Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File:                     otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier:          IQSRz8JQKHZYXsIIc9NXV4+/7VTck+FPoTibPp1Zu0M=
Subject key identifier:   44:A1:56:5E:02:21:B6:B0:C7:32:7E:FE:AE:B9:DB:9F:C3:D7:5E:3C
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer:       /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial:       01962F74E7375A2386D4802B48B567FD33C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
                          2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
                          3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
                          4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: D2CzAvTr5Z11/0wMneUqSNivmGQO2LxSdSAe+0dgQEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e7:37:5a:23:86:d4:80:2b:48:b5:67:fd:33:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=44a1565e0221b6b0c7327efeaeb9db9fc3d75e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:e4:ea:48:60:b2:33:e4:62:0d:d6:2d:22:
                    6f:c1:6f:37:28:35:fb:02:0b:c9:ae:25:b0:25:52:
                    bc:96:31:78:57:a8:53:00:8c:de:fa:79:e0:4d:58:
                    05:66:76:b2:71:d3:80:56:42:2e:ad:a3:30:6c:f5:
                    d0:50:01:67:2c:ca:cd:45:d9:30:8d:eb:74:04:82:
                    4c:ba:9d:ef:22:65:ea:5d:2e:93:29:c9:98:72:87:
                    68:cf:fe:70:c4:0f:e9:71:2e:c2:0e:ac:22:56:89:
                    ad:5c:97:39:5b:28:13:e0:04:c6:6d:53:e6:0b:a2:
                    71:d8:97:f7:3d:c5:89:f2:94:76:b6:2e:cd:be:c8:
                    51:e4:60:13:ff:b3:15:03:40:a3:60:3d:44:10:21:
                    05:56:e2:2c:d6:82:da:22:0a:1e:4f:35:da:01:4a:
                    ff:29:64:d8:bf:45:74:de:7d:a1:40:c0:e9:b2:d2:
                    04:2f:56:20:0f:1c:ab:b6:df:86:3c:6f:5c:74:0f:
                    0d:ed:e2:3f:32:7f:30:5b:f1:28:58:d1:a6:82:6a:
                    b5:b5:5f:11:6b:21:a8:54:de:40:ff:6d:85:c1:b5:
                    c0:e1:10:a4:37:e8:d9:6b:be:3d:3e:a0:39:a6:5a:
                    fe:da:1e:e6:72:3f:b6:e0:54:c5:0a:8a:63:ee:b9:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:56:5E:02:21:B6:B0:C7:32:7E:FE:AE:B9:DB:9F:C3:D7:5E:3C
            X509v3 Authority Key Identifier:
                keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2f:37:ea:d1:9b:ea:ed:89:5c:cd:66:17:db:f7:00:9a:7d:
         d9:a6:aa:b7:47:24:39:aa:17:01:1d:f4:a7:94:57:f0:36:1e:
         ad:03:b3:f7:3c:b6:fd:d7:8e:bd:12:43:7f:a4:db:a7:02:5f:
         90:15:4e:da:b6:43:ff:58:05:4b:f5:2f:a8:3d:21:0c:3b:c2:
         09:e0:1d:43:e0:8c:8f:d6:f3:87:6d:fd:95:04:68:ca:b2:2f:
         22:52:9b:05:9b:f0:8a:85:58:3b:f3:f2:6d:59:ff:a2:1f:16:
         cc:bd:c2:ac:99:85:9a:b6:a6:fc:0a:91:0a:fc:4e:40:9f:d1:
         91:9f:f6:36:0e:83:ed:7c:b8:47:37:22:3b:78:12:c1:31:b7:
         4b:7b:2d:54:8b:b5:88:4f:ee:f3:4d:27:38:38:0e:87:da:9b:
         e2:a1:3a:f3:e3:c8:a9:a6:7e:aa:75:05:9e:05:76:7c:16:81:
         4a:4e:b0:0a:44:28:d8:76:1a:b1:a3:7e:26:e8:f5:cf:ed:c6:
         d3:1a:80:7f:81:99:63:cd:5f:be:9c:16:e6:d9:31:19:ea:2e:
         d3:6b:f6:a5:e8:b4:69:1a:45:f8:b7:78:1e:ba:6f:e2:1d:0d:
         5d:15:f4:36:41:0c:5d:a2:c7:40:76:63:bf:e8:da:05:d4:b4:
         49:63:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----