Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File:                     OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier:          3LNKlFaozykTsIzPCT798c5F42+fGQ45itGl8/PzEIQ=
Subject key identifier:   41:CF:F8:E8:17:78:D3:8A:09:37:C1:3A:71:2C:AB:F8:AC:B9:E0:71
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer:       /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial:       01962E61F4C7183BA490744669704A95267B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number:          1067
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: WRyBhq4QDCc1BnGAKLa0/3PcaKbQnYYSg9IqCYnO9xQ=)
                          2: hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa (hash: gFxs6hHw3FxfMImk+yNCzFI6L94MQhx1psEtxtAsjbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f4:c7:18:3b:a4:90:74:46:69:70:4a:95:26:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=41cff8e81778d38a0937c13a712cabf8acb9e071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:28:0e:c1:46:54:b8:61:75:a4:ca:6a:96:
                    94:18:dd:b0:b4:4c:8e:c4:6d:91:c6:03:58:5b:bc:
                    02:9b:42:b5:c0:54:9d:bd:0d:47:0d:c1:5f:2d:94:
                    e0:fb:43:7a:0a:9e:4a:42:36:86:78:92:8b:7d:15:
                    ca:39:c2:a1:90:8a:3a:95:78:85:f7:63:26:95:7a:
                    c7:c8:56:4e:ca:9d:67:10:6b:6e:b0:0d:f7:80:78:
                    c5:b6:48:aa:79:d3:9b:4a:2d:9d:88:bc:94:17:d8:
                    bd:f5:f9:f8:a4:24:0c:4d:39:28:9a:c1:df:a2:70:
                    a3:61:b8:f1:45:ff:59:3d:be:97:cf:ca:d3:f1:b5:
                    90:d5:3e:27:0b:ed:ac:0c:d8:84:e6:0c:26:28:e5:
                    b4:ff:aa:5c:65:d3:c0:12:e4:67:56:19:fc:d1:d0:
                    45:69:50:bd:ca:3d:5b:d9:7f:b6:30:97:c5:85:ac:
                    f3:87:3a:d9:71:9b:f8:93:34:67:de:79:5c:74:a9:
                    1d:ab:a1:6e:e5:d0:06:d5:b6:61:19:de:b6:0f:8c:
                    b2:a5:c1:76:c6:76:1f:b0:9f:bf:ec:3c:f6:4b:f8:
                    d3:a5:f7:4c:a3:a5:ef:ea:ef:81:10:17:eb:63:d5:
                    e5:38:a9:fa:c3:62:81:91:86:ea:0b:05:eb:b2:d0:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CF:F8:E8:17:78:D3:8A:09:37:C1:3A:71:2C:AB:F8:AC:B9:E0:71
            X509v3 Authority Key Identifier:
                keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cb:d6:69:4d:c5:7e:10:f0:a0:5c:5d:ed:a7:de:86:4e:5f:
         6e:68:4b:7f:bd:ce:27:22:67:15:55:b3:b6:03:48:4d:36:88:
         cd:15:46:23:bd:8f:9f:ce:aa:36:f6:2b:f3:0e:b2:97:9e:11:
         63:6f:53:97:eb:f2:3b:0d:47:26:00:9c:1d:3e:a4:6a:10:78:
         b1:b2:ea:18:7f:c0:93:f9:e5:f6:3b:0f:26:99:2b:fd:36:cc:
         77:a1:51:17:b1:7f:1b:8f:4a:ca:7a:b8:9b:43:93:ff:86:c8:
         52:3a:d8:0e:28:61:d7:6b:ac:6e:7a:1d:69:43:41:d4:69:b8:
         16:7d:25:ed:e7:35:37:80:b2:83:8d:02:8d:4a:f9:22:2e:66:
         9a:76:97:74:ef:df:76:e4:ec:c6:4e:dc:9e:9f:74:e5:29:bd:
         c4:6f:80:f8:4d:3b:f4:bf:f1:0b:d5:c7:7a:43:73:cd:f9:27:
         47:fd:2e:94:e4:31:ff:f6:27:62:cc:1c:68:68:b1:18:99:dd:
         54:1e:c6:50:4f:4d:47:ee:15:6f:e3:0c:01:e1:95:ec:a7:16:
         c6:69:8a:87:5c:bb:75:f2:c0:b1:b8:42:6b:17:ab:ca:6a:df:
         42:93:dc:3d:7e:33:ba:b8:49:52:00:ef:6f:a3:79:4b:f8:9f:
         93:f1:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----