Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File:                     O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier:          S/JAhzE6guTbMkCUldoj+ieY2MgrgW01LltqRwOo3QQ=
Subject key identifier:   DB:A5:25:82:CD:3C:C6:B2:6A:7D:87:4E:6A:17:D2:96:0A:81:54:36
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer:       /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial:       01962E2B3277FE426466EFA119E7954F4F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number:          0979
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: zrfewyvEHKFnhXDWmuc2NDuvqs1G7+o4P7M5pr56ExM=)
                          2: iKF-Q9PfXOLXW4CJahZRW_VogkE.roa (hash: +qqtPKI3qMehNAw49JzdFyEOoExudNvSKeInlgLAy1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:32:77:fe:42:64:66:ef:a1:19:e7:95:4f:4f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=dba52582cd3cc6b26a7d874e6a17d2960a815436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:f5:91:bf:87:95:e3:fc:43:e2:d9:31:e8:
                    e0:26:f8:f7:f2:48:fa:f4:36:38:aa:18:3a:56:e0:
                    2a:9b:22:1e:ee:5e:28:c0:a1:f8:c4:25:d3:7e:4d:
                    51:62:97:38:d2:ac:2a:f6:81:d6:49:e8:96:14:44:
                    62:24:46:67:65:db:88:33:ac:dd:33:22:a4:56:af:
                    dc:74:7d:55:1c:57:a5:7d:89:b5:62:ba:58:52:e9:
                    c8:ff:a2:9c:74:6a:99:20:01:0d:fe:22:47:68:b8:
                    17:25:9d:6a:e4:72:ce:c2:b3:62:03:2e:1c:dc:7e:
                    10:64:54:88:bc:7e:0f:b9:49:7d:7a:b0:5d:97:79:
                    f5:1c:9a:f2:00:7d:0c:56:69:5e:e5:cc:ef:f6:f9:
                    8a:03:3f:73:dd:4f:0b:93:bd:4f:f1:23:98:6a:ae:
                    fb:32:55:cb:ba:b7:5c:8a:8b:56:34:75:00:69:25:
                    b2:29:ef:d4:3d:fe:4c:6e:45:f6:2f:9b:de:98:5b:
                    83:05:5f:c4:a3:2b:61:f9:7f:80:3c:e6:7d:f2:a2:
                    35:05:a3:04:29:95:d2:be:ca:27:6d:de:25:11:90:
                    39:da:43:43:3d:49:84:a9:7a:f1:82:b1:5d:b6:80:
                    c1:d8:53:58:b7:3d:b8:70:bc:b2:5e:1d:05:d8:c6:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:25:82:CD:3C:C6:B2:6A:7D:87:4E:6A:17:D2:96:0A:81:54:36
            X509v3 Authority Key Identifier:
                keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e5:4c:d1:0c:47:11:6d:0b:35:9f:ab:50:45:be:9a:07:dd:
         06:28:d7:65:6a:f9:ed:2e:9b:6d:6b:0d:a5:9f:79:a7:a0:86:
         09:9d:68:ca:bf:76:42:4f:5a:94:b6:1e:3f:e9:79:fa:64:8e:
         c9:92:0b:e2:e6:25:48:5b:ad:17:12:40:db:47:cc:b5:03:d4:
         ca:43:4c:66:ce:4d:6d:ab:8c:56:f7:63:11:e9:bf:81:5a:c6:
         ba:66:28:8e:2c:4e:f5:81:00:3b:89:56:46:90:d9:30:0b:0f:
         5d:44:c1:3d:dd:e3:82:79:81:d4:75:a5:05:36:ad:47:d0:da:
         0f:4f:94:dd:9b:52:e8:28:4a:01:29:f2:03:43:83:03:38:41:
         5e:f6:2b:96:2f:8b:49:cf:fc:ef:9d:17:ed:40:f3:9f:95:6f:
         85:96:b0:04:3f:8a:ae:23:dd:2b:e3:3d:a6:6c:18:df:f7:55:
         c8:31:28:8e:7d:1e:28:27:f4:9e:9c:6f:b2:5b:b9:e0:15:c2:
         d5:fb:55:6e:87:7b:d4:82:70:72:34:c5:69:9a:56:c8:17:10:
         ce:2d:b1:b7:24:01:5b:c5:de:81:fe:08:2f:a1:d1:02:5f:30:
         5b:b3:5f:de:e4:4c:78:10:a9:75:a4:c7:63:83:5d:bf:40:de:
         05:df:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----