Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File:                     O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier:          d8am546jxCiGyDp8tk72KofhbsjcJ4j+/9+rmdso9PE=
Subject key identifier:   88:AE:06:7F:DE:25:D1:CD:31:54:AB:D3:34:B4:1A:E4:B4:94:8F:C3
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer:       /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial:       01962FAB9711DB265571AABD0368D20C6BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number:          03AF
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: 3VTi8Px+MvT5wQHL8HI5SOmXtGmSbzxg9inRkaMggAY=)
                          2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:11:db:26:55:71:aa:bd:03:68:d2:0c:6b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=88ae067fde25d1cd3154abd334b41ae4b4948fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:29:45:b2:22:38:72:8c:b8:be:a0:a6:12:
                    25:ff:11:91:eb:87:3a:96:f1:6f:8f:36:fc:fa:46:
                    56:20:bf:e2:82:f4:07:4f:08:57:99:a3:17:39:d5:
                    24:bf:9c:25:82:c2:0e:04:08:37:d8:93:f9:5d:78:
                    50:17:b5:44:cd:70:a2:97:3c:16:26:99:8b:4c:e3:
                    a2:4f:4e:f5:4d:7c:f9:2f:50:2f:37:8a:a2:32:2a:
                    5d:b9:d7:d8:36:ac:29:af:90:bb:37:9f:8f:d6:78:
                    3d:f4:76:3f:06:44:8d:0e:54:b7:77:28:3b:24:08:
                    19:d2:a3:1c:83:5c:6e:3b:73:e7:5d:5b:b6:33:8b:
                    d7:ef:a5:d6:b4:7a:0c:87:35:1c:74:02:f5:33:23:
                    12:e7:3a:19:11:1d:73:e4:df:3c:3c:62:57:08:08:
                    a9:44:2c:67:78:75:4d:90:21:8a:ad:9c:c3:98:e9:
                    03:9c:8b:9c:21:3b:79:04:b2:cc:1b:58:11:18:59:
                    25:bd:2f:23:34:06:4d:69:72:9f:23:f8:04:c4:ab:
                    61:d6:fb:ba:9d:93:42:7d:f3:5d:de:e1:6b:d9:7d:
                    c8:74:d1:82:8d:a8:7f:6f:a7:1d:04:e1:48:5b:47:
                    97:ce:68:74:5f:d3:a2:8f:e2:48:14:86:8b:37:d2:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AE:06:7F:DE:25:D1:CD:31:54:AB:D3:34:B4:1A:E4:B4:94:8F:C3
            X509v3 Authority Key Identifier:
                keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:75:f8:36:4b:04:6f:be:0b:02:2b:0c:cd:1a:0e:e4:5c:54:
         40:89:1b:6b:da:05:2e:b0:44:34:77:55:81:92:68:45:a9:11:
         8d:8c:42:48:cb:d9:16:fd:56:3f:ab:55:ef:77:0d:6b:5b:f6:
         1c:7f:5f:13:23:5d:c0:a7:a2:85:6e:3e:fb:e1:4d:38:bc:70:
         55:58:0a:99:b9:2c:39:3b:7c:dc:59:bc:83:54:6c:f5:75:fb:
         3b:ac:99:33:82:1b:16:68:a5:ae:ac:4f:a5:d1:9a:b4:d9:27:
         fb:77:cb:22:a3:e7:15:82:57:ca:23:34:c0:05:fa:ea:ab:1a:
         8c:da:b8:e0:e9:a7:2f:07:ab:c8:2f:ac:85:d9:13:0e:ef:9f:
         1d:61:1b:b8:93:ce:c2:a4:e6:14:f3:b6:ae:7f:db:b9:b2:ab:
         96:c2:b5:15:d8:e3:e1:2e:b6:1b:52:f1:db:71:ff:5b:cc:35:
         ae:74:53:0d:44:7f:d3:53:7b:14:ae:1b:f6:05:b8:c3:ef:ed:
         34:3d:5a:ca:ec:35:33:d2:28:7e:a6:ce:bf:dd:8d:e6:43:a1:
         b2:8b:3f:3c:47:cc:25:9b:a2:be:26:92:f6:5a:49:c0:3b:78:
         7f:eb:7a:79:d4:9f:a7:b2:1a:0a:2c:88:c1:62:83:33:f4:15:
         c6:3b:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----