Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File:                     os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier:          V7wsszYqymBUo1cxs3w7DrmkPzBB3d7A8lT4m0mxGRw=
Subject key identifier:   15:26:B0:7F:24:31:57:FA:5A:C5:7C:BF:B7:17:5F:58:6F:5E:64:80
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer:       /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial:       01962ECF65CB46F9B5AC4A85650FC1F28828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number:          104F
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=)
                          2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: GWVkXIJ/xNEurnr+ft/xzO1fi0JKGHDiIxNvTy0RRBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:65:cb:46:f9:b5:ac:4a:85:65:0f:c1:f2:88:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=1526b07f243157fa5ac57cbfb7175f586f5e6480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:73:0c:5a:bc:fa:26:99:2a:59:ab:51:7a:
                    10:eb:07:e2:da:83:90:15:1b:87:ff:4c:a1:95:ce:
                    19:3d:17:88:ca:ad:a9:12:a5:04:c0:ef:21:0a:99:
                    e2:0f:32:f0:b9:63:a9:4e:2e:c7:81:a8:5c:98:e5:
                    44:28:38:40:ac:27:e1:2c:9f:fb:a6:e4:af:74:ce:
                    1f:fe:1e:71:e8:de:67:74:11:7e:6e:3b:29:03:46:
                    08:b3:d1:f3:47:2f:9a:38:aa:56:a0:a1:2d:25:88:
                    0f:e7:22:3b:1b:6c:5e:d9:d1:47:00:9a:6c:06:40:
                    ec:6c:33:f8:6b:e6:de:bf:2e:3b:d6:1c:eb:16:82:
                    84:c1:25:af:0f:32:cd:87:72:1f:3d:d8:02:d4:b2:
                    27:46:15:78:54:7f:7c:5c:bf:3b:19:c9:0f:2a:e3:
                    f5:bf:07:5a:a6:9e:f7:0c:cb:82:00:a1:d9:db:c8:
                    7f:ef:84:ab:1f:bf:25:f5:a3:31:ff:46:49:f1:5c:
                    38:30:1e:f1:49:43:4e:d1:83:e6:17:46:55:b4:cf:
                    9c:ea:ab:5f:6a:f6:da:f0:b1:4e:a2:d3:fe:f7:b3:
                    ca:23:55:c5:fa:73:05:69:e2:5f:7c:73:f6:45:5b:
                    82:e0:2b:11:e4:ef:87:83:44:f4:ff:95:08:3e:0e:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:26:B0:7F:24:31:57:FA:5A:C5:7C:BF:B7:17:5F:58:6F:5E:64:80
            X509v3 Authority Key Identifier:
                keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:26:66:d8:5e:39:b1:84:f7:6a:f4:08:bb:6e:ff:d3:ab:
         9d:1c:ec:62:a3:73:db:50:89:cf:71:2d:60:35:61:c9:61:68:
         44:e6:4b:f8:6a:d5:da:b0:04:0e:98:9c:54:f5:86:bd:de:15:
         57:b5:a2:61:41:73:2c:a7:10:aa:3b:3b:9b:54:cf:21:da:d3:
         b2:f4:93:4a:46:3c:3c:f8:e0:7a:33:64:e2:10:29:bb:43:2a:
         86:b3:48:43:ad:fc:03:df:05:71:ed:85:29:ed:20:79:12:50:
         eb:73:b6:02:6c:be:28:63:b3:db:2f:48:2a:81:74:32:40:11:
         06:be:b5:07:77:79:23:a8:4e:a1:b7:4b:4f:93:6d:11:7c:45:
         fb:f6:6a:41:c7:97:28:8b:ad:f0:94:4f:be:a9:3e:26:b2:e3:
         41:96:91:db:6c:d2:81:ee:ea:49:7e:fe:ce:7e:38:46:44:8d:
         d2:95:43:18:41:94:54:58:1e:d9:df:0c:e6:ae:5c:9b:13:b5:
         48:dc:d1:ef:8d:0d:3e:f3:5c:b1:40:ce:38:62:18:29:62:6e:
         bb:e6:18:54:82:89:5a:bb:47:d9:e3:b0:50:81:97:f8:0d:6d:
         8e:39:fb:eb:8f:97:9b:38:d5:c7:09:b9:66:79:6d:0b:82:6b:
         11:b4:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----