Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File:                     OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier:          wEIsgBt8x8fcIJPZSJSyjSVrTL73f+mXQfSAoc1MqfQ=
Subject key identifier:   42:0B:68:1E:9B:31:BB:82:C0:4F:25:40:D0:F9:E3:4F:26:1D:21:78
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer:       /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial:       01962F3D6C320CB51AED9AB3496852E0F7FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa (hash: DBtQlC6QblgPpVW+sAN+YH267kvW3kiRyXFujtkor/8=)
                          2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: bhtWHt8/bYc8LBKMBUBYjacijnSK2cMd3qwI7D5DOeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:32:0c:b5:1a:ed:9a:b3:49:68:52:e0:f7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=420b681e9b31bb82c04f2540d0f9e34f261d2178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:8b:c8:b2:dd:38:d4:52:ef:29:5f:63:a0:
                    d6:18:ca:f9:ae:66:37:d3:a4:fc:6d:75:bf:9d:7b:
                    d7:d8:3f:01:b0:84:1d:a4:39:3b:f0:1e:bd:1c:e8:
                    a0:aa:f7:ca:81:69:0c:5f:23:47:1a:8d:8c:d2:9e:
                    f7:93:95:c7:67:5a:e9:57:4c:24:84:63:b4:bd:b2:
                    10:d4:ac:d4:66:8e:04:83:2c:e1:8b:1a:52:35:95:
                    cb:a8:b7:67:c7:be:56:40:06:1d:6a:10:38:96:3e:
                    d1:1c:06:6d:91:57:1a:d2:ea:84:8f:02:c4:21:02:
                    5a:e6:4a:de:f1:76:77:f7:a6:ea:5a:c7:c7:02:c6:
                    10:28:05:5d:67:89:a4:14:12:19:2b:29:39:15:2a:
                    4e:9d:b9:a6:c1:89:e9:e1:37:5d:0f:51:24:fe:f9:
                    1f:e2:bb:42:6a:f8:52:c9:72:03:9c:de:7a:ef:7e:
                    eb:75:81:c1:08:f2:37:8d:93:58:45:bc:5f:2a:ed:
                    99:ac:df:ea:d7:8b:05:a6:67:52:42:91:49:77:e7:
                    3c:ed:1c:ba:bf:df:26:fb:9d:68:fb:ad:58:b5:02:
                    a5:5f:5a:39:9e:f9:f6:a2:01:93:f2:0f:33:6b:98:
                    6a:a7:77:9b:5e:7f:67:c5:a6:c0:ca:3d:0e:8b:5a:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0B:68:1E:9B:31:BB:82:C0:4F:25:40:D0:F9:E3:4F:26:1D:21:78
            X509v3 Authority Key Identifier:
                keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4e:8d:4d:12:21:bd:d7:9c:94:06:0b:f8:d0:a9:5e:b9:d9:
         c3:31:f2:2f:16:65:20:a8:c0:c4:7c:8b:4c:13:9a:a6:3c:78:
         05:0f:4e:e9:e0:01:83:0d:fa:d6:1b:7e:41:75:13:6f:c9:4a:
         83:75:53:57:7f:a3:e0:97:4c:90:a1:3c:c2:b5:1e:0a:ba:b4:
         2b:64:3f:c8:f0:5a:62:c1:cb:a8:99:7e:15:5e:df:d4:90:a4:
         c5:d1:75:34:5f:f4:91:ba:41:d0:3d:7f:36:fa:db:95:d1:26:
         db:de:48:ef:f4:07:4f:b6:52:cd:c4:7e:81:2c:0d:6b:43:cb:
         6a:4a:90:7a:93:44:18:3e:04:a0:0f:f0:74:66:2f:17:51:cb:
         b6:11:6f:d1:b8:61:76:6f:31:42:ab:19:c2:d6:c6:0c:95:87:
         4b:35:6d:a0:3a:9a:9e:ce:2d:65:c4:b7:a7:5c:a0:3b:5a:78:
         cb:43:24:ce:72:be:18:cb:5e:7b:53:98:93:8e:ba:7e:79:7c:
         89:33:c7:d0:f9:18:7f:3f:5a:48:3d:64:98:fa:f4:1f:bd:7d:
         47:cc:59:2e:59:98:f2:37:5b:45:a8:cc:51:28:b8:41:20:bd:
         fe:b9:c8:15:5f:51:9f:49:5a:6e:e1:d6:c8:b5:72:07:a8:35:
         10:6a:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----