Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
File:                     ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json)
Hash identifier:          5vlU2LMfzFz23cEK5/W5m4usS4czrZUSdk3HINKUP3A=
Subject key identifier:   15:19:22:2C:60:B7:7A:96:7B:87:98:E1:7D:7D:72:75:75:5C:55:F3
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Certificate issuer:       /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial:       01962ECF984EF749EF3051734163F24409C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
Manifest number:          150F
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=)
                          2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=)
                          3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=)
                          4: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: /hr/yBtCOZ6Rdi2uQ84qpIVIQd5x5Th3zW/Na7XpcHg=)
                          5: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=)
                          6: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=)
                          7: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=)
                          8: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=)
                          9: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=)
                          10: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:98:4e:f7:49:ef:30:51:73:41:63:f2:44:09:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=1519222c60b77a967b8798e17d7d7275755c55f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:29:36:bd:7e:9b:4e:3b:aa:26:59:1b:24:
                    0f:55:7c:d1:c8:78:72:76:6b:66:2a:0f:50:94:2b:
                    2f:e2:75:40:50:dd:a8:74:fd:c3:86:4c:e5:07:28:
                    a9:b5:bd:45:f3:a3:42:9c:14:d9:c2:53:91:78:5b:
                    ef:e8:d5:1d:0e:e7:df:f1:f3:7b:f8:a6:d7:fa:7c:
                    1d:b7:32:69:fa:f6:9e:75:73:40:02:26:c6:d2:58:
                    3e:98:3e:97:41:51:80:a0:fa:83:04:28:41:a7:38:
                    e8:2c:45:21:c5:3d:60:f5:33:c6:34:3f:41:a4:b4:
                    10:e5:46:d8:8c:f3:63:9e:26:48:7d:bc:fe:d7:e4:
                    2c:4f:67:6d:8e:bc:e2:2d:96:0f:5e:b1:c3:40:61:
                    66:2f:6f:86:e1:b4:78:e9:38:b5:ba:ad:d7:da:a8:
                    fd:0f:3f:5b:d5:5c:6e:41:aa:bc:b8:a2:04:ed:06:
                    5a:b2:27:bc:cf:77:09:33:7c:09:28:f9:16:24:7e:
                    8c:79:32:f2:d5:11:08:15:f9:e7:3d:ac:02:16:12:
                    e5:9b:a4:81:36:e9:b7:23:2a:da:b5:da:61:43:0b:
                    a4:73:6e:10:41:65:33:40:a0:d8:6e:1d:30:f8:1e:
                    04:1a:fc:b1:2c:7a:81:3b:eb:89:08:2c:dd:22:7f:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:19:22:2C:60:B7:7A:96:7B:87:98:E1:7D:7D:72:75:75:5C:55:F3
            X509v3 Authority Key Identifier:
                keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:89:83:25:a6:01:9a:2f:a5:44:15:ed:97:2e:68:ca:b0:
         e8:bd:e9:f5:53:62:8f:ad:a1:68:13:5e:21:03:cd:1c:4d:7d:
         e1:2b:86:3a:6a:50:24:e8:51:51:49:5c:ef:95:d4:57:fc:ff:
         6d:62:0d:6c:a8:64:19:0d:cc:f9:92:89:80:8d:10:14:f4:c5:
         e6:62:dd:e9:bb:36:c1:d1:4e:2a:fc:1c:ec:26:fd:f3:6c:16:
         77:9e:e4:6f:30:0e:85:fa:51:42:79:62:76:36:a0:d4:6e:01:
         cd:46:dc:80:75:5a:c3:51:70:c2:ca:de:f4:22:4f:48:3a:dd:
         99:55:7a:43:47:f6:2f:51:4e:8b:fe:e6:59:55:55:f1:be:7d:
         fe:51:a0:61:13:e4:d7:44:8f:3f:ce:17:ff:60:94:81:fd:72:
         50:d3:ed:49:e5:55:28:61:2a:60:f2:8f:b7:c9:8f:8d:5d:44:
         06:e5:14:57:b3:b5:eb:8f:29:bb:39:38:eb:49:0f:aa:b8:da:
         5c:6c:7e:21:0e:bc:cd:88:d3:a3:63:f9:88:48:38:00:21:26:
         dd:da:42:3f:8d:d5:40:21:c7:ec:02:eb:26:aa:90:2d:7d:dc:
         e9:fc:85:c3:d8:2e:07:7a:5c:75:a3:a1:2f:8e:a2:c9:10:e7:
         e7:15:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----