Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
File:                     OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json)
Hash identifier:          OyDOskiuN9FI9vij+BANAi1VP2QpyuYgSM2ou6tIElY=
Subject key identifier:   53:4F:ED:DA:FC:DD:C9:FD:87:08:A0:3D:4E:2D:12:37:47:D2:16:B8
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Certificate issuer:       /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial:       01962F07183274F903505EB61F597924C39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: 35ZN+VDG/YAzr9MTrtqnmyhvn2P+bqv08Py+tGolJqA=)
                          2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:18:32:74:f9:03:50:5e:b6:1f:59:79:24:c3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39469af33611b79084f575e95b13e66550edb383
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=534feddafcddc9fd8708a03d4e2d123747d216b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:64:03:e8:6d:55:f7:50:53:09:d2:28:87:
                    f7:f6:5d:f2:43:9b:4d:03:bb:f2:16:77:ed:3a:48:
                    cb:29:9c:82:47:05:03:88:10:e8:09:ad:15:68:77:
                    71:83:57:89:79:1f:ab:49:ea:da:fd:d7:5d:fd:c3:
                    62:ad:6e:4e:d6:3e:28:2a:9a:ab:82:b1:2b:22:8f:
                    c9:cc:6e:da:b8:92:30:5d:6a:cd:3a:67:1c:47:55:
                    52:7d:5a:22:ea:c0:6b:24:ce:88:ae:3b:bc:2a:b1:
                    76:f7:5e:36:52:dd:36:7d:f4:9f:6a:b8:e3:a9:62:
                    34:ef:bb:26:84:03:b7:34:64:3f:df:00:f9:4c:59:
                    b0:8d:ce:85:eb:32:e7:d6:9c:c7:8f:0c:84:80:23:
                    3e:3a:6e:d3:7e:7d:eb:47:bb:df:b0:6f:fc:11:8a:
                    b5:bc:e1:4a:21:e1:89:24:b4:76:ad:3e:6c:a4:52:
                    32:e6:5d:3d:87:9b:e3:db:01:e9:c6:e8:34:6a:16:
                    f8:00:b4:93:b7:f1:cf:e0:10:ff:b4:53:c0:0d:a4:
                    11:f6:8a:84:6e:27:2b:19:4d:c4:de:d6:b1:5a:98:
                    36:8a:8e:c6:31:e4:4d:a9:84:c7:56:69:ae:65:de:
                    4b:5d:1d:9b:a4:7c:87:ab:3e:b3:ea:8f:bc:e1:49:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:ED:DA:FC:DD:C9:FD:87:08:A0:3D:4E:2D:12:37:47:D2:16:B8
            X509v3 Authority Key Identifier:
                keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:72:fd:f5:90:d5:33:78:09:a9:60:86:76:c1:88:b5:50:0a:
         00:b7:71:c9:34:19:87:85:a9:af:9c:26:7a:c1:e8:1a:b2:b6:
         99:d8:c9:9e:1b:d4:02:fc:85:63:c0:25:3b:59:6e:7c:06:15:
         69:4a:41:06:34:4e:2e:6b:40:aa:ab:ca:c6:bc:12:56:d8:c5:
         b9:b2:c1:88:44:f7:e8:72:45:db:9a:c0:d1:92:55:ec:a0:ac:
         66:4b:43:bc:e2:ed:51:e1:62:40:36:82:78:eb:4b:8b:18:df:
         c3:22:16:13:87:95:46:a8:91:25:97:d8:db:4c:6b:67:03:38:
         7d:88:2b:39:c8:1c:65:2d:8a:28:b4:c9:9f:94:8e:38:80:6b:
         78:2b:c7:44:83:05:5e:20:1b:c2:f0:07:b0:89:ba:eb:cd:8d:
         23:af:d8:d6:ab:8d:85:85:7d:5c:8e:29:fe:cc:3e:cf:79:9a:
         b2:0c:0a:3a:16:6b:29:e6:15:c5:06:15:0d:02:c5:1d:ef:97:
         4b:c9:ae:24:d7:52:31:da:2c:29:b4:e7:4c:db:78:1c:14:d0:
         c9:34:e3:14:53:3d:9f:77:1e:34:1a:48:e8:f0:91:96:5d:13:
         2c:1e:83:9f:6c:99:16:ea:ec:3f:cb:4a:ac:bd:71:e7:2f:51:
         26:01:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----