Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft
File:                     OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft (raw, json)
Hash identifier:          7dtFioSXKxgbpz85sZgJz+/Z7T83d8F/mfNOqxdQIoY=
Subject key identifier:   9B:CC:58:11:A4:36:38:0D:95:75:56:D4:37:6A:BC:48:A3:2F:10:C7
Authority key identifier: 38:A1:9E:64:0D:E1:F4:52:A7:DC:4A:BE:78:6A:A5:81:34:29:27:B1
Certificate issuer:       /CN=38a19e640de1f452a7dc4abe786aa581342927b1
Certificate serial:       01962E989778E70501547706BAAA8411D214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft
Manifest number:          042A
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.crl (hash: PPn9Y6kVHELJmD+EmjAnaaS8o+t3eRaYvtwWSVlYLTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:97:78:e7:05:01:54:77:06:ba:aa:84:11:d2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a19e640de1f452a7dc4abe786aa581342927b1
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=9bcc5811a436380d957556d4376abc48a32f10c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:0b:39:66:1f:47:dc:7e:2d:b1:57:4b:e6:
                    d1:44:aa:41:01:1c:af:81:b4:e9:96:51:27:bf:35:
                    aa:7e:74:2c:a2:29:4c:ab:a7:ef:f2:41:21:0d:a1:
                    1e:28:00:a7:f2:54:8d:7f:26:62:41:0f:80:fa:e1:
                    c8:88:77:32:ce:f2:1b:1c:f9:fe:a4:92:8a:35:62:
                    91:1f:dd:68:34:0a:f0:1a:f4:8c:a9:1d:47:94:0b:
                    5a:35:f8:9a:9a:23:ac:17:97:47:f3:c4:04:15:79:
                    4f:94:ea:c7:5b:66:7e:09:3a:93:c8:1c:89:41:db:
                    06:5b:de:ad:a6:b5:8a:20:d7:ca:8d:17:ca:ca:63:
                    7b:a6:91:6d:f1:46:1a:c5:78:31:0f:9f:64:6d:51:
                    fb:dd:1b:58:69:52:9f:b5:0b:46:6f:5e:1f:30:e5:
                    be:db:b1:eb:47:67:c4:2a:83:a9:94:76:7e:a1:17:
                    b6:09:9c:5b:7d:59:08:62:3a:fd:33:6c:f9:9f:cb:
                    06:0e:2d:bb:24:d6:27:1a:f4:18:1c:18:87:e9:5a:
                    5a:7c:5a:7a:ae:4a:55:98:b3:5e:af:59:c6:81:b0:
                    48:b4:5d:8e:a1:f8:c4:35:67:01:b9:30:4a:e4:32:
                    a2:bc:87:31:4e:48:70:8d:7d:4c:2b:93:a4:b5:27:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CC:58:11:A4:36:38:0D:95:75:56:D4:37:6A:BC:48:A3:2F:10:C7
            X509v3 Authority Key Identifier:
                keyid:38:A1:9E:64:0D:E1:F4:52:A7:DC:4A:BE:78:6A:A5:81:34:29:27:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c4:d7:b1:f5:b2:e5:7a:4f:23:04:5e:2d:07:65:aa:28:a3:
         c1:4c:54:93:e3:49:12:f4:48:0b:c7:62:09:d9:28:6a:7d:61:
         54:8e:26:a3:ee:51:a3:b0:7e:78:70:de:c9:ca:cb:e7:c5:9b:
         23:20:34:7e:7a:29:9c:53:ee:db:f5:bf:2c:38:86:0d:ee:de:
         4f:81:0b:83:b9:c8:58:e2:ae:21:e9:dd:63:8f:ac:1b:9b:be:
         10:8f:9c:84:eb:02:f3:f5:98:55:68:42:e2:62:68:b7:d8:c4:
         37:e2:df:99:34:db:32:39:d3:6e:a8:97:16:e1:95:f7:9c:9c:
         3b:b6:cb:3d:dd:94:b4:dd:eb:71:f0:79:5f:5e:26:2a:79:5d:
         a0:a9:c5:23:1a:82:f6:e1:a3:ff:c7:0b:29:70:17:65:9d:b6:
         42:af:2c:e9:13:13:52:5c:5d:12:35:b8:1f:00:6e:5f:e0:04:
         4b:61:7f:25:45:9b:cb:6d:d2:f4:b3:ef:2e:58:04:8f:d5:fb:
         33:2e:fa:a6:3a:c0:f9:c2:af:66:45:6e:71:69:99:76:c8:76:
         5f:e6:49:71:91:6b:e8:0d:2b:6b:f9:74:42:ba:63:f9:5c:ec:
         a7:9f:4c:e5:22:ca:72:db:b2:5d:38:7c:16:d0:6a:ae:40:02:
         e1:24:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----