Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File:                     OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier:          unq7fKaurgvuud2CpYe+Hn59i7AUBYgKRbssLZc/RYA=
Subject key identifier:   14:9B:3D:60:86:EF:07:35:CB:7E:3B:EC:ED:DF:3D:2E:86:74:B5:48
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer:       /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial:       01962FAB3D32F8D808238D2B7B328D4DA3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: Ku/ajza2Np8GKCMkLss3lhxOFmeI109ZV4a5FGSVlJ0=)
                          2: VwXHoptHeR9mWbeRFzNgE273Y_Y.roa (hash: O7PmmfQJftPOiteORNgrKpX/pUfGsXyieeu22jdpW5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3d:32:f8:d8:08:23:8d:2b:7b:32:8d:4d:a3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=149b3d6086ef0735cb7e3beceddf3d2e8674b548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:15:85:dc:39:d8:1b:4e:7a:f5:8b:8e:46:
                    51:c1:68:cf:d0:a3:e6:bf:8f:5f:db:e6:fd:af:8d:
                    26:92:2b:b6:a5:f3:8b:4e:8b:9c:31:b0:ff:18:f4:
                    5b:85:40:95:42:82:db:70:ec:88:0d:2e:14:83:cf:
                    2e:bf:f6:36:84:9c:77:d5:63:e5:9b:ec:40:23:db:
                    4c:65:08:5f:bb:d9:0b:9b:5b:6f:ea:70:14:e6:cf:
                    1a:fb:a5:ec:1f:cb:a7:c8:07:4b:f5:38:36:73:d5:
                    95:80:de:48:fb:ef:6e:79:83:d3:34:5e:9b:43:a8:
                    a7:bc:43:c5:1a:c8:91:5a:b2:9e:e0:71:18:26:d4:
                    82:2f:77:e5:70:8d:35:be:05:03:7c:38:e5:9a:3d:
                    17:dc:c4:92:11:40:44:48:98:a9:e0:c6:4e:07:94:
                    e8:f3:d2:7a:d9:56:d6:4b:cf:46:14:56:38:f7:08:
                    fa:7e:a2:16:31:15:9a:5b:45:2f:5e:da:20:ed:3f:
                    37:66:42:aa:30:56:5c:5d:a2:75:58:c7:7a:76:cf:
                    6d:8f:6a:53:0b:d7:e6:52:b0:06:d0:be:d5:4d:d5:
                    33:cf:cf:6c:e4:2f:0c:28:1d:f1:1a:fb:26:60:c5:
                    6c:1a:6f:ef:95:39:a1:36:2a:83:33:15:1e:94:b3:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9B:3D:60:86:EF:07:35:CB:7E:3B:EC:ED:DF:3D:2E:86:74:B5:48
            X509v3 Authority Key Identifier:
                keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:67:39:85:1b:a4:25:2b:ed:4d:f7:0e:9e:cb:40:77:5e:
         68:2e:16:97:06:e5:54:f7:7e:62:ce:e0:19:da:97:f8:82:6e:
         00:be:e9:39:0e:11:30:65:40:92:70:81:22:ff:2f:f6:cd:3d:
         3c:bb:1f:c1:d5:5b:6d:7c:68:e3:4a:67:d6:bb:6f:f6:a1:f7:
         27:18:4a:e3:10:8e:30:e4:66:98:45:15:b1:48:87:19:6b:17:
         cf:29:b3:03:df:ef:c7:6b:c2:df:14:36:17:56:37:27:c1:a7:
         91:f3:71:37:6d:2f:38:9a:71:d3:63:08:d3:f3:b6:f4:a5:fd:
         30:b1:66:ce:26:3a:a3:ce:92:3f:4d:d8:2d:cb:90:f3:ba:3f:
         2d:da:8b:b3:ff:eb:5a:1b:b4:c2:95:16:fc:a1:59:b4:22:8d:
         f6:33:b0:22:39:92:99:83:3a:11:61:4e:79:42:5d:fc:da:29:
         01:f4:e6:9a:f8:88:a1:b0:61:bb:9e:89:a3:37:f3:1c:e1:3f:
         96:ac:b3:68:b2:79:a8:5c:f2:3b:85:c4:24:7f:1f:47:7e:93:
         2a:a1:37:0a:e1:40:fd:b8:b8:1a:ee:32:f9:8f:43:c9:d9:48:
         a1:62:f9:bf:a1:b0:39:b5:0f:b8:b0:ee:73:c6:3d:e5:2d:a9:
         8d:00:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----