9f:7c:73:66:b8:69:eb:9a:1d:c0:
                    2e:d8:44:35:cb:45:f8:e1:fe:e6:65:9a:79:3a:4e:
                    03:dd:fe:72:14:37:29:60:80:b1:75:4c:72:1b:25:
                    1e:a9:1e:4b:2f:2c:c3:a0:20:35:95:6f:7a:98:30:
                    2f:82:7d:d5:e0:8d:87:63:bd:0a:a5:fe:01:8e:4e:
                    4d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:53:40:23:B2:67:51:F4:B5:68:9D:F5:8F:ED:DA:73:BF:F5:74:0E
            X509v3 Authority Key Identifier:
                keyid:38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:67:c6:68:09:cb:1d:52:c0:c0:a0:31:d1:c2:d3:0e:0a:
         74:9c:fd:ed:0a:87:5d:9c:c0:e0:63:ae:ee:3d:eb:b8:d4:3d:
         7f:37:06:7f:52:ad:01:47:5c:83:ea:ab:60:db:07:c2:2e:98:
         30:60:7e:10:cb:1d:75:39:77:e1:d6:bb:6a:99:00:e5:40:f0:
         83:66:aa:70:e7:10:19:06:06:9a:eb:ab:ca:44:cb:06:30:af:
         fd:a0:e3:92:88:49:a6:49:9d:ad:af:2f:ad:f6:9e:60:d8:6f:
         c3:c9:9f:2d:d9:07:fb:9d:84:15:a1:61:75:08:a6:a7:e5:d4:
         13:35:4f:d6:f8:1d:db:34:2f:bb:b8:94:e0:97:28:64:0a:90:
         57:85:f2:7f:87:3e:cf:11:a2:64:f4:ca:1c:72:f0:57:f2:23:
         8b:9f:03:6f:1c:08:d8:d8:b0:6b:7a:65:1e:fe:38:a7:e4:f6:
         fa:79:1b:f7:a6:17:f3:30:a7:30:d4:88:bb:b2:63:75:40:9b:
         67:3a:0e:27:7d:46:36:54:4d:29:10:22:8a:b4:35:86:e9:c3:
         3e:69:39:9a:7e:7a:7e:5c:e6:1a:54:e5:4d:f2:b8:d9:0c:de:
         4b:24:82:ec:1b:58:4e:96:4d:d4:c1:e3:12:35:a6:84:bc:e5:
         59:25:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----