Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File:                     Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier:          KHCdR29cu/lpkEWKO0PJctmZrNsDEQ5BYXBD9e7X740=
Subject key identifier:   33:F3:CC:6F:07:FD:30:6E:BE:3E:93:5E:E0:2B:BB:34:40:87:D3:0E
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer:       /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial:       01962F74781EF32A43A869DE62FBA550E8F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number:          0FA8
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 5-ifbkzxAVenbOTh7xnTmSmBRII.roa (hash: FOnnytfJcY5VsaO7IU74ZEnL9Ku9T/H6aGG9jNy1XD4=)
                          2: 8EgilQwuaLeesY5D4MXR98cjsk4.roa (hash: W7fEZRR9vQWc1wZaS6T1JTfiycKOFxnx4jwhxIG0rbQ=)
                          3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: h2vOFsj9PgzELp9XWptqUV+R3cDfXOPuYtIFBfWpfAw=)
                          4: g_mDeeMiBsxAO1aMYobd6COqAyg.roa (hash: C6OmPgZYFNJO1UnyGDjiycVke0+x3UvPSJ7l7B/PjDY=)
                          5: sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa (hash: Xn9RqjO0Bl5wwfZuCHIFFFBi1M7CLKKfAFqVPviV4cI=)
                          6: x_EubJIedCZLAcQtdIa25nYyDrk.roa (hash: PgJOT+273yMa8SLFUPwyR3K64DEc4yPVquyOKHNI560=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:1e:f3:2a:43:a8:69:de:62:fb:a5:50:e8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=33f3cc6f07fd306ebe3e935ee02bbb344087d30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:ba:cc:f9:b4:c7:e8:71:2c:90:f1:c9:47:
                    ec:c5:54:07:df:2a:a5:71:01:cf:cd:19:9f:98:96:
                    17:ba:6b:26:2d:aa:96:e0:50:42:4f:da:b7:50:91:
                    2b:bd:cb:24:af:81:42:9a:c0:4b:7e:08:00:31:10:
                    d7:1c:66:26:9f:2e:a3:16:4b:03:62:d7:d7:f2:0f:
                    a8:e5:d8:e6:8a:d2:83:f6:55:b3:9b:0c:f2:31:ef:
                    30:2a:15:e5:6b:9d:0f:01:ee:1a:81:17:5c:f9:25:
                    52:3f:a9:95:0d:25:5a:6e:c3:da:54:b4:0a:8f:64:
                    f0:0b:6e:3c:f6:f5:ad:3f:e5:55:70:56:d9:04:76:
                    4d:f4:b0:67:fa:07:67:f2:f7:c3:e0:95:a3:2e:4f:
                    0d:31:db:cb:bd:6f:ae:ce:1e:44:e8:6d:b7:0f:fe:
                    ba:1b:f9:f0:16:0f:d3:d4:f7:b5:16:a4:19:c6:64:
                    a9:ad:41:a8:0e:d9:9a:0c:c5:b5:9c:1d:57:0d:1b:
                    6c:ba:6b:d6:3e:01:54:b9:98:95:d3:ce:09:f6:1e:
                    fe:38:8c:00:8f:2a:10:33:c7:dd:a8:27:ed:60:d1:
                    d4:72:0d:c6:4b:a4:00:83:4c:a1:2c:e7:25:de:33:
                    af:1b:56:2a:68:3d:db:0f:e5:59:24:eb:4b:c7:00:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F3:CC:6F:07:FD:30:6E:BE:3E:93:5E:E0:2B:BB:34:40:87:D3:0E
            X509v3 Authority Key Identifier:
                keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:97:ab:fb:7e:c0:69:5a:b6:af:3d:a6:3c:d9:1d:38:c8:6b:
         9e:3e:a1:38:d5:a7:12:5b:ec:66:dc:13:bb:3a:c0:b4:e5:4e:
         3c:ee:75:9c:85:f6:01:ea:d8:60:57:59:b3:bb:96:12:96:1e:
         96:1f:2b:a9:66:f9:89:8e:fc:c3:eb:cf:67:08:0d:d7:90:39:
         03:33:b1:a2:a6:e5:d4:46:7c:6c:57:d2:31:24:21:b8:27:4d:
         19:46:79:75:3b:3b:1f:f8:17:69:0c:28:68:dc:88:e2:a2:0b:
         e5:ea:ec:53:fd:0e:39:d4:12:ea:e4:ac:e6:3e:39:30:af:53:
         d0:ce:46:80:69:a9:c4:dc:8b:cc:77:f1:57:10:8a:29:cf:f3:
         13:5a:e7:8a:7a:d1:3c:ba:4b:b6:d2:12:95:95:2b:a6:09:51:
         5e:e7:c6:8f:be:72:62:2f:39:71:a5:21:50:a1:bf:be:53:c7:
         c8:91:c6:32:03:a6:9f:28:5f:d1:d7:bd:17:35:eb:eb:7a:0b:
         ec:58:91:44:46:7d:a6:e2:31:1a:14:15:53:b6:31:07:11:bc:
         38:f0:a5:07:e2:c8:19:1c:d1:81:21:a7:aa:18:76:8a:bd:41:
         d5:e4:dd:13:e9:c9:e4:8e:6b:5e:20:0b:29:ef:5e:52:a0:df:
         82:e5:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----