Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File:                     O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier:          xBZFrjhVoEl1GalLY3gmuvAokCffT3yefw4dXbKy8d0=
Subject key identifier:   54:33:27:90:C9:7E:7D:66:CF:4C:66:82:E2:57:AC:FF:7E:6D:0E:6F
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer:       /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial:       01962E61872E060EF4C091C3743B2FB5E4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
                          2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: 93no7c2sQObGy3Ed8m8xV+GD91BhWJZQbKkzXLpILQs=)
                          3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:87:2e:06:0e:f4:c0:91:c3:74:3b:2f:b5:e4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=54332790c97e7d66cf4c6682e257acff7e6d0e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:da:c7:66:5b:dc:0c:65:15:55:87:05:37:
                    0e:27:02:88:5b:8f:02:88:75:85:2c:9d:6d:76:7d:
                    79:20:fb:2a:82:0a:ad:db:4e:bb:4e:f1:87:5f:be:
                    76:50:b9:43:87:df:32:25:c0:02:5f:4d:af:df:bf:
                    6e:55:cc:da:4e:2c:0c:ae:70:f0:0c:a4:a6:2f:09:
                    d9:23:7c:04:3b:c6:09:8e:d7:c5:de:5f:3f:97:72:
                    48:34:99:0a:f1:11:68:fd:27:c6:18:bf:15:f5:c1:
                    b8:dc:4b:4d:dd:dc:5a:0a:bc:e3:63:76:84:30:09:
                    e0:3b:a4:da:4b:28:c9:84:c3:9d:96:65:be:c9:31:
                    7c:d4:34:3f:0d:27:41:26:50:cb:cb:ad:61:2f:2e:
                    ca:a0:6e:a7:68:e5:a4:2f:96:54:fc:7e:9e:5c:84:
                    4d:bd:e7:08:1e:95:9b:21:4f:ea:82:be:88:91:db:
                    43:6e:2e:11:75:77:cd:b3:b1:90:f8:d5:bd:61:d7:
                    61:f9:ec:cd:e1:a9:ba:ad:5f:9d:b1:4a:d3:e3:1d:
                    60:ba:61:51:32:fe:e0:4e:b4:97:9b:15:52:5a:2e:
                    d7:56:86:3f:d3:ae:31:63:93:98:8d:f2:8d:83:6f:
                    27:0f:45:00:74:60:57:55:8e:74:83:9f:2e:99:df:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:33:27:90:C9:7E:7D:66:CF:4C:66:82:E2:57:AC:FF:7E:6D:0E:6F
            X509v3 Authority Key Identifier:
                keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fd:93:e2:4d:71:8d:7b:6d:c6:89:17:46:3a:f3:9d:51:75:
         29:f8:82:95:2d:4b:cc:ca:07:a4:40:92:3e:ee:59:51:01:be:
         a9:e3:8b:4e:c2:e6:8d:67:48:3d:ad:0f:33:36:e8:94:8b:82:
         75:a8:4b:d7:da:7c:54:0b:46:ba:4d:91:60:eb:8c:e4:c5:13:
         0d:29:d3:35:df:78:95:1c:8d:93:a2:7d:ed:74:e3:7d:ca:8a:
         35:30:60:ac:8a:62:fc:5f:97:9f:c4:a6:d3:bd:49:08:24:04:
         8d:30:12:5a:7b:9d:3a:c0:38:62:3a:57:7a:76:26:5a:85:58:
         b6:7b:a5:77:23:71:52:f4:33:a0:9f:64:c2:10:6b:f2:c5:4c:
         03:7c:f5:80:59:85:ee:42:8f:7f:93:0e:fa:ad:87:79:68:aa:
         fe:e5:04:fc:36:f0:43:43:d5:2a:99:63:da:ae:fc:4d:5f:b3:
         e9:d5:aa:b7:c9:1a:11:a8:d9:63:bf:33:04:ed:cd:d7:54:19:
         3d:e4:d0:f0:d5:7b:3a:3c:ed:88:c6:bf:fb:b7:87:8a:c4:0c:
         1e:2b:0a:56:b1:13:38:6b:aa:da:27:bb:71:c6:49:3a:c6:75:
         e7:1a:58:9d:aa:3e:d0:f6:24:c2:23:ee:f6:5b:8e:79:37:32:
         29:29:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----