Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File:                     OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier:          tf282TDZHIDBHQ7bVL2vYepdzBZ+YBHWiLTwN+6XTGI=
Subject key identifier:   74:A8:F6:E7:57:73:F5:77:DF:6D:58:10:69:39:B5:FE:C9:6B:EF:86
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer:       /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial:       01962E9949523005810F3F9E25EF180A233B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number:          015E
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
                          2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: BpvE0w0y0Gno6pQS4F7AmWzeiUOPdRopUe5Z8rMLnOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:49:52:30:05:81:0f:3f:9e:25:ef:18:0a:23:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=74a8f6e75773f577df6d58106939b5fec96bef86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:14:b5:f8:d8:46:0c:ad:72:a2:5f:14:be:
                    eb:00:42:e4:98:4c:b9:c8:f5:2c:a6:15:bd:50:5c:
                    9a:90:49:a8:3c:2a:ae:14:70:a3:76:ed:a0:24:a7:
                    e8:0b:15:36:16:f3:36:05:9f:44:04:25:9f:5b:9a:
                    cb:c3:8a:01:6f:9f:ba:d0:5d:48:e1:f2:15:b7:6d:
                    9b:4c:3f:14:f1:f8:88:84:ba:45:48:ec:2b:4e:6f:
                    5c:4e:8d:48:5f:2d:8f:4d:00:d5:29:58:48:a8:0f:
                    4d:36:7b:53:84:3d:44:7f:20:a2:44:32:f1:0c:f9:
                    7d:b7:41:d2:e2:93:c5:05:7c:50:25:a9:8b:08:8b:
                    06:34:90:8e:c5:ca:e3:4a:37:f5:4c:c1:09:f2:20:
                    13:b9:7f:1b:9d:be:43:e5:4c:1f:bc:41:66:16:45:
                    2c:dd:ff:b3:c2:ed:6c:1c:ff:b6:84:42:28:eb:bf:
                    43:8b:39:ac:c2:2b:9c:da:57:b9:03:5c:f9:7c:13:
                    20:85:3b:b0:59:1b:df:7e:8d:8a:fe:ff:3a:19:74:
                    61:7a:fb:e5:30:cb:23:7d:05:42:7e:94:38:19:0a:
                    23:ce:a2:24:98:7b:c7:04:b8:84:f4:2e:e7:3c:95:
                    c6:14:13:2b:94:6e:1a:1e:9e:75:8d:91:fe:d8:a1:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:F6:E7:57:73:F5:77:DF:6D:58:10:69:39:B5:FE:C9:6B:EF:86
            X509v3 Authority Key Identifier:
                keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:bd:e2:c6:e8:00:1d:58:78:3c:b6:3e:21:4b:aa:a9:5f:
         5d:6f:ea:74:df:7f:70:72:1a:0b:47:55:7b:1a:2e:6b:ef:fa:
         99:46:30:d4:4b:01:99:7e:f1:da:21:6c:92:6a:32:3b:2a:b2:
         82:d2:62:f0:41:61:92:ff:88:db:e2:51:49:94:0b:db:b5:f3:
         78:3a:fa:7a:73:fd:7a:03:50:64:67:3f:73:c6:c6:53:1e:be:
         b5:ad:35:ac:f5:5d:dd:9a:77:81:9b:da:f1:28:71:84:7c:23:
         42:5b:8d:78:28:3c:b6:69:06:1b:5f:be:e5:43:3b:4d:21:b6:
         87:a6:41:96:38:11:15:f7:3c:39:0a:9b:7f:c6:91:fe:b2:57:
         d0:19:f7:e8:a7:c4:ac:3c:c3:23:f0:02:9d:14:16:9d:41:03:
         bb:22:59:9d:54:3e:79:c2:c7:7b:7b:ce:c6:57:51:d7:28:d3:
         79:1c:02:92:91:64:ae:bb:0e:ce:4b:b4:ed:3a:16:df:1f:2f:
         5c:fe:63:24:50:e6:1d:b3:06:0b:70:e8:e5:20:22:95:75:bf:
         2a:0b:f0:f4:15:b2:25:bb:b5:ef:4c:e1:55:13:5b:b2:fd:c2:
         9f:fe:8e:ac:d2:d0:39:ae:45:d9:28:53:64:8b:f8:af:9e:22:
         b7:76:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----