Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
File:                     Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft (raw, json)
Hash identifier:          oRSDhV2/3m8ZK6aeh+bvBnHtSRMgWXX9ir7NuJypPrI=
Subject key identifier:   18:E6:7A:A0:D9:F9:FC:F2:C8:45:E4:3D:23:1F:7A:3E:6D:B7:B2:07
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Certificate issuer:       /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial:       01962ECF4F78102A9F18A34F10641AA4F1B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
Manifest number:          0AEA
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl (hash: KlTYUn39p64IFlcaOquJbcTR3PQxMdKIIBKsqoB3Sys=)
                          2: vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa (hash: lyBGyAokiSjopS7O45WDbuUZk8SIrQSCpnYKsmtEQ5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4f:78:10:2a:9f:18:a3:4f:10:64:1a:a4:f1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=18e67aa0d9f9fcf2c845e43d231f7a3e6db7b207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:95:bb:dc:d1:47:bf:9d:ab:f9:66:5a:f9:
                    f1:40:0b:33:5d:98:a0:0e:76:f7:06:27:a2:b9:47:
                    2f:ee:69:34:ab:cf:bb:6a:30:ca:67:d2:d1:32:80:
                    33:6e:7f:e8:42:1e:b1:7f:7b:c7:e1:7d:7f:88:2c:
                    bb:f6:df:a6:8e:5a:11:6a:54:9e:ba:02:f5:2b:d8:
                    fd:55:71:02:78:ae:0b:1d:e7:b0:f4:21:d4:1d:62:
                    bd:96:f1:27:3c:71:52:f0:b7:25:e9:fd:f6:6c:ff:
                    67:73:52:8d:73:2d:61:fa:ba:be:f3:80:2e:f2:22:
                    d8:e3:0d:86:97:13:0a:80:e8:9d:6a:47:9c:30:62:
                    f4:ad:e3:78:21:07:4d:27:e6:a5:67:46:dc:f1:ce:
                    ae:8d:50:c5:f2:24:33:e4:56:74:32:2c:18:9e:79:
                    97:02:97:45:cb:42:05:bf:3e:e7:2b:5e:6a:f2:29:
                    a0:da:0e:65:d0:b7:ae:14:db:54:f6:cc:03:07:43:
                    43:af:4d:51:dd:fe:a4:b9:75:1e:37:af:3a:a8:e1:
                    2c:27:42:da:db:61:1f:7e:e0:07:c3:08:7a:22:a0:
                    e5:2e:93:93:3e:cb:95:75:2f:c6:dd:f0:fd:33:47:
                    af:26:c1:fc:24:27:e0:36:ee:6d:88:5e:8a:68:09:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:7A:A0:D9:F9:FC:F2:C8:45:E4:3D:23:1F:7A:3E:6D:B7:B2:07
            X509v3 Authority Key Identifier:
                keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:86:97:c5:36:b6:e9:e6:6a:f0:84:ae:c3:92:1a:d2:10:
         05:94:91:3b:3f:9c:ba:fd:d3:5a:c1:fa:94:59:58:a0:25:4e:
         08:c1:85:ae:e6:e9:2a:b8:c2:2f:26:03:65:64:6e:9a:a4:3f:
         16:87:91:c0:2d:98:97:26:e9:67:1e:be:01:44:18:75:d2:05:
         3b:cb:12:e0:ee:e3:c0:16:3f:cd:ef:91:af:98:63:92:94:b6:
         8e:0c:76:8b:86:a7:e6:99:ed:83:5a:b7:5a:a8:59:85:41:0d:
         31:a1:79:b4:a1:3c:f9:93:38:13:5e:86:56:9b:dc:0e:bd:eb:
         90:82:b6:fa:50:1a:1a:92:c2:60:30:8a:c4:c7:fe:e8:66:a4:
         6a:5c:8e:1c:b7:59:3c:32:38:66:66:e4:94:ec:94:98:18:9d:
         f9:2c:55:aa:b4:ff:fb:d1:8d:5e:f9:9b:f1:25:0b:8c:9d:30:
         0e:e6:37:e7:81:39:01:29:18:ab:ba:08:b1:72:a4:e0:e4:43:
         80:36:22:f0:95:13:07:82:13:39:77:42:a1:c1:14:6a:c2:16:
         ee:9d:8e:b1:3a:86:5f:b0:a1:6c:26:91:1f:ec:cd:e9:c9:68:
         8e:83:a6:e1:8c:61:db:d5:9c:06:7d:df:3b:9d:9d:d8:36:86:
         f6:23:32:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----