Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
File:                     O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json)
Hash identifier:          Z/JakSHbmMLqBmZMjiRVT9lw6d6lrKgJVyn30xI23yg=
Subject key identifier:   86:A2:F7:54:02:5D:E2:4F:C1:C0:7F:3D:B6:70:E0:C3:9A:1B:1F:4D
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Certificate issuer:       /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial:       01962FAB4128E9EBD9637DF2D1621E50EC9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
Manifest number:          029C
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: mtM05M9wIBIinDBQkeAqquSBC4o2igcuIeceC+dd5Z8=)
                          2: Xn4-KL-8Bh82Qe59kVWTId-xaSI.roa (hash: 1/y3ci5YILrRiLZoHOXKAtyVkEFrCH3iPpKqyxJyCYI=)
                          3: YYLnpiOtsdNraYy3ykCP3me9_d0.roa (hash: Z2+aG3QOGufBHYy7yM6ZHwElru6zT5L16YKUTxlePLo=)
                          4: fE9SL4lgGLEucOlyvk7fngTw64k.roa (hash: TGIMqMFtt0hwRVhPYaYtgV4OglJO1aoAg/NqO7iMJrc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:28:e9:eb:d9:63:7d:f2:d1:62:1e:50:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=86a2f754025de24fc1c07f3db670e0c39a1b1f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:c8:d7:0d:a2:88:b7:5c:78:b2:29:e2:75:
                    f8:8a:78:cd:e3:c4:0f:4e:2a:6e:73:cf:c4:f2:f3:
                    58:34:ea:e0:23:52:a1:1f:71:f7:b5:47:5f:02:82:
                    2b:7c:2d:1e:60:a5:a7:14:17:24:f3:67:90:81:af:
                    10:c7:46:d0:a4:53:3d:83:68:32:13:83:48:f3:35:
                    3f:08:a4:df:3a:72:f5:58:66:99:06:8a:9d:29:b7:
                    5e:24:cd:ad:29:80:67:3e:29:60:19:7e:06:a3:13:
                    74:dd:62:71:22:31:d4:0a:95:7f:ed:05:17:c1:fb:
                    8e:66:0e:d0:be:67:6a:95:da:09:22:56:e3:3c:11:
                    72:35:dc:f9:b5:c9:91:09:42:cd:9b:40:04:ec:d4:
                    13:5b:6a:d6:b4:77:51:13:5b:6a:59:b3:ac:be:df:
                    cb:72:7e:d2:0c:7b:9f:bb:95:b3:e0:8a:57:0e:f6:
                    11:6e:ae:50:95:b5:35:bd:06:dc:58:b9:8a:dc:42:
                    23:73:d7:a1:aa:20:b3:af:ec:fe:80:7e:c1:49:87:
                    8a:94:f2:86:69:1f:df:b4:b7:39:2e:80:60:77:1c:
                    d7:32:79:93:74:cd:15:4a:89:0a:79:a4:d8:37:64:
                    33:15:37:ea:85:7e:dc:01:62:23:cc:90:05:ac:90:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:F7:54:02:5D:E2:4F:C1:C0:7F:3D:B6:70:E0:C3:9A:1B:1F:4D
            X509v3 Authority Key Identifier:
                keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:22:e4:6b:cf:c2:39:8b:b3:1b:71:b7:c5:0d:72:25:1a:20:
         fe:6c:89:c5:c9:1b:26:17:32:1b:e8:6f:60:dd:f5:af:4a:8a:
         da:a8:7f:3e:5f:76:ab:5b:30:13:8f:b6:3e:27:34:cc:b4:12:
         c6:63:1b:b1:54:ca:b8:94:1e:ac:d2:85:e9:6e:49:83:12:57:
         ee:b8:c1:a1:83:4a:d1:90:d5:36:fa:a2:eb:80:b3:93:55:e9:
         d7:74:fc:3e:d1:c2:08:ef:85:88:a6:04:89:e8:fa:dc:64:10:
         c4:27:94:c3:d4:f0:09:9d:8f:88:0c:20:1a:c4:82:89:50:8a:
         17:46:49:6c:fd:51:66:24:c7:bd:ca:82:c6:88:08:05:18:30:
         d7:ac:22:d3:c5:32:ac:51:f7:63:e6:32:66:65:0b:22:e8:52:
         88:45:dc:d5:91:e0:8f:ce:a1:b2:4b:62:43:a2:18:6a:d1:f6:
         c7:44:10:bd:4b:66:3f:2c:98:d9:78:27:e7:24:56:b1:a4:ec:
         da:bd:c3:c0:44:c5:45:54:89:e3:1d:70:b3:5e:06:6e:86:17:
         b1:8a:06:ea:d3:5f:ac:b5:6b:19:b1:96:84:cb:8a:8b:12:09:
         4d:d1:c0:39:bc:3d:47:c7:f5:b8:ca:9e:24:92:2b:ca:b1:29:
         ab:db:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----