Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File:                     OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier:          zwcfV/fvcpPOA9XvZsUwC2ZE8uahrte/ws0o2kWp6ac=
Subject key identifier:   BF:83:1A:68:D8:F4:E2:0F:F2:46:57:79:5F:FB:EB:56:EB:3A:2A:0E
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer:       /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial:       01962FAB73E00B85767568245117B3A1D3DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=)
                          2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: V5U+CYUgQ6oNB8lkQ0Jdi1O1KkBZTC5j/DxNoks0e/0=)
                          3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=)
                          4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:e0:0b:85:76:75:68:24:51:17:b3:a1:d3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=bf831a68d8f4e20ff24657795ffbeb56eb3a2a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:2f:e1:ff:66:6b:6a:5a:56:fb:82:ed:d2:
                    92:19:bc:0e:3d:2a:a9:83:8d:06:1f:b1:5d:b5:1e:
                    8b:fe:f7:09:0b:c7:87:da:46:3e:23:bc:88:9b:67:
                    51:08:74:6e:64:a4:6e:89:af:ab:3c:73:a0:2d:7c:
                    f1:19:04:e2:84:ce:13:da:7c:80:bb:1b:09:96:91:
                    bb:87:94:01:70:e1:b0:84:07:38:e8:45:b6:bd:2a:
                    4a:8b:0a:1d:92:1b:71:97:df:60:3e:47:46:15:6e:
                    65:4f:16:1b:7b:7a:b9:62:1a:df:44:49:90:bc:14:
                    4c:0b:05:25:9d:97:c2:b9:81:7a:42:cf:e6:ad:61:
                    a9:bc:b7:df:3f:87:93:a6:70:e5:9e:3b:b3:7e:79:
                    50:09:f2:ac:ef:f8:7b:31:b2:7b:e3:18:d8:61:56:
                    e5:83:39:90:93:8d:0b:e4:b8:bd:a6:23:0b:56:5e:
                    77:f8:b8:fd:17:56:01:a1:1d:82:42:39:52:be:91:
                    74:ef:17:a9:c0:53:36:c7:2a:96:1d:2f:cd:98:ff:
                    94:9d:c2:6b:9e:3a:3e:6e:c9:ea:df:2c:2d:20:b2:
                    f7:16:d7:8f:ee:ff:44:a8:03:4b:b6:68:2b:ef:35:
                    c7:d4:bf:f6:7a:4c:12:a7:a8:87:7c:de:8a:47:08:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:83:1A:68:D8:F4:E2:0F:F2:46:57:79:5F:FB:EB:56:EB:3A:2A:0E
            X509v3 Authority Key Identifier:
                keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:db:32:41:b2:ce:48:3c:51:5b:a8:8d:f6:12:bd:c7:34:e7:
         2a:e0:9f:c9:28:50:30:54:0c:80:d3:3d:83:05:30:e1:08:c2:
         1e:b7:4d:9b:6f:d7:fe:f5:25:21:cc:8e:54:fc:1f:15:55:b0:
         46:32:a5:04:41:8a:15:b1:16:29:1d:ef:48:e0:71:dd:b2:58:
         22:ef:93:81:27:f2:3a:15:5e:25:8e:3a:61:ac:f0:4b:de:fa:
         62:70:4b:65:1d:83:c3:58:16:0c:19:29:b3:0d:d0:8a:c4:97:
         08:a7:b9:23:2c:a8:1a:a6:f6:9f:05:1f:fa:e5:54:06:2e:6b:
         77:3a:e2:17:3a:65:4b:d5:bd:d8:1b:d8:a0:f6:fd:40:28:8a:
         6e:66:4c:62:3f:b1:20:d9:2f:ca:e2:05:2e:db:2b:74:6e:85:
         ad:81:33:e0:ee:12:6f:fa:7b:7c:68:2f:c9:65:6d:92:11:f3:
         9d:8a:05:4c:a1:9b:23:fe:0f:37:6d:20:51:17:a3:53:36:a0:
         41:a9:d1:12:0d:9a:5d:43:77:2b:67:01:1d:f5:dc:1e:41:1a:
         98:39:27:e2:be:82:1e:ef:fe:c3:de:e2:53:85:d9:f8:de:6d:
         d7:95:18:7f:83:4d:df:3b:df:15:b6:f9:2f:bf:c9:88:a6:96:
         01:09:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----