Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File:                     o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier:          NBaCTb4jieriw162bANGMXvyUlGVDuIPQ7S6Pns7mM8=
Subject key identifier:   F5:CE:CE:75:14:30:0B:2D:C2:78:6B:A8:9A:D8:A9:CE:C0:4F:68:B6
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer:       /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial:       01962FAB708179D2D8A4456BEF0F6856443A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number:          1472
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: s4sJ5sVE7BY2i4txg1eVxg5zDF6gJdy6uCQkJ1oKiu0=)
                          2: pg44eaa6uLO77ZBpldSyzPpFh88.roa (hash: 0sb9vGZUz6J5OEzKPCflxf4EwPkYpEMJhVhuM9KBJfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:81:79:d2:d8:a4:45:6b:ef:0f:68:56:44:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=f5cece7514300b2dc2786ba89ad8a9cec04f68b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:c4:6b:c9:8f:da:8e:b6:47:b6:1c:c7:cd:
                    40:ea:7f:2c:9c:bd:e2:9c:45:29:12:1f:89:90:6d:
                    42:d9:f3:e8:50:e9:45:29:74:43:f3:b2:83:c0:6f:
                    7d:fa:f5:ba:51:6d:71:9c:5c:89:fa:b8:45:b4:fc:
                    ea:c6:13:2d:b2:5e:8a:46:e7:a6:66:41:b9:f7:86:
                    ae:e9:80:aa:96:db:30:a8:5f:6e:e3:0a:0f:a7:96:
                    74:33:64:f8:71:da:e0:98:33:73:ff:dc:31:b5:ad:
                    42:1f:72:82:3e:9d:63:8c:41:58:ab:b7:c1:e0:53:
                    dc:e7:32:e7:ac:fe:02:c7:5d:1d:1b:e0:a5:66:a5:
                    d4:c6:ee:39:d6:00:50:23:2f:85:88:58:fb:53:3d:
                    7e:b2:99:26:91:6e:66:b2:5d:f5:fd:1e:0a:38:0d:
                    f2:4d:38:6c:c5:88:75:d8:ea:db:10:27:46:4b:6e:
                    71:a3:f0:51:a8:09:6d:47:50:24:81:0c:0e:a0:ed:
                    d4:96:9b:aa:8a:0a:08:7c:90:39:43:3f:f7:ea:a4:
                    a0:de:5c:f6:9b:80:3b:cf:6e:90:1b:d4:d0:e8:4f:
                    3a:d0:b4:a7:75:ab:b9:bb:54:2f:1b:20:c8:77:32:
                    79:1c:19:2d:96:dc:36:e7:36:9e:86:6c:b4:40:d3:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:CE:75:14:30:0B:2D:C2:78:6B:A8:9A:D8:A9:CE:C0:4F:68:B6
            X509v3 Authority Key Identifier:
                keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f0:d8:6a:39:40:b4:00:b1:22:72:67:75:a7:16:3d:34:4a:
         49:c4:e1:d9:62:31:c2:1e:95:67:3c:b6:70:43:e9:2c:a9:fc:
         b6:9b:1e:09:4c:9e:59:65:52:65:66:f6:3a:dc:2d:38:59:4f:
         4a:04:9b:7f:c1:75:4b:f4:8d:38:b9:59:22:a1:5b:4e:22:76:
         e5:dc:ed:ab:4e:7e:b5:54:10:25:4b:a5:4f:aa:d1:59:1f:83:
         0e:a8:a5:d4:ee:87:65:f9:38:b0:d1:36:05:11:c9:57:f4:32:
         94:45:5d:ee:0a:36:c7:9c:26:0f:c7:44:1a:69:06:c9:2c:5a:
         6e:a7:ff:c6:b1:bb:e3:f5:0b:76:ea:bf:28:e2:b0:a7:61:e7:
         ba:d5:db:e8:0e:b1:16:5f:de:6c:13:1e:db:c1:97:b5:43:66:
         a6:58:51:9b:dd:70:44:da:b4:21:9a:02:7e:8d:43:eb:a2:e8:
         8c:82:29:e4:e8:e9:50:63:b0:ec:bc:38:2c:1c:31:22:2f:ba:
         a3:5b:f0:8d:fe:50:38:9f:9a:73:d5:1d:58:fb:9f:49:df:fe:
         79:a0:a4:40:48:a4:da:4e:d7:78:2d:30:e6:72:7e:4a:f2:04:
         c3:80:99:61:14:3b:cf:15:ee:ac:8d:97:fb:db:67:57:12:c0:
         82:98:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----