Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File:                     OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier:          S0TyQ433trOilUemA0W2i/w1RAfzGtaxCRjhHC06F2E=
Subject key identifier:   08:CD:32:20:98:D9:78:B4:DD:4D:1F:55:8F:D5:44:FB:C9:62:B1:6F
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer:       /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial:       01962E2B2B6CE1617188D51E9D23326D3EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number:          0229
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: k9HZW7iJAgkj3A0N2XdmXrzYdgRBblrpJAzo49PJShE=)
                          2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:6c:e1:61:71:88:d5:1e:9d:23:32:6d:3e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=08cd322098d978b4dd4d1f558fd544fbc962b16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:7c:44:2e:43:2f:4d:f8:5d:63:81:50:ca:
                    99:ce:49:6e:e8:b3:90:a2:26:af:17:e7:fa:81:79:
                    86:aa:94:ee:dd:a3:6e:ea:e2:85:2c:90:53:27:3d:
                    64:8e:c9:10:29:ec:ad:70:bf:72:22:95:57:c3:a3:
                    00:0e:df:e5:7a:ac:2d:10:ad:7e:7d:8d:f0:b8:a3:
                    f9:df:07:21:99:5e:4e:c4:7f:7c:16:2c:9e:eb:ff:
                    3c:5b:85:43:f5:50:b7:f1:e9:18:da:1d:d5:b7:d1:
                    ce:d9:ba:1a:72:24:99:f0:fb:6b:8a:87:6c:54:b7:
                    9e:4f:18:ed:c0:71:f0:c7:5d:79:a5:48:53:66:1e:
                    56:c2:10:7f:ba:4c:b3:07:3e:66:db:12:de:70:f4:
                    d9:a1:1e:5f:cc:26:58:dd:db:b7:a7:ab:30:e1:77:
                    ae:6d:c1:0e:bf:ee:a3:f4:a8:4f:36:2c:47:fe:9f:
                    31:1b:32:ee:4c:18:ad:16:25:f0:ea:e5:a2:eb:07:
                    fd:58:8f:5c:b6:49:fe:7e:cc:fb:bf:e6:08:de:3b:
                    68:0a:7f:5c:77:c5:5d:21:00:5a:da:c0:5e:08:94:
                    30:fc:1a:2e:57:52:2f:1f:e5:11:0d:81:39:29:52:
                    e6:f5:8f:f8:66:ff:4a:97:74:86:e2:9e:8e:d1:d3:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:32:20:98:D9:78:B4:DD:4D:1F:55:8F:D5:44:FB:C9:62:B1:6F
            X509v3 Authority Key Identifier:
                keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:99:b7:f0:6b:6d:21:24:71:26:ad:82:eb:6d:05:48:0f:
         92:27:13:d4:6d:15:ca:30:16:77:54:b5:7c:4e:97:23:0e:3d:
         f5:b2:5b:99:bc:1e:7f:07:ee:de:33:6b:82:10:3d:37:67:66:
         d2:58:97:b0:d3:ee:34:67:80:ed:cd:7f:a8:e3:36:96:8d:7a:
         b5:2c:f2:32:f8:57:2b:cc:51:81:5f:dd:c7:40:50:9e:82:11:
         10:aa:46:c5:7d:3e:ee:00:43:5a:78:45:91:4f:34:0c:a3:36:
         88:8f:f8:6d:33:1f:5e:c4:5e:08:fa:ca:7c:b3:9a:14:b6:a2:
         c7:92:4e:e6:6b:72:6e:2a:56:92:04:c8:98:aa:00:02:c0:f9:
         92:ec:fb:53:3a:8d:b0:50:82:e6:97:13:b9:6c:8a:b1:01:ec:
         a3:57:72:6d:81:f3:d9:fa:92:be:24:90:cf:0d:45:d7:d4:5d:
         07:fd:55:55:db:18:73:5f:1d:6b:3f:73:8d:fa:b7:6d:2e:21:
         00:6d:93:11:c6:d9:2d:75:65:0d:6a:f5:68:4b:11:48:45:26:
         bf:0f:07:5e:c2:56:22:db:33:68:68:77:5f:9f:e7:28:18:83:
         fb:37:b1:4f:5d:ba:20:4b:94:bd:85:75:32:d0:57:2d:3d:d2:
         66:28:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----