Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
File:                     OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft (raw, json)
Hash identifier:          NC7Tux2C62WC9ZBVbGKThhbkwg4r8mCi86mfmK09oBA=
Subject key identifier:   E5:E9:53:14:EA:05:E6:08:CA:57:0A:0A:86:B8:8B:E2:C8:E8:D3:C9
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Certificate issuer:       /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial:       01962F74B9340DD74DDF0709D99658E599D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
Manifest number:          0A31
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: KI_OzKHWNWDApgfZA8fhKRHWYNw.roa (hash: KgInzOYraW/0zKTqbj1OirpA4x6saReBh+LdfK4ZXdI=)
                          2: OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl (hash: maXMtKl+FCCuhX+bAoeKdT6ULntLa/KJh/n7DibmhJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b9:34:0d:d7:4d:df:07:09:d9:96:58:e5:99:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=e5e95314ea05e608ca570a0a86b88be2c8e8d3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:4b:49:34:fd:a8:b3:07:85:55:23:c6:5d:
                    fe:0a:28:cb:73:d0:7e:c9:e6:5b:ed:11:9a:12:56:
                    ac:4d:2c:8f:af:05:aa:b1:00:c7:20:c5:06:a5:cf:
                    97:55:7c:87:6c:b1:12:99:e0:81:3f:6e:a1:6c:6c:
                    b6:d1:c8:95:6e:4e:a9:57:2f:4a:e8:2d:f3:fb:8b:
                    fa:e8:3e:a6:ad:df:06:c3:d7:b6:58:48:95:5c:05:
                    08:15:14:1a:87:44:3a:2f:32:fb:26:3b:40:53:50:
                    6f:17:e4:66:c0:ef:aa:37:e9:43:a6:79:93:98:67:
                    ce:76:25:24:ed:07:77:c0:f4:78:8e:1c:b5:07:3e:
                    63:40:11:41:65:dd:81:f1:27:18:1e:ea:09:4d:75:
                    fd:69:e7:ad:5b:ac:61:fb:fb:3c:74:c2:84:2e:e0:
                    b4:dd:ed:58:bf:5d:69:9e:96:41:36:ff:00:55:a1:
                    9f:2a:ef:cc:94:ce:32:b9:51:1a:8f:c0:3f:9d:6a:
                    c6:e3:eb:65:4c:e3:95:31:40:5e:6c:2c:7d:98:de:
                    16:76:4a:1b:ba:a5:84:2e:77:08:cc:12:c5:b4:ef:
                    99:f6:75:6d:46:0c:79:28:1e:9f:80:23:a2:f4:af:
                    c0:75:99:14:de:fe:ab:18:8c:9a:2d:b3:88:6f:32:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:53:14:EA:05:E6:08:CA:57:0A:0A:86:B8:8B:E2:C8:E8:D3:C9
            X509v3 Authority Key Identifier:
                keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:e1:a0:ec:7b:08:e0:9d:e4:f5:82:1c:9f:ed:e2:61:cc:
         f6:be:17:20:0a:be:5c:dc:37:d8:03:26:c6:b4:f4:18:99:d2:
         97:99:88:9a:05:83:56:d5:12:6e:4c:f9:d7:a9:9b:09:8d:91:
         86:50:51:46:ed:29:1f:74:cb:42:36:17:1b:a4:ba:a9:fc:b7:
         18:64:4e:b7:35:7c:d6:30:9d:ae:4a:f5:ab:e7:b9:63:f9:b2:
         aa:46:20:da:b9:b7:79:dc:dd:f0:14:bb:c9:81:da:f3:42:8e:
         8b:b6:02:a2:33:4d:ca:6b:4d:01:df:4f:74:d9:ae:51:3d:1b:
         68:7e:ee:d5:c7:02:54:93:5c:1c:7e:8d:ee:e7:5e:48:af:14:
         d2:62:12:62:c4:5d:bb:00:47:41:06:42:7e:79:d5:8e:df:77:
         f4:07:94:66:11:cc:8f:6b:54:a6:e4:13:7b:6e:cb:43:74:6c:
         99:ec:c3:a7:71:3f:19:bc:8c:8a:05:c8:c3:c9:c5:c8:c7:1e:
         53:34:8c:e5:d2:a9:16:6f:e9:40:12:28:b1:31:6c:f5:8c:d5:
         c0:b2:20:e4:25:cf:3f:04:63:92:c1:a9:06:12:bc:b7:fc:d2:
         84:2e:ac:7e:f0:fb:80:f2:6d:c6:17:94:b0:f9:1b:37:b8:8b:
         5f:af:6d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----