Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File:                     OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier:          CdEDoYcylbAPxViw344RUj4WPt5QUaqPjXpbcH8WHCI=
Subject key identifier:   7D:CD:8F:D5:1D:E5:B3:2F:44:82:48:3B:E7:16:88:AF:78:C8:E0:BD
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer:       /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial:       01962F06D4F0E6963C416A0A183C9CBC9D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number:          05CE
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=)
                          2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: mS/fOXNVPFG3Ic1+60aj2ziTluyN2pjraHqZk9VmzWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:f0:e6:96:3c:41:6a:0a:18:3c:9c:bc:9d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=7dcd8fd51de5b32f4482483be71688af78c8e0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:e6:a4:10:d8:51:cb:8c:17:bb:c5:73:8a:
                    e1:ce:93:3b:96:ec:0f:fd:16:5c:34:30:ab:31:7d:
                    7e:70:bb:13:1e:90:b3:fa:8f:c5:a4:42:a5:d0:26:
                    39:1f:a1:49:28:5a:ff:4c:2e:c1:3f:e0:20:26:7f:
                    07:64:31:dd:91:31:05:b1:46:02:a7:02:dc:c1:9c:
                    91:90:18:60:1c:e9:e8:00:2f:b7:8e:d4:c0:66:ea:
                    99:61:f5:57:c0:b9:df:b3:4d:15:13:72:b6:48:45:
                    93:99:7f:84:3e:1f:fb:c4:82:86:3c:7b:0b:e7:ee:
                    b6:cb:d5:f4:d2:00:ce:9e:a5:c9:fb:bd:45:4c:81:
                    c2:9a:33:7d:7b:58:20:f5:72:a4:51:65:2f:d4:bd:
                    7d:65:d0:e5:87:24:87:9a:e9:a4:c1:20:11:ea:89:
                    07:43:6c:06:43:26:11:b5:21:10:f6:19:db:43:de:
                    bd:2e:30:5f:01:a0:d4:a7:70:a0:4d:0b:a7:d9:2f:
                    e2:68:9a:8c:e8:91:74:3f:b3:ef:35:a0:78:fe:5d:
                    ac:c1:eb:9d:9c:c7:2d:bc:83:8d:c1:1c:2f:a2:27:
                    6d:69:5a:19:d9:21:71:fe:97:b0:fc:68:63:a4:08:
                    ad:42:17:6f:7b:02:10:2b:ac:95:f2:79:31:f0:d2:
                    65:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CD:8F:D5:1D:E5:B3:2F:44:82:48:3B:E7:16:88:AF:78:C8:E0:BD
            X509v3 Authority Key Identifier:
                keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:a7:e3:59:d8:da:d5:1b:0b:e0:b4:d6:55:04:0a:24:de:
         dc:33:3b:af:7e:f3:42:0e:59:fa:7d:69:74:45:4c:64:17:0c:
         a2:bd:68:6c:04:2c:02:8c:c5:ee:da:ad:28:07:38:bf:47:6b:
         80:a6:f1:5b:da:ee:a0:71:a3:1f:e1:b0:ed:a2:25:c6:47:62:
         93:38:6a:ca:49:60:d1:68:02:5b:52:9d:9d:3c:c9:35:da:ab:
         0b:cd:ae:6c:7c:8c:79:0e:5a:1b:15:88:86:15:56:3b:5e:b8:
         f0:ac:f8:c5:20:47:92:44:e4:18:59:52:90:e1:e9:9d:16:de:
         91:62:9f:2f:c4:75:85:4a:6b:8f:2e:df:51:c5:4c:9e:a5:4e:
         42:38:fd:e0:d9:43:a3:81:3d:a3:61:02:bb:1f:49:09:e8:40:
         9f:a9:20:ec:86:fe:6e:67:69:99:66:f0:8a:80:98:ac:01:a3:
         75:a4:36:fe:4b:51:16:7e:8a:07:92:be:9f:50:ac:ec:a1:35:
         1f:11:cf:37:45:2e:08:bc:fa:32:bf:fb:8a:15:1c:e8:e5:69:
         37:2a:c6:82:7d:cd:c3:9a:62:51:39:ff:c2:1e:8c:4b:ed:98:
         6e:e9:f2:93:ff:42:3a:f2:8e:19:62:a3:8a:79:d1:70:b7:57:
         db:ab:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----