Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File:                     O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier:          HJcomOVTAkMb1IwzNlbTuZ53xGuOS6JzHqMb/2B3FZo=
Subject key identifier:   D1:7C:02:7B:C4:D6:17:12:AC:AE:69:CB:37:8F:BA:F4:7C:A6:13:A9
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer:       /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial:       01962E997FB730AA07DE86631A72D3748C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number:          1239
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: syDf6KTOX4vSL6sraigWembj1x+/rcVk/1vv8MYSX7o=)
                          2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7f:b7:30:aa:07:de:86:63:1a:72:d3:74:8c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=d17c027bc4d61712acae69cb378fbaf47ca613a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:b5:28:39:43:34:f1:71:36:08:0f:0a:1d:
                    4d:00:a3:93:e0:a9:7b:56:0c:53:c6:a7:b1:25:62:
                    9b:8c:ba:2e:17:f6:54:48:c1:04:86:4c:dd:ea:5e:
                    51:e1:62:be:76:0e:59:b2:f4:23:3a:55:dd:72:84:
                    9c:0c:cc:76:db:80:74:70:94:51:81:d9:5f:5d:10:
                    43:94:2e:d3:9e:93:18:68:88:64:da:72:23:91:b0:
                    6e:67:44:4a:bb:0f:13:d7:5f:08:3d:35:dc:f2:93:
                    55:85:7d:47:1c:45:0d:4a:87:35:47:25:e8:c7:eb:
                    36:4c:6c:5b:89:98:da:e1:e7:f6:ae:92:8f:3e:e9:
                    1e:8d:d6:9a:e0:e6:1c:24:b1:37:d8:48:ef:cd:d1:
                    cc:4a:c6:bd:f7:78:bc:f2:91:89:52:b5:cb:28:30:
                    ad:e8:49:ff:54:23:b2:80:51:29:c7:c6:33:d3:af:
                    57:87:19:ae:27:67:a8:1f:87:82:19:5a:d5:76:c2:
                    e1:ec:f9:3d:d5:ab:8b:bd:35:3b:8c:8c:a2:78:ed:
                    17:8c:68:a0:b1:12:41:f9:85:46:7b:5b:d8:a6:55:
                    9a:34:fe:f0:63:9b:c3:1f:4e:c7:3c:e9:a3:96:cb:
                    d8:79:82:fe:e1:e3:ed:37:b2:c7:16:4d:f3:ed:87:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:02:7B:C4:D6:17:12:AC:AE:69:CB:37:8F:BA:F4:7C:A6:13:A9
            X509v3 Authority Key Identifier:
                keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:6b:af:94:85:42:f9:d0:67:95:07:a8:a5:74:ed:5c:8a:
         4b:d1:b4:b3:6b:76:7e:c6:62:d4:a2:19:b8:f3:47:1e:b8:7d:
         32:0e:68:f9:61:18:5b:f3:3c:b1:98:97:7f:66:4c:ac:d8:bb:
         b9:29:fb:8a:b9:2f:f6:2e:7f:f2:08:da:ea:ed:19:e3:46:78:
         21:fc:9b:44:51:7f:1b:23:36:74:15:ae:02:e4:f0:19:8d:b4:
         fd:84:cb:ae:85:88:4f:bd:98:4f:3c:95:c2:94:6a:61:11:b0:
         fe:d0:52:d2:b7:0c:6b:f3:26:6d:ad:fa:4d:8b:e4:52:58:28:
         7e:3f:19:02:ef:83:a5:07:5b:7a:01:6b:20:f1:99:29:94:1d:
         42:3f:9f:59:72:11:e1:a0:1f:32:40:54:db:8a:55:e1:2e:46:
         75:06:8b:c5:75:bc:f8:f5:7b:b7:35:08:52:58:d2:fe:f8:05:
         fd:f7:e6:98:f4:18:42:34:15:9c:33:04:7d:92:3c:a5:92:10:
         31:29:a5:7a:01:d6:6c:4e:da:e6:49:3a:06:6e:81:c7:50:a8:
         93:39:6d:89:a0:80:d4:4f:bf:33:09:b2:3d:54:9a:e4:e5:88:
         cb:19:22:0b:fb:20:f5:60:c8:6a:bf:d4:76:0e:aa:e1:db:35:
         c1:0e:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----