Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File:                     t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier:          12jbib1Vd68N5DUeFcA462qB/cHctUd0UQ/9l6wA04Q=
Subject key identifier:   75:B7:88:60:48:7C:1F:1B:D6:2B:D6:C7:DD:13:38:CA:DA:B6:91:4F
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer:       /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial:       01962F7427859D322D5E01AD5C483FB2A6B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number:          0C73
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=)
                          2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: Aw9pjur+mJGjUzbwLt5ZmFLquGMGoemYlZ609OsRzww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:27:85:9d:32:2d:5e:01:ad:5c:48:3f:b2:a6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=75b78860487c1f1bd62bd6c7dd1338cadab6914f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6a:0c:6f:5d:e4:bd:c8:9d:dd:f1:3d:e7:d0:
                    94:ad:97:7d:d4:c4:fd:40:25:7a:d7:d1:8d:29:62:
                    f4:a5:7b:a8:53:0f:40:bf:45:fd:9b:d5:fe:06:6a:
                    98:c9:53:c2:eb:24:3a:a4:16:fa:91:48:ca:35:4c:
                    0a:b8:fd:18:34:01:69:59:3d:8f:3b:09:71:2e:11:
                    ad:14:aa:b8:fe:93:60:9b:d9:9b:1f:90:93:7a:bb:
                    5e:ad:5b:c8:25:83:22:7d:b1:0b:ff:b5:c1:86:fa:
                    22:32:2e:75:1f:29:25:1c:98:b6:f6:1f:33:5f:34:
                    38:55:67:ce:86:5a:95:7c:5b:fb:01:bc:42:3b:33:
                    0b:b4:88:d8:b9:74:08:d9:f8:b8:cf:c0:cb:f9:62:
                    b0:d7:6c:ce:2a:63:df:8c:81:1d:d3:5f:15:c8:88:
                    96:1d:34:01:09:11:89:0a:30:71:87:c1:d2:f7:ee:
                    47:a2:93:78:28:49:22:bf:07:84:ce:20:7c:1a:38:
                    b6:07:4e:ab:ca:3a:b4:8b:2c:3c:42:2b:34:9a:25:
                    80:12:92:e7:6d:8c:d0:11:63:e8:ec:ee:b5:51:0d:
                    4f:89:e2:a0:37:4b:97:f7:ef:ff:d5:2c:57:8a:30:
                    ab:84:6e:df:99:42:d2:af:07:b2:84:4b:84:71:9c:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B7:88:60:48:7C:1F:1B:D6:2B:D6:C7:DD:13:38:CA:DA:B6:91:4F
            X509v3 Authority Key Identifier:
                keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:08:88:b8:fb:b3:52:1e:57:7e:68:a7:0d:73:6b:b2:f6:
         00:a4:1d:fd:3b:d6:bc:df:64:32:d1:0b:0a:e7:a4:df:74:72:
         7e:24:4f:4f:58:02:3e:bd:b5:6b:19:93:13:78:4e:a3:db:7c:
         68:be:4b:49:60:59:64:10:15:42:e1:e3:53:0c:70:c5:7c:43:
         90:29:f0:56:2e:e1:65:35:3c:f0:61:49:b2:22:7e:ef:5d:f7:
         21:d3:8e:ea:fd:cd:2a:99:40:08:a0:57:10:11:bb:6e:eb:22:
         aa:0b:c0:00:44:22:57:12:9f:10:77:6d:6d:88:74:ed:dc:5f:
         c1:2a:99:52:bc:1a:0b:9f:09:71:35:a1:a1:9a:88:54:32:26:
         a4:c7:b2:d5:20:da:c6:9d:89:0e:17:4f:e7:9c:7e:fd:4c:ea:
         f2:5a:7f:b9:50:2a:b4:2b:ea:1e:41:a1:d3:e4:8e:e4:d1:52:
         78:1e:40:b6:7e:11:9f:8a:36:47:4c:35:5b:d9:ed:39:4d:73:
         71:f6:42:d0:26:bb:a9:d1:6c:5c:30:dd:5d:88:93:8e:6c:e0:
         2c:dc:cd:ac:ae:a2:52:e6:7f:d9:59:69:ab:74:a9:14:85:cd:
         9d:b5:16:62:7b:e1:80:72:dc:d9:c3:e0:03:a4:06:48:ea:96:
         ee:90:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----