Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
File:                     ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json)
Hash identifier:          Fg6IGTv9i+aBiqK/IIYYvjLnTrq+JQOjTTagDoqyHr4=
Subject key identifier:   3D:55:F1:0C:08:02:17:FA:73:D2:C0:FE:94:08:97:02:46:6B:8C:03
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Certificate issuer:       /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial:       01962F0741132162F97AD4808161BA2D631F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: TfTonluQfmH78OzaVxkJLWOPrQc.roa (hash: o/+GwvpVj7XMHL42Lw0eZWO0sJVLD6s9aZvEqCfH3Ic=)
                          2: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: OWk4sI3aXPAkjEIleLdN3zEhQt5kC4y1XlkdfLmzOyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:41:13:21:62:f9:7a:d4:80:81:61:ba:2d:63:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=3d55f10c080217fa73d2c0fe94089702466b8c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:5b:4b:3f:df:ba:85:5e:1f:a1:ad:74:2f:
                    3e:aa:d1:fc:f8:53:f4:2c:cd:65:90:05:2e:b3:59:
                    bf:a0:c8:99:de:45:e6:0d:d1:e8:a3:21:e2:fd:91:
                    38:b0:f1:7e:88:4c:be:3d:85:d7:da:06:13:5c:cd:
                    b2:e0:e9:8f:e2:cf:da:0d:84:5e:4f:f7:c5:59:9b:
                    64:cb:1e:90:e1:16:5d:a3:88:00:a8:7c:d8:1d:23:
                    fc:0f:47:a6:b8:cf:04:57:1b:47:08:7c:cf:9c:81:
                    9e:2e:d2:30:d0:ac:9e:33:ad:f1:a0:2d:ef:d6:9c:
                    61:8a:02:97:2c:f1:81:88:04:00:df:4b:b5:07:99:
                    66:1b:03:7a:51:b4:5c:db:bd:11:24:aa:10:13:ff:
                    be:e6:0d:42:17:a8:c4:e4:84:86:85:e2:48:e6:ef:
                    09:a5:c7:8d:4a:cb:c8:1b:b6:6b:11:71:d6:3a:57:
                    84:82:d3:aa:c2:30:38:28:4c:8b:48:d4:16:e3:7e:
                    eb:b5:ac:17:7e:e4:c7:7d:cc:69:ff:51:5b:f3:8e:
                    05:e7:af:0b:8f:22:2f:36:c2:e2:d6:7b:ca:07:a0:
                    33:87:f2:dd:0a:db:df:a3:fb:15:d9:32:e5:ed:aa:
                    20:76:bb:4e:75:f0:ca:00:f8:4a:04:4f:a1:5d:2a:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:55:F1:0C:08:02:17:FA:73:D2:C0:FE:94:08:97:02:46:6B:8C:03
            X509v3 Authority Key Identifier:
                keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:d7:8c:1f:ee:42:19:f2:9d:dd:76:c3:33:fd:81:aa:2c:
         30:4a:18:5c:51:44:72:20:cc:dd:1e:34:9d:c5:54:77:5f:71:
         75:0f:48:e7:3b:7a:71:6e:2d:c8:ff:0c:62:1f:ee:d2:f0:72:
         75:51:c8:df:dc:27:dc:c3:3f:b3:c0:f8:0f:11:8a:da:d3:1c:
         04:09:8d:7a:1d:9a:24:54:f4:eb:13:e6:83:49:19:74:25:03:
         35:c3:14:fa:93:a7:78:c6:c3:25:4f:a7:7b:8f:cb:c2:c6:df:
         4e:cd:29:51:91:9a:a9:b0:42:60:8c:3c:94:3e:d4:d1:4f:49:
         d9:f9:1a:8f:e3:f1:3b:a9:4e:4a:62:0f:90:d7:4a:f7:29:df:
         ec:95:2c:4b:1c:87:c4:9e:d6:bc:ff:9c:cb:5d:5f:a7:78:ba:
         65:26:7e:4b:47:5e:7b:a8:e4:68:36:4e:12:ab:4b:67:cf:1a:
         a0:62:72:31:fd:c7:3c:6a:30:33:75:a3:da:53:cb:6a:a6:76:
         b9:74:47:4e:d0:49:c8:18:50:41:2a:61:54:9a:60:d8:61:2e:
         0a:01:a2:af:22:d5:df:ce:30:c8:40:c2:cf:1d:75:33:2a:40:
         6e:e9:6d:90:08:20:8f:83:6e:78:69:ed:a8:8e:02:49:a6:bd:
         c9:66:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----