Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
File:                     OTioGkQSd0HZSaNVpH88tZk4mng.mft (raw, json)
Hash identifier:          0Obh8mtipmwJF8Vl+9ImUgUV9O+iugOeVS8dG3Dpb6Q=
Subject key identifier:   51:41:F6:BE:56:36:B5:CF:9C:E0:C3:2F:3E:F3:D0:FB:21:5B:12:BA
Authority key identifier: 39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78
Certificate issuer:       /CN=3938a81a44127741d949a355a47f3cb599389a78
Certificate serial:       01962F064C1C41953AC2A986152E34A385D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft
Manifest number:          0F3D
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: OTioGkQSd0HZSaNVpH88tZk4mng.crl (hash: JE91J2uh2Cbs8ZSWhkhoyioDSspWGMuRQD38+EWLzz0=)
                          2: SyALsZDSYtge1NmYRoKzwbP5Vv8.roa (hash: rjh76rxbo7HoAknp3g/P2hhQiBIAvMqHmifN8tVtg/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4c:1c:41:95:3a:c2:a9:86:15:2e:34:a3:85:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3938a81a44127741d949a355a47f3cb599389a78
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=5141f6be5636b5cf9ce0c32f3ef3d0fb215b12ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:2a:9e:55:7e:11:6e:2d:cb:2c:1d:a8:b6:
                    6e:33:b6:b6:b0:2f:6b:64:20:a4:54:99:d5:df:f7:
                    5c:be:5e:15:dc:57:4f:73:4f:07:9e:e7:79:2e:7c:
                    65:bb:5a:c7:a5:60:1a:4c:61:59:39:1a:7a:63:65:
                    c6:7d:be:b7:e2:e2:83:2f:45:26:d3:71:d8:b4:d4:
                    bf:2b:9a:02:cc:2c:ef:fd:7b:17:5c:4c:4a:51:8c:
                    29:20:07:5c:2b:d5:94:c0:ad:20:c5:7c:d5:c1:cd:
                    9d:9a:bf:c1:0d:f7:61:ec:89:34:d0:23:59:4c:7d:
                    0b:8d:e5:54:db:a1:dd:e0:28:40:a7:b0:56:17:8f:
                    6a:d1:02:26:16:56:3a:86:5f:cb:ab:78:f4:0f:c9:
                    8e:ba:ec:5e:fa:2c:27:aa:0b:24:68:05:ce:dd:ad:
                    de:ad:53:fc:a5:0e:0d:c9:28:57:e7:29:29:58:f3:
                    d4:6d:46:02:c1:df:5f:90:11:1c:e0:c4:50:fe:57:
                    34:4d:c8:25:fd:db:3f:02:05:c3:5c:33:d6:f0:68:
                    f6:66:0d:c3:10:a4:ca:fa:0f:bb:80:f3:d2:7a:d1:
                    7b:21:64:f8:35:c8:c2:c4:a7:cc:fb:8d:fb:d2:5a:
                    c6:07:1d:93:7a:f8:35:4c:69:2c:5e:1c:34:be:71:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:F6:BE:56:36:B5:CF:9C:E0:C3:2F:3E:F3:D0:FB:21:5B:12:BA
            X509v3 Authority Key Identifier:
                keyid:39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:37:45:fb:7e:c3:0d:a9:92:80:4b:4a:2e:7d:53:9b:6e:60:
         33:12:9c:9b:ab:91:01:29:9e:4a:43:cf:6c:a2:cd:7e:5b:ad:
         4c:3f:02:4d:08:60:38:9d:d8:32:c3:a2:0b:88:27:27:0e:44:
         80:45:dd:f8:a0:45:e1:40:f9:67:46:73:70:ed:8e:39:96:cc:
         f9:d0:14:a2:b3:1a:b4:7d:71:b5:67:31:19:e9:7f:69:ad:f2:
         e5:80:ee:0c:99:58:94:fd:cc:14:e9:c7:c7:f6:97:af:06:3e:
         24:06:b9:a5:85:08:13:4e:9b:78:cb:6c:d4:ee:e2:a3:ac:90:
         1d:b4:13:a5:f0:99:cd:4a:44:03:84:6e:bc:de:38:76:f8:3a:
         46:a8:c6:63:65:d2:3e:a0:4c:df:89:94:81:70:12:2f:e7:48:
         c6:88:c4:fc:78:54:17:ea:f1:be:ce:80:e0:b9:6f:50:7c:80:
         8d:88:62:86:e1:40:a1:79:b3:1b:ca:d3:d2:2e:c6:4d:28:ba:
         9d:5d:f7:91:b8:7f:53:79:f4:37:9b:f5:07:ca:a7:c0:ae:4e:
         1a:9a:d6:9f:6d:26:a0:a6:33:a6:e3:f0:9c:05:1f:01:2f:a9:
         0d:3d:9d:c2:b8:53:57:79:e4:c8:8f:8c:ab:f4:d9:da:8a:85:
         80:a7:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----