Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File:                     1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier:          bprHX9wSC06HUTcsuCUhLEsXTKbs96aQuGfvxw9Kluw=
Subject key identifier:   C3:B5:04:85:97:BD:97:F0:AB:B1:43:6F:FE:F0:EA:AF:A7:F0:53:34
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer:       /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial:       01962ECFB9967E3ECCBA27F5ED4CCCCF5C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number:          0AE9
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: cgW05dLjCCcZZqudQarQNgJKas43/piBMRKjDfMSZdo=)
                          2: iN4kY7sCfzKOl-coUiFvOhD6wg4.roa (hash: ZI3B1VaDQ0JfOlPoqiW79rOHU3ymg8mbnEbUM636Uvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b9:96:7e:3e:cc:ba:27:f5:ed:4c:cc:cf:5c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=c3b5048597bd97f0abb1436ffef0eaafa7f05334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:4d:0c:a0:0f:8f:4c:66:0e:94:39:cd:a4:
                    f5:a9:ac:52:2e:32:b6:45:d8:7b:b6:07:80:bd:2a:
                    b2:d2:2b:0b:87:c1:3f:f0:69:7d:39:2c:d0:11:d1:
                    96:60:88:a7:a7:b8:b5:60:5b:33:7e:10:5b:ad:d3:
                    f6:26:3a:ae:79:71:3a:1b:5e:32:c3:ca:74:1a:a4:
                    03:ba:14:0a:81:e2:16:49:c2:70:bf:ea:4e:54:ff:
                    e1:2a:2b:b9:df:2b:0f:17:2b:16:dd:fd:0b:66:4e:
                    a5:42:6a:80:90:34:4f:77:03:ef:a7:b6:ea:1a:9e:
                    af:1f:62:76:78:0c:ac:c7:1f:86:de:dc:7a:42:24:
                    69:41:f0:88:ff:1c:57:0a:27:30:91:39:f4:57:52:
                    73:f7:14:0a:fc:39:b9:a7:e5:82:0a:8f:a7:42:a4:
                    48:9d:8c:c4:50:ce:68:a3:32:55:02:35:75:d4:2e:
                    7e:16:82:7b:1b:2a:50:62:19:a7:00:07:ba:9c:51:
                    1c:2b:b9:1b:ca:15:1c:ab:28:cf:05:cb:b1:3e:1e:
                    74:44:34:8e:35:31:56:8f:9d:7c:b1:2c:f5:ec:cc:
                    59:59:aa:2a:48:0a:30:f0:0f:83:7b:0b:c6:11:ae:
                    e5:a6:e0:a2:87:36:fb:ed:b3:c0:48:50:6b:92:07:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B5:04:85:97:BD:97:F0:AB:B1:43:6F:FE:F0:EA:AF:A7:F0:53:34
            X509v3 Authority Key Identifier:
                keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:38:cf:b1:06:85:27:3a:52:d0:9f:d2:62:0a:6f:1b:31:3a:
         eb:8d:0d:8c:1d:32:ad:83:26:03:36:c6:33:ad:7f:06:ee:aa:
         1b:66:b7:4c:bb:cd:b5:15:81:4f:b8:53:d2:bc:5a:f5:24:bc:
         1d:c4:0f:f7:41:97:43:70:18:29:95:5f:93:d6:5a:0b:78:f1:
         eb:f4:db:ef:fb:dc:36:37:ed:f5:b7:42:31:d1:ce:69:f1:0e:
         95:5c:30:55:ca:1a:80:c5:8c:3c:d6:fe:20:54:4c:99:18:8f:
         eb:45:8c:43:6e:13:1a:39:6d:88:69:2f:b2:71:92:8d:da:8d:
         e1:e3:c5:f9:b8:85:ce:fb:e1:56:7c:15:c4:03:d4:aa:48:48:
         62:12:3f:b8:43:9c:28:a7:02:c9:47:71:00:d1:5c:0e:8a:af:
         8a:0e:e3:9e:f7:47:bd:33:62:e9:c5:5e:d2:64:28:8e:b9:d6:
         f8:b7:55:39:48:e7:c7:5f:f6:4e:33:02:8e:1d:7a:d0:e2:73:
         6b:4b:d6:98:0b:bb:6e:3d:e4:b4:a9:cb:79:fe:bb:b1:9e:7f:
         0e:cc:dd:79:b2:df:4b:49:88:32:a0:76:12:bc:50:94:35:ee:
         39:3c:40:6d:04:21:66:e2:0f:97:03:b7:60:d6:b9:ca:60:25:
         11:a5:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----