Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File:                     O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier:          lwGT5tej5SZ7L7nypXgQDEFZprVpPelRjD8G/Oss/q4=
Subject key identifier:   5F:70:6A:F3:6B:1A:CC:A1:22:95:BF:2D:00:EA:46:B3:FE:E4:4C:3B
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer:       /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial:       01962E61CC6902D3528817F526F91487ADF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number:          0A76
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
                          2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
                          3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: 2tux/O6N8ne8fbELV86/1o4sotNZQ2gRK44W7cOZ3GQ=)
                          4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cc:69:02:d3:52:88:17:f5:26:f9:14:87:ad:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=5f706af36b1acca12295bf2d00ea46b3fee44c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:04:ce:9e:a0:da:52:fa:13:63:89:49:69:12:
                    0f:91:c4:1d:63:88:c9:e7:54:04:98:20:2e:ee:e9:
                    00:5d:a9:22:0b:1f:1e:4b:28:4a:95:1e:fb:9c:34:
                    ab:f0:fb:d1:c6:fc:37:ea:73:cc:81:a5:88:84:05:
                    b2:bd:78:e3:86:14:ce:ac:5d:12:8a:35:39:88:99:
                    f3:14:3e:d7:1a:ad:cc:14:3a:f1:9b:d3:3c:30:8c:
                    53:91:a7:40:86:44:37:3d:88:0d:47:12:ce:3c:2f:
                    b8:f1:c4:2b:7c:99:4a:fa:18:43:a8:75:a4:e1:4d:
                    10:55:36:02:74:b2:17:1b:3d:09:49:ec:23:aa:33:
                    e4:c7:9c:36:07:da:29:39:d8:54:65:5c:dd:b6:48:
                    59:ce:d2:5c:28:cf:6d:77:73:2e:ed:c2:ee:d8:60:
                    4e:84:f5:fe:cc:33:fd:2d:84:a9:80:88:a8:16:8f:
                    dd:16:62:d8:f2:4f:12:52:09:0a:cd:89:a5:59:41:
                    e3:45:30:62:b2:0b:a7:6f:1e:a6:a5:f5:98:3f:1e:
                    f2:10:04:73:ac:b9:42:25:33:eb:c4:d4:d4:db:17:
                    9f:e4:e0:28:4e:6b:03:ad:98:f1:a0:c6:4b:67:4e:
                    b1:db:11:87:20:56:02:38:18:f1:46:87:d2:0b:cb:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:70:6A:F3:6B:1A:CC:A1:22:95:BF:2D:00:EA:46:B3:FE:E4:4C:3B
            X509v3 Authority Key Identifier:
                keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:2c:ec:32:7a:09:be:2a:f0:0f:71:83:92:c0:65:b2:fb:
         1f:aa:36:eb:0c:59:07:3f:a7:02:2c:34:fb:84:9e:02:27:d7:
         b4:6d:cd:94:c8:41:04:bd:4d:34:0e:33:6d:63:d1:f2:2e:e2:
         0c:cd:42:97:73:42:9c:fe:36:3f:65:fe:3e:5d:75:fb:4f:05:
         79:f2:44:52:2a:5d:ad:61:93:9a:3f:9f:07:a7:12:58:ed:21:
         f4:01:c3:a2:32:9b:9f:f2:06:eb:1b:f8:10:15:40:2a:6d:f1:
         3e:2d:fe:36:67:66:0c:72:56:ea:5f:87:6b:a6:be:4f:04:a8:
         95:c5:5c:80:5e:3e:3e:a3:60:8d:11:e0:55:0e:45:60:a3:d5:
         0c:02:43:64:c1:af:ca:c3:d0:30:eb:e9:28:1d:c7:37:3c:23:
         cf:83:f9:1c:6d:07:e4:a1:5e:7d:30:8b:16:57:b7:15:b8:d5:
         85:09:58:4b:7d:12:58:d0:3b:ae:89:23:41:e6:9c:7b:42:3e:
         ff:c9:9d:f3:21:19:cd:e2:e3:09:d1:2c:4f:f1:1f:95:d9:53:
         bf:cf:7c:63:a2:9f:90:72:6a:ec:0b:2f:c2:f7:54:47:b7:64:
         e0:93:ac:d2:72:83:0c:1b:e9:d6:14:bb:43:c2:4d:1f:72:7d:
         c4:33:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----