Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File:                     OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier:          MUdwscl7ByCeV/yUMqVLyBP0NJa/5/9ScLGBGIbVQzw=
Subject key identifier:   54:1B:B9:89:19:A3:37:E5:66:B7:28:92:0F:DC:FE:74:7B:CA:D2:E4
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer:       /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial:       01962FABB348B5FDDF854832A483DC1C5AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 15:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:43 +0000
Files and hashes:         1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: kEVBojBFbL/FZVFRkYKCBr7+5fbLgL3PloEdp6JxztI=)
                          2: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (hash: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:b3:48:b5:fd:df:85:48:32:a4:83:dc:1c:5a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
        Validity
            Not Before: Apr 13 15:01:43 2025 GMT
            Not After : Apr 14 15:01:43 2025 GMT
        Subject: CN=541bb98919a337e566b728920fdcfe747bcad2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:62:87:09:25:1e:cf:09:02:38:a5:a3:85:
                    f9:7f:92:e0:f6:e0:aa:9b:2b:76:f8:65:8b:f2:0f:
                    c3:3c:06:80:06:8c:0a:4f:be:73:be:88:78:03:11:
                    ce:04:f7:e3:64:62:23:96:9c:7a:5d:e6:7b:4f:11:
                    b2:96:01:d4:9f:c3:b8:fb:b0:4e:de:27:08:46:f7:
                    b8:a9:30:fa:a1:98:fa:2c:39:f6:42:be:a7:03:fd:
                    ac:ed:60:1c:a5:6b:98:2a:bc:da:e0:51:fa:13:10:
                    26:19:5b:c0:0a:62:84:1c:83:47:9d:ac:68:8d:99:
                    08:34:28:f4:14:c1:75:0e:71:81:62:8a:fa:3c:b2:
                    cf:b1:b2:c5:72:8f:28:b7:cb:76:6a:10:9c:3d:85:
                    33:cd:5e:db:23:ca:0d:ea:a2:a5:77:f6:90:d9:c3:
                    00:d6:f6:5f:17:6c:0a:0b:a6:5f:a3:64:0b:2d:6f:
                    cb:06:a8:9c:4b:7a:37:a0:e5:bd:2d:0f:e0:84:32:
                    c1:2f:54:5b:b0:cc:39:6c:d3:36:a5:37:af:27:d4:
                    3b:d2:6d:64:d2:d0:ac:cc:73:9f:21:a3:ae:51:3e:
                    ba:01:b3:a4:33:3c:f4:1d:06:7f:da:c0:aa:b6:46:
                    05:7f:cd:c4:26:25:5c:ce:28:40:8f:2e:73:ad:1b:
                    05:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1B:B9:89:19:A3:37:E5:66:B7:28:92:0F:DC:FE:74:7B:CA:D2:E4
            X509v3 Authority Key Identifier:
                keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:88:a8:7f:de:15:ae:29:62:55:16:db:1e:6d:cb:73:ec:
         7e:d3:5e:82:5c:54:80:67:88:49:6e:c5:d5:6c:17:1f:5a:5b:
         47:23:7f:dc:27:c2:8f:74:8a:9c:16:45:d8:98:12:bb:3a:ea:
         d4:61:74:cb:90:8a:77:49:ce:9e:68:8e:7f:3c:a9:e4:82:4a:
         78:d2:b1:9a:ef:20:47:88:5c:b7:f5:8b:82:fc:d2:be:16:12:
         66:e5:03:b4:fe:b8:66:68:d2:67:2c:c5:5f:d9:6b:67:ac:6f:
         db:c2:17:9d:94:14:5f:6c:bf:e3:69:43:40:2b:7c:e5:c1:ed:
         a7:0c:5e:17:8a:08:19:0a:7b:8b:9e:c0:a7:3a:20:81:b6:f5:
         e0:e0:da:51:cd:9a:48:11:d4:b4:be:28:5b:30:2c:20:18:3b:
         ee:ed:a0:d5:69:ec:99:5b:26:36:6d:b0:0a:45:ae:62:5c:fa:
         96:2a:66:3a:57:cd:3a:b5:62:99:56:02:ad:f3:25:7d:4e:d1:
         63:a0:1f:11:8a:1f:2e:20:5c:78:03:9a:f3:b0:a5:1a:1b:b0:
         45:76:83:c3:4b:04:09:10:9c:9c:11:19:dc:4f:84:62:f1:c6:
         da:03:44:a4:14:7e:2a:73:d7:94:9e:15:64:1a:7a:f4:2a:3a:
         1a:a2:e9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----