Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File:                     OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier:          fmYNIUenYzv4o9AicKJqMUGQcButEAcRUVp8Of7Hp6o=
Subject key identifier:   33:B4:39:AE:DA:4F:C8:E6:C7:32:FC:35:97:DD:A9:CB:D7:4F:A8:DD
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer:       /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial:       01962ECF79C7B77BFFB41BFBE856ABD43D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number:          055E
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: ECy4hcsZKRfHoRJrX40zL9VgZlM.roa (hash: TIqTReRQQT5DAw+Fnvsbl2Gazl66yiKwPvTFj1mKh8s=)
                          2: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: FQLBdqgUBXYIkO8rrcO8iGuEkw+s958WQ06xSIG8XhI=)
                          3: b-pP2DvAvhNxFYiGst38p6kSpEw.roa (hash: OWrgzbHkSLo7aQ27PmujOGuFd28cotewB1lFGD+BaKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:79:c7:b7:7b:ff:b4:1b:fb:e8:56:ab:d4:3d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=33b439aeda4fc8e6c732fc3597dda9cbd74fa8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:8f:23:4c:0e:6c:78:da:1d:42:e3:92:3a:
                    ec:17:4e:47:d5:e4:ac:fd:49:b3:05:67:42:c7:f8:
                    a0:a2:82:f9:97:e0:83:7d:6b:28:49:6b:40:60:93:
                    b7:be:36:a7:c0:ba:91:76:f6:1d:ad:d5:ee:d1:fb:
                    dc:0c:53:11:ac:3d:c3:81:c2:a3:70:ee:1a:2b:24:
                    66:fc:90:db:82:7b:37:af:f8:ef:e9:b9:61:31:0b:
                    c8:70:e9:a7:bd:30:b0:56:d3:29:99:3c:d8:46:d8:
                    6d:39:eb:a2:58:81:60:d3:a0:90:7f:75:34:d5:61:
                    25:68:6e:f9:e6:3a:90:b0:da:1f:49:a8:71:82:20:
                    8f:3c:49:cf:df:e7:96:c0:32:40:98:ec:e8:f9:99:
                    a5:f2:f5:64:c8:bb:d6:b5:53:37:cf:3a:75:f7:e3:
                    24:3f:77:a0:a0:4a:47:82:17:39:a2:79:8b:f1:27:
                    8d:e0:ab:9c:3a:76:94:a8:12:b1:cd:af:93:ad:b4:
                    cf:55:a6:b0:62:0c:04:fa:1f:99:52:93:a4:a2:66:
                    15:a8:aa:90:57:4a:63:e6:fb:85:9e:38:12:da:fa:
                    81:31:42:9d:ec:a3:62:31:95:a2:60:a9:b8:fa:67:
                    63:0c:bc:fa:d3:74:ee:6e:05:91:e5:e6:0d:11:48:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B4:39:AE:DA:4F:C8:E6:C7:32:FC:35:97:DD:A9:CB:D7:4F:A8:DD
            X509v3 Authority Key Identifier:
                keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:07:a8:5a:79:62:9f:89:55:2b:01:bc:e4:ab:24:ff:3e:0b:
         b1:c0:ac:0f:78:2b:8c:29:ee:9b:32:34:a6:88:cb:cb:83:ff:
         af:f9:50:b5:2e:03:7c:11:f6:39:af:a2:d0:a4:b3:57:bf:d0:
         44:f0:52:f2:99:e9:67:60:86:0d:9c:cc:59:fa:cf:08:7a:82:
         58:56:5d:99:df:ad:9d:d4:bf:49:ee:36:7c:c0:3a:67:a9:04:
         2c:4b:82:b3:88:e5:58:cc:7c:c0:d5:8b:43:53:0b:db:44:eb:
         57:2c:e9:0d:ff:53:f6:16:0e:b1:b1:24:82:24:a8:8e:21:63:
         7a:a1:9e:47:a9:73:d4:44:64:b2:50:ae:0f:ad:22:62:fa:d3:
         1b:44:22:8a:48:1a:ce:62:17:39:5e:2d:27:ec:b7:32:2c:e1:
         25:e5:49:8a:82:09:ff:ef:c8:8d:c8:47:ba:e0:02:25:8e:cd:
         09:9f:41:5f:69:3f:8a:6c:e5:1b:ea:64:fc:7e:29:a7:b0:12:
         8d:b1:68:85:bb:fc:04:50:dd:61:c0:b8:94:44:7e:2b:e1:65:
         ea:45:67:98:f9:b9:c1:82:df:bf:7f:76:4c:ac:df:4a:9f:c9:
         12:f5:d0:aa:74:88:c9:7c:6e:e8:d1:4e:4f:65:6e:e6:60:91:
         ce:e2:71:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----