Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File:                     O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier:          ECJAnVkfE07uhEtJGqXrt3VirziloGeBSuobn14VFBs=
Subject key identifier:   C6:C7:C3:DD:1F:3A:78:C9:7F:BD:D5:89:78:0E:FE:EF:07:1E:A2:5B
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer:       /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial:       01962DF4026713B87ADB9AD9594536209168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: pCJtUSCEpuIPGX/raF2aO8pe7mNid7NFmEeQBzHPPtU=)
                          2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:02:67:13:b8:7a:db:9a:d9:59:45:36:20:91:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=c6c7c3dd1f3a78c97fbdd589780efeef071ea25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:c6:13:b5:d6:da:38:18:bf:22:94:87:b8:
                    9b:e2:de:81:6a:84:e5:3e:43:89:b4:c2:4f:6f:9f:
                    94:71:71:38:49:40:c7:ef:6e:2d:f0:35:f2:d0:6b:
                    8c:91:f4:35:0a:41:a6:4a:ce:d6:fe:29:4c:7b:21:
                    d8:75:6b:ad:0b:55:e9:ba:e4:7d:ae:c2:09:f8:bf:
                    39:42:27:05:aa:8b:75:bb:02:f9:1d:ee:60:39:ec:
                    c9:17:bc:ea:1c:64:39:30:75:58:ae:25:28:21:c9:
                    05:53:9f:75:45:d0:cf:6c:50:a3:02:1c:99:e1:88:
                    40:d2:06:ca:f3:9c:4f:ee:d6:1f:35:5d:fd:0c:2d:
                    e4:19:68:62:f5:2a:cc:c9:7c:22:56:47:99:a5:5e:
                    62:42:b6:21:54:16:3f:29:29:64:72:4b:51:1b:28:
                    a2:15:ba:70:52:38:f2:b6:ed:96:a6:9f:e4:2b:fb:
                    8c:99:f9:8f:dd:ac:cf:c4:5c:95:cb:a6:40:f9:98:
                    2f:19:ab:fb:3b:3d:71:f6:a6:11:29:ed:98:60:e4:
                    60:cf:e9:67:8a:ba:4f:92:a6:d7:4e:22:a5:11:ec:
                    d3:23:77:77:b8:05:49:75:35:3d:aa:cf:13:0a:80:
                    99:c3:4d:6c:53:1b:ed:26:c7:59:47:7b:f1:2e:1a:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C7:C3:DD:1F:3A:78:C9:7F:BD:D5:89:78:0E:FE:EF:07:1E:A2:5B
            X509v3 Authority Key Identifier:
                keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:ef:49:04:37:5c:b0:c3:7f:ae:73:46:a9:e4:7f:7d:ab:
         17:55:1b:8e:ff:05:21:dc:21:34:60:fc:0a:bc:dd:cb:6a:4b:
         5f:51:7f:f2:41:d0:2e:0b:2e:83:1a:ae:7c:8e:a0:68:92:5c:
         0b:a8:9c:ef:35:f3:a5:47:bb:74:7a:01:08:e4:1e:bd:08:55:
         37:01:c8:fc:9d:9d:0d:35:4e:72:35:c4:bb:ed:31:fa:65:32:
         2e:42:db:22:3c:26:e2:29:39:89:42:5d:ef:d5:8a:32:17:12:
         79:21:31:fd:ef:bd:f3:1f:4e:e1:9f:78:b4:1d:4f:4b:d0:17:
         c0:b1:fc:18:ae:dd:bf:bf:4e:f8:78:a8:34:0b:10:46:1d:62:
         72:2b:28:04:f3:89:7e:24:df:3b:ef:99:de:a9:f0:67:72:54:
         de:27:74:d5:3c:2b:ab:cd:0f:7a:82:ff:d2:58:24:fd:ca:24:
         89:fc:1a:d1:48:7c:28:4a:d7:1c:2f:c8:8d:34:10:92:7a:2d:
         ba:1f:cd:3f:bc:f2:6e:cf:7d:58:9a:88:33:78:29:4f:ad:49:
         32:0d:56:7e:64:57:bf:fb:86:f7:92:83:5e:f9:55:71:8f:b9:
         a0:3a:a7:2d:3f:4a:ec:1f:5e:aa:3f:36:ef:56:c7:79:fd:65:
         76:13:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----