Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
File:                     OEzdzXTQQilYPSwr7tBz4AlrozU.mft (raw, json)
Hash identifier:          LlS1PIy+A5N1sWqVPptmpA8s6Kf3eeeVrYT/FtC2DqQ=
Subject key identifier:   70:C5:32:B3:1D:3F:1B:E8:45:F2:44:C1:D3:21:6D:A9:65:27:05:80
Authority key identifier: 38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
Certificate issuer:       /CN=384cddcd74d04229583d2c2beed073e0096ba335
Certificate serial:       01962E98E373936C9D8A8BF5032568D9E6A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
Manifest number:          053C
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: OEzdzXTQQilYPSwr7tBz4AlrozU.crl (hash: iVraYxPGyrD4c1s29C95SphWFfNlkgD6r21OmqICk58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e3:73:93:6c:9d:8a:8b:f5:03:25:68:d9:e6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384cddcd74d04229583d2c2beed073e0096ba335
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=70c532b31d3f1be845f244c1d3216da965270580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:e1:30:01:25:a9:22:a4:cd:63:b2:64:49:
                    8e:9f:88:ab:db:b5:a9:15:ee:6f:38:9e:8f:d1:75:
                    2f:f7:b8:ac:36:57:a5:35:ff:0e:0e:6c:83:87:9c:
                    c7:f1:68:54:95:4e:c9:a0:5f:e5:11:d9:38:93:65:
                    3b:b3:3b:09:d6:d9:a4:6f:e1:1e:e0:4b:e6:4c:87:
                    2d:dc:4e:a9:52:94:e0:c5:70:0e:ee:54:5e:22:8e:
                    4a:8a:88:21:77:05:9a:da:ee:bd:94:5b:61:d3:b2:
                    6c:fc:fc:9b:57:af:d8:ca:43:90:79:ca:7d:38:50:
                    85:74:9e:93:0a:18:1b:f9:f1:ee:63:eb:2a:2d:41:
                    cd:f8:68:92:29:d9:34:f3:06:5c:31:cb:21:0d:cd:
                    1d:b8:83:db:c9:4e:f0:c4:3d:17:a4:07:d4:83:22:
                    e0:da:c4:8b:cf:43:75:09:ad:3e:5a:e7:4c:25:66:
                    dd:b8:13:dc:8a:e6:61:99:4e:b8:35:b9:4a:4a:20:
                    72:4b:ee:74:0f:0b:89:5e:8b:f8:21:38:71:6e:cd:
                    b6:d1:30:96:27:30:2c:79:0a:a0:33:27:e8:35:65:
                    f1:c4:68:1e:96:a8:db:0c:8b:43:ed:66:49:cc:84:
                    75:33:91:24:c9:67:e6:b3:2a:ae:1c:f3:d2:da:4f:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:32:B3:1D:3F:1B:E8:45:F2:44:C1:D3:21:6D:A9:65:27:05:80
            X509v3 Authority Key Identifier:
                keyid:38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:db:78:ce:74:60:3e:6c:5e:6a:dc:34:75:1b:76:cc:58:80:
         d5:d3:b4:ba:d0:a9:14:9d:a4:d8:2c:b4:e2:8e:87:8b:a7:15:
         28:64:53:70:41:0f:d4:81:1b:58:5c:09:66:af:ae:03:95:56:
         7d:ab:cd:60:b3:41:3b:ec:e6:f0:e1:a5:ea:87:73:2f:ff:2d:
         b0:84:a5:83:0c:ba:b8:43:69:a4:05:bd:a7:18:1f:2c:0a:72:
         b2:95:b4:cd:c2:54:44:b5:59:ec:3b:19:95:27:6d:63:e6:bb:
         3b:e3:b8:e0:f1:a0:9d:c7:02:0b:b3:ff:eb:d7:8a:9e:00:db:
         bf:da:6d:fe:98:b1:01:ff:f6:ea:04:62:03:2d:ad:fd:b3:d2:
         0f:a0:78:c1:7f:8e:65:2d:4f:50:93:d8:3c:b7:88:a1:8b:e2:
         5e:98:ce:15:44:ac:ac:12:46:f1:00:81:30:a4:30:4c:20:95:
         9e:de:cf:1f:03:30:00:06:e3:c6:8b:41:26:ee:f4:25:3d:3c:
         4a:b4:f9:0f:8e:ad:8f:ab:b0:e4:6b:ec:4b:cf:38:4b:5e:6c:
         61:46:23:06:f4:26:39:1c:98:78:53:c2:99:a0:b4:de:15:94:
         a6:45:17:a9:75:90:62:c9:37:67:e9:61:85:3d:e0:a0:68:ee:
         ef:71:15:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----