Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File:                     Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier:          tHtO4NWDAezBAXYNYGaQ6mnJK6WPwOWCTX4Bp76z14o=
Subject key identifier:   A9:C2:59:A4:97:14:C8:89:1F:A7:39:24:74:2D:21:C5:C1:2F:10:B5
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer:       /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial:       01962ECF794A9305B8EF5DCBA527E3B122DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number:          01E8
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: sYItSRhcojnyXOScS7UuByE3fdkkN44OfUetx8Rkmnc=)
                          2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:79:4a:93:05:b8:ef:5d:cb:a5:27:e3:b1:22:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=a9c259a49714c8891fa73924742d21c5c12f10b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:65:45:6c:ef:ba:65:fd:a5:be:da:f0:40:
                    ee:85:0b:da:98:55:82:64:34:25:58:bf:b8:a6:44:
                    43:b2:6e:91:ec:67:56:19:4e:70:0a:33:9b:57:78:
                    d4:96:16:5d:e4:1b:60:e3:69:5e:20:70:c2:21:40:
                    73:ab:a1:1e:93:1f:42:1a:d4:05:4e:0a:0e:f3:5f:
                    64:f7:e7:a6:ce:ae:7f:2c:e8:e6:c1:b6:92:a1:fb:
                    0f:d0:16:61:75:32:5a:58:f1:ec:f1:17:0d:78:31:
                    b4:be:7f:ed:bf:73:f2:58:b1:53:10:a4:7c:92:09:
                    51:83:0e:7f:0d:58:22:e9:cc:89:47:b9:46:80:72:
                    24:f0:7f:42:bf:ad:d3:e3:88:2f:8c:3a:7c:39:4f:
                    9d:eb:23:a3:71:f4:c7:78:63:97:19:70:a9:fc:c5:
                    69:7b:b8:02:51:4d:26:c5:cb:c7:5a:c2:65:92:ff:
                    9e:71:d2:aa:bc:ee:6c:1b:0a:29:e4:b2:2f:06:71:
                    5f:e5:88:af:e4:cf:54:d5:91:1c:52:85:af:f5:a6:
                    fc:3f:8c:e4:ef:70:3e:52:41:3c:90:be:d0:b8:58:
                    88:85:c8:89:0c:d5:79:58:78:31:0f:35:dd:c3:78:
                    94:28:32:3c:10:07:d8:b1:50:22:42:40:cc:eb:0f:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C2:59:A4:97:14:C8:89:1F:A7:39:24:74:2D:21:C5:C1:2F:10:B5
            X509v3 Authority Key Identifier:
                keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:af:0e:5a:32:14:c5:d2:ec:d1:58:c6:8a:aa:15:9d:7d:ef:
         29:e5:2d:a3:03:c3:29:c3:25:5b:69:9b:69:8f:b2:82:b2:1d:
         97:08:87:1b:2e:b9:51:51:5e:72:03:b5:d7:60:b7:c7:20:f6:
         7f:6a:c5:f9:bd:51:e0:55:b3:0c:12:2d:68:64:01:cb:78:6f:
         26:a3:2a:bb:d2:95:05:35:8f:46:0b:32:a4:87:18:d0:63:f0:
         63:02:54:d4:3f:87:23:63:cc:c9:6d:58:80:e8:70:be:73:50:
         c7:5b:2a:a5:6a:a2:04:45:72:81:ca:eb:35:c0:6c:4a:20:67:
         c0:85:53:5e:fd:50:c7:79:ea:ba:6e:79:37:22:13:6c:db:20:
         99:26:17:6c:84:14:49:0c:98:ba:f9:7d:41:44:3c:55:d7:c5:
         08:9e:64:62:54:be:66:d0:c2:4c:9b:9e:0e:42:ac:c9:cc:28:
         1f:d0:ee:ee:51:2c:82:48:19:d6:b7:94:5e:65:39:20:c2:70:
         f0:1c:b4:4e:62:f6:27:fd:d9:e6:ec:48:0d:51:32:8f:2b:d6:
         9d:fd:b2:2c:33:e6:a0:e0:52:96:2a:7b:02:fb:7f:aa:b7:37:
         ae:20:8a:2e:42:8c:a3:02:c4:eb:30:fd:2c:76:42:3f:cb:e6:
         9a:e4:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----