Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
File:                     otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json)
Hash identifier:          uoOvd3uRmQcx6HMDht7txoccdnhOyUDy339u2nTlQK8=
Subject key identifier:   69:48:4C:17:0F:3E:D9:21:09:03:9C:29:8D:E3:56:8B:83:E0:BE:85
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Certificate issuer:       /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial:       01962F0640D95FBDAE2E9E486621CC2E5F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: w1z7bVpx2nul1bPAVGCcOkmTknn+Uhxmi8xWr3SPIs4=)
                          2: rtw5EuFYH3ySq0jw3-ZmGwFMoqo.roa (hash: Ii5lxajvlSV2gkqSCAYWVLgdyHye7gIbfTFfAGtSUlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:40:d9:5f:bd:ae:2e:9e:48:66:21:cc:2e:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=69484c170f3ed92109039c298de3568b83e0be85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a0:a7:85:34:97:89:6c:1b:b6:e8:27:7a:e4:
                    4a:f0:26:7b:bd:7a:84:91:ea:b4:f5:b2:42:75:80:
                    c3:d2:85:35:3b:cf:d1:a2:50:f2:03:69:ca:a1:a6:
                    b6:33:08:89:87:db:3f:0b:97:c7:c3:fa:e0:e3:5e:
                    fa:7f:33:ad:ed:81:33:5d:24:74:8c:20:7e:8c:63:
                    6d:f2:4c:c9:75:a8:09:53:2f:4f:a3:86:7a:cd:11:
                    83:a5:ed:94:66:1a:65:3a:c2:55:1a:a9:ec:86:0d:
                    2c:03:be:80:fb:79:90:ff:90:a4:0c:3f:ca:79:d6:
                    8c:41:b4:58:d6:c1:3b:59:81:8f:1a:c8:e3:4c:6d:
                    73:57:0c:5e:e1:bd:a8:10:d9:9d:f8:76:dd:7d:24:
                    30:98:d2:ba:8a:8a:69:47:5c:13:b5:23:a3:57:d3:
                    77:60:b1:a2:8c:d5:93:2a:44:86:0b:5b:43:3a:1c:
                    18:da:0f:53:4d:39:40:bf:ec:91:02:14:a3:6d:5b:
                    ba:d9:7b:8c:39:1e:93:3a:32:2c:f2:d2:53:b7:4a:
                    ef:d8:68:dd:df:cf:09:fd:f9:6b:13:1e:b6:40:ff:
                    e0:92:e6:d7:dc:9c:95:d7:bd:bf:9d:f5:50:41:74:
                    bb:9a:b0:ed:2a:dd:33:38:85:b4:34:40:1d:5a:03:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:48:4C:17:0F:3E:D9:21:09:03:9C:29:8D:E3:56:8B:83:E0:BE:85
            X509v3 Authority Key Identifier:
                keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:9b:7b:b6:d6:d1:03:9b:0e:4c:ec:f2:4c:54:17:5d:af:
         d9:eb:29:d7:10:34:ef:d5:a4:25:a0:af:11:fc:28:54:8b:76:
         bf:89:24:40:2d:1c:1e:dd:88:78:c5:f3:b2:2d:38:47:59:ba:
         16:82:33:57:7a:50:e4:cb:02:39:0f:e3:59:24:9e:9d:b2:a5:
         08:68:84:5a:29:8e:9b:d8:03:c1:bb:e1:b0:46:9e:33:c9:88:
         51:1b:40:bb:d1:d6:90:fc:1e:f4:8a:44:a1:ed:d2:27:4d:0a:
         64:08:2d:6d:bc:2d:0d:3f:32:2c:73:b1:61:3c:b6:a2:7f:08:
         fc:8f:a2:10:42:bd:2b:96:8c:56:ed:ec:4a:bb:97:8f:ae:93:
         35:55:36:8f:96:69:1a:f5:10:9c:4f:a0:94:ba:27:45:0d:ce:
         70:de:c9:b5:ca:a7:43:f9:f2:ba:a0:5a:77:96:e5:ef:b7:4c:
         07:a8:27:32:e5:6a:c2:f4:57:b6:2c:1d:8c:18:98:17:d4:7d:
         9d:d7:02:b2:2b:2b:b3:a7:54:7e:f4:68:e0:17:02:ab:d9:bb:
         43:13:a7:c4:27:66:82:56:74:82:f7:15:65:09:60:39:5f:81:
         26:eb:54:2d:dd:0d:f1:80:20:f8:bd:ad:fc:49:07:22:6d:78:
         b3:43:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----