Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File:                     OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier:          aAbsWJd2KUNvSyCpMvMg5B0xuCyZVn0O9IVxYvB6qcQ=
Subject key identifier:   C2:17:04:5C:41:DB:78:1C:53:A6:91:C9:0C:77:83:3F:C1:6B:03:32
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer:       /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial:       01962F3DB48533820332D75B9FC39EFA60B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number:          04B0
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: qyctDCVvusgjwDN1R7YJ2XLGsWChOh7VjYxPFtiwYrI=)
                          2: Uw9JbudeiyQ7Eqq4TZWKYitXR5Q.roa (hash: PECjzeRoLCDiJc+fMhDdhpnjzdeMhIqjV/edQ5qJgEw=)
                          3: wU54z4fun2n9dhW1jQFZ_YTk2yQ.roa (hash: DU49T5R+7YoJZkuw0c2yae6qHjR70t2dzMX7X38YQ80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b4:85:33:82:03:32:d7:5b:9f:c3:9e:fa:60:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=c217045c41db781c53a691c90c77833fc16b0332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:d7:4b:c0:8c:4d:b3:f5:79:fa:af:b3:0b:
                    eb:fb:30:75:1b:d0:1f:73:b8:cd:ef:55:cb:4a:2a:
                    25:3e:03:6b:49:c5:dd:b1:dc:83:ce:c9:82:5e:f2:
                    07:60:3a:b2:8a:c2:e3:5e:a2:3e:85:1c:c5:cf:d2:
                    d9:40:a6:ca:76:62:f1:5e:6a:cf:49:66:11:09:ef:
                    0e:46:c8:c4:c9:a9:e9:10:ae:92:81:99:59:bf:01:
                    3b:6b:51:4f:ef:15:41:2f:6c:62:06:63:ec:d9:fb:
                    e3:e5:d8:2b:67:d4:8e:07:b0:73:97:30:ac:fe:98:
                    4c:a7:ce:ff:fc:67:25:99:b8:81:52:a3:5d:3f:36:
                    b1:e0:b2:30:5c:75:17:4c:6d:8b:a1:65:03:38:67:
                    0b:07:90:fc:3e:f1:7c:5e:77:4a:96:a6:78:f1:95:
                    ce:2e:3c:4a:2a:5f:4c:22:87:fc:5c:35:39:a6:5b:
                    8d:d4:5b:03:ec:22:e9:37:2c:f9:07:ef:af:30:5d:
                    ff:03:f3:62:ad:08:7e:ea:45:01:53:87:ff:11:2c:
                    e9:73:cd:1a:36:99:88:4d:fc:af:3d:9c:c3:9c:1c:
                    c5:a6:06:4c:34:98:33:88:da:95:70:1e:98:86:02:
                    8f:65:75:68:ea:2e:35:6d:e1:86:bd:59:95:54:bd:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:17:04:5C:41:DB:78:1C:53:A6:91:C9:0C:77:83:3F:C1:6B:03:32
            X509v3 Authority Key Identifier:
                keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ec:8c:57:01:48:0c:2e:e5:16:b0:fc:79:a1:30:3b:a5:bd:
         a8:bc:61:c5:2c:48:51:97:e5:42:1c:70:c3:a5:92:b5:21:64:
         e6:95:ef:c1:4f:b4:13:3d:1b:aa:d1:8b:6c:37:dc:97:03:55:
         c3:b8:a2:0a:95:88:19:e3:ee:ed:67:77:52:2a:fc:df:52:f1:
         91:24:70:ee:8a:c8:9d:50:aa:e4:90:71:79:ea:34:1e:5f:d1:
         7f:de:40:36:c1:4b:68:3d:ff:fe:7b:bb:64:30:f9:05:ec:9d:
         c5:5e:fd:05:17:eb:dc:a9:ac:08:f8:ca:56:12:5c:20:84:d7:
         0e:ca:49:06:90:12:6e:8c:7e:b0:20:7a:26:04:9c:96:0c:57:
         06:33:ed:ac:8e:44:c1:98:ab:a4:ea:6c:cd:5c:30:7e:92:7f:
         df:36:61:12:4f:9f:b4:87:8d:d9:58:c3:99:3f:f1:a6:2a:88:
         a8:83:13:a1:85:ec:6d:8e:96:0a:83:23:9a:0a:9e:f9:35:35:
         b6:c9:b7:fe:2d:90:62:34:de:a2:1d:f4:5f:88:f5:9c:90:e9:
         81:e2:42:49:a2:ba:13:65:df:fa:9a:4c:89:a6:f7:10:84:ca:
         fa:a0:5b:c9:74:1b:c3:33:e9:5f:b1:c4:52:58:f9:c0:38:40:
         29:d5:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----