Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File:                     OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier:          G0JZ3ZhULuvE8lSBss34YOkh8Gj0Q9uD3Jw0D2qpPjA=
Subject key identifier:   F6:70:76:07:2B:1D:21:F2:8B:83:59:6B:B6:83:94:5B:BE:3C:96:90
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer:       /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial:       01962F068476FF4B936D5B4A426EF9AF3078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: QNxiM/hatfJXNtIYw7UcDX9oxjtOhO8TZSu8/xbHUpo=)
                          2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
                          3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:84:76:ff:4b:93:6d:5b:4a:42:6e:f9:af:30:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=f67076072b1d21f28b83596bb683945bbe3c9690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:f1:20:20:c1:ea:ac:14:b5:dc:3e:65:8e:
                    26:83:4f:fb:87:ee:cb:42:e9:c5:b3:fc:06:13:1c:
                    45:86:41:08:dc:52:1e:cd:9f:b6:01:f9:e1:79:1f:
                    da:87:80:ed:ef:74:29:49:eb:06:37:fd:fb:f9:3a:
                    13:83:fd:cf:77:40:01:93:09:f8:41:cd:36:0d:cd:
                    38:25:0f:88:6c:81:55:ad:ca:02:c5:0a:5b:44:a1:
                    a2:d1:db:7d:07:4a:eb:bb:73:d1:a9:9e:a7:6e:6d:
                    6f:b8:ba:59:bf:a8:49:20:e1:dd:81:8a:d4:d3:3b:
                    45:eb:d3:66:ac:ae:1d:eb:6e:48:02:fe:b0:c4:8e:
                    79:57:ee:36:b2:37:33:02:4c:db:cb:0a:df:5c:be:
                    e3:c1:24:ef:c1:da:86:6a:fa:44:ea:68:df:1a:95:
                    c1:e2:70:96:51:ab:89:dd:49:69:37:aa:1f:37:00:
                    07:d3:bd:ef:c6:8d:f5:5e:c1:0c:8b:6b:fb:61:13:
                    6c:7a:49:e3:cd:0b:b6:e8:e0:a9:54:4e:37:54:a0:
                    7b:d6:48:2a:f6:1d:29:51:20:df:a1:43:1b:e1:4c:
                    80:be:fd:31:98:3f:43:7e:6f:8b:ea:87:a8:38:c8:
                    7a:b9:8e:f9:14:52:90:f8:33:06:bb:fb:ae:a5:d1:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:70:76:07:2B:1D:21:F2:8B:83:59:6B:B6:83:94:5B:BE:3C:96:90
            X509v3 Authority Key Identifier:
                keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:e4:ab:ce:f8:71:46:e3:11:4b:51:93:30:54:c2:da:d0:
         d9:7b:97:98:9e:86:c2:58:53:58:5b:59:9b:8f:19:44:01:08:
         e3:b6:15:a5:4c:fa:a0:74:dd:c1:fd:09:fd:92:21:4b:bc:c6:
         b5:4a:99:24:22:42:f0:da:ca:27:b8:7c:46:b9:f7:ea:62:91:
         91:49:dd:95:97:57:e6:bd:8a:83:a4:46:54:de:03:0a:7a:e3:
         75:41:9e:89:e5:22:f1:06:26:3c:f0:69:13:d6:db:3a:a7:34:
         e5:ab:c9:39:7b:09:f3:1c:bd:45:c6:fe:cf:bb:6c:c6:80:f8:
         48:55:91:1a:50:be:01:26:0a:5a:1d:4f:f5:4c:e6:c5:5c:e5:
         2b:07:69:e7:d5:4e:21:67:8d:68:ab:d7:9d:9a:10:5b:21:87:
         1e:4b:26:e2:90:32:8f:80:94:ce:ae:70:b3:02:71:a9:25:57:
         27:ad:fa:c1:a7:dc:77:2f:18:d9:bd:3a:fd:d4:1a:22:f4:49:
         94:a9:09:53:f0:30:8d:c5:16:4a:31:06:c8:88:06:cc:85:f8:
         ba:95:39:1c:35:07:ff:5a:ef:23:dc:c3:7e:42:ab:5c:0d:64:
         da:fc:0e:2c:fb:da:8b:0f:32:81:c0:d9:7d:63:ae:0d:97:9d:
         a4:9c:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----