Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File:                     OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier:          AEs9Qk+bFTKZTgsgWb/wsYbI1YqkN7I9dyQF86ogpsA=
Subject key identifier:   A9:62:F9:FE:F8:EC:25:67:3B:96:8B:9D:B6:29:58:AC:EF:9A:CD:FF
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer:       /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial:       01962E61A3F0276D1A0EC1EF87DC7E2E6B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number:          0849
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
                          2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
                          3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: SwCG5wVNzbZCwZtgB/ZPRY//7Pn/GWC91SJWt/5xAl4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a3:f0:27:6d:1a:0e:c1:ef:87:dc:7e:2e:6b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=a962f9fef8ec25673b968b9db62958acef9acdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:cd:55:dd:02:6a:56:0f:33:2c:f1:19:19:
                    8d:d8:b6:85:ad:4e:db:76:a6:42:da:93:e6:23:b7:
                    70:65:dd:c7:32:26:4c:ba:21:62:91:b3:03:1e:75:
                    2d:5c:cf:2d:cb:e9:c5:c9:56:5a:52:5b:d8:0e:7a:
                    92:70:e9:94:7f:c8:e0:08:4c:ea:df:0e:18:a1:d4:
                    a3:56:a0:7c:fb:c1:f3:e6:97:bc:07:78:cc:2a:20:
                    98:5f:54:77:be:04:57:08:fd:12:6d:56:f5:58:a4:
                    35:08:3a:53:97:15:1a:89:4b:f3:49:78:82:d5:d9:
                    6f:13:98:3b:43:b2:86:49:b1:e3:2d:08:e0:4f:ab:
                    a2:c4:1f:0c:af:78:cc:fc:92:f5:d7:43:8c:7b:e0:
                    cf:38:38:d9:be:71:67:f6:71:82:74:5e:b5:f2:17:
                    9c:a0:9e:a6:4c:1c:fa:79:cd:10:29:f9:d6:da:e9:
                    d1:89:b9:cd:df:5e:48:e4:f3:f5:ae:ea:aa:b9:12:
                    2c:da:17:26:fd:aa:e9:8a:23:f2:31:2f:03:9c:f5:
                    40:8c:9d:8d:82:e6:09:d5:42:3b:57:8f:6c:81:8e:
                    35:bb:61:2e:41:eb:9e:3e:70:19:b0:78:91:f6:e6:
                    52:0c:2c:5e:5c:f8:fb:78:0b:6d:cd:f0:28:a0:c9:
                    3b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:F9:FE:F8:EC:25:67:3B:96:8B:9D:B6:29:58:AC:EF:9A:CD:FF
            X509v3 Authority Key Identifier:
                keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7b:6e:74:10:71:c8:18:d5:4f:10:f9:13:4d:3c:77:97:6f:
         ad:e1:df:42:73:5a:45:eb:2d:f3:57:5c:c8:4b:b2:c4:3d:ea:
         40:91:0d:83:9b:25:ec:66:75:57:92:a8:4a:fa:1d:24:92:31:
         02:45:bc:4f:e4:e3:79:e9:ca:e7:70:84:62:f7:28:98:15:f2:
         c8:4d:44:30:43:06:54:cd:40:02:27:47:9a:ab:b5:36:2b:68:
         61:dc:f5:c8:14:b0:6f:b6:11:54:c6:23:09:26:13:57:7e:dd:
         f5:85:47:b6:48:73:75:17:5f:28:4c:cb:fd:2e:53:93:ae:05:
         e6:c8:cc:35:d7:6d:e2:69:2c:b8:59:8a:21:0b:da:52:3c:58:
         ce:23:01:be:66:27:9e:12:3f:81:52:38:3b:1a:33:45:84:db:
         f9:16:be:0d:ad:62:04:01:c9:fe:7d:96:a1:0a:15:74:f6:b5:
         fe:e0:d5:c0:bb:b9:b1:3b:5b:7d:e0:6a:7d:ef:09:99:27:89:
         6b:f1:71:be:18:0c:91:26:fa:7f:00:f0:d5:ff:41:c5:8e:e0:
         2f:a2:3b:90:82:97:9b:c6:ad:95:7b:cc:e4:a6:82:2c:07:9d:
         f4:fd:cc:e9:23:a5:ac:d2:66:75:fc:e2:a3:c5:93:1d:07:29:
         08:d3:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----