Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File:                     m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier:          +2IDqIxcddMydKVmg//QOrNbV+nsejBAmRaPKujZHXo=
Subject key identifier:   7A:71:16:D1:BC:CB:A1:AF:E4:D0:64:B5:A1:FB:1E:A7:DA:2F:8B:8A
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer:       /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial:       01962F068F9DFB0D6199B42F73CC5AF0A9F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number:          5A
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: hbvJp3CNVLn0Ic8xlZaz2eTR/xmUqmI5NyivB1ddLL4=)
                          2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8f:9d:fb:0d:61:99:b4:2f:73:cc:5a:f0:a9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=7a7116d1bccba1afe4d064b5a1fb1ea7da2f8b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:df:d9:e7:72:5d:15:02:a8:8d:ab:71:bd:
                    8c:a6:83:e1:2c:5c:6f:37:61:7b:98:45:66:60:4a:
                    0b:d3:d2:2b:70:e8:fd:3c:13:cf:b8:d2:11:4c:b0:
                    d4:43:4b:29:d4:de:de:6b:7a:88:52:34:6d:c1:6e:
                    66:bf:e0:bf:77:c5:18:5f:1f:41:10:cd:c0:fc:0e:
                    3c:b1:67:60:8e:67:97:f8:05:2b:22:0d:0b:7a:43:
                    d7:6a:88:d7:0a:49:15:4d:fa:69:72:7b:f6:fa:b3:
                    d4:a4:a1:4f:15:70:38:28:f9:a3:90:a9:22:a2:8f:
                    71:60:58:11:e7:e9:02:5b:cd:95:47:5c:8a:85:77:
                    7d:ef:2d:fc:b7:09:cb:dc:d6:b6:d1:f3:c6:03:4d:
                    6c:75:a0:a2:21:7a:c8:e9:85:bf:f4:8b:9a:32:41:
                    80:ca:9f:21:0a:65:60:62:14:68:ea:f2:3a:42:d4:
                    ca:fb:c0:e9:88:4f:32:b6:47:8a:06:3c:06:18:f8:
                    58:b2:29:f9:d5:46:7f:31:2d:a6:5b:55:19:88:aa:
                    b7:9f:84:bf:e6:a6:13:fb:e1:de:de:0a:ff:8d:51:
                    c6:03:55:b8:f9:64:ae:b0:28:d0:71:18:07:35:2a:
                    48:10:bc:11:ea:a8:96:b8:55:13:eb:08:24:52:8d:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:71:16:D1:BC:CB:A1:AF:E4:D0:64:B5:A1:FB:1E:A7:DA:2F:8B:8A
            X509v3 Authority Key Identifier:
                keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:be:a2:18:f8:38:88:05:7e:22:46:32:27:4b:3c:40:58:
         18:b5:dc:84:a4:97:33:81:d9:ae:6f:af:67:f5:cc:53:e4:6b:
         3d:98:7e:57:68:37:61:e8:e8:30:1b:a2:d0:f4:c1:a4:9c:32:
         46:dc:32:7a:06:dd:91:55:b8:2c:f2:a3:c4:79:62:67:81:a5:
         da:90:8c:b4:62:89:aa:54:fb:9c:35:78:e9:d0:a6:48:0d:94:
         6a:56:73:9d:49:15:bb:b0:e8:d2:da:9e:59:45:92:ca:4f:98:
         fd:31:33:50:5d:e4:5b:2b:d1:7a:77:90:05:02:0b:af:af:e7:
         c3:f8:82:7b:cd:a6:ce:01:5e:f2:9d:10:66:a9:a8:b0:50:10:
         5b:e7:b5:55:c0:3c:a3:c8:56:38:96:90:0c:0c:cb:49:5c:0f:
         7f:a8:48:29:95:46:17:42:0a:15:01:66:02:09:d3:16:c3:23:
         b3:bc:6a:a3:fc:19:af:5b:d8:12:92:9c:bf:04:bb:0f:7f:f7:
         53:24:a5:2a:b3:11:49:bb:f2:f4:0f:c1:43:bb:55:a3:e3:4b:
         29:d3:16:b2:7c:64:4a:ba:d1:eb:49:ae:63:d7:03:82:9b:45:
         12:8e:25:8c:d0:91:4c:20:09:ed:b6:cb:ba:b5:ba:55:5c:6e:
         60:ea:a8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----