Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0152ab-d346-4e11-b0c3-332730fb1c8a/1/OitQeZsxwLFFEkZQ1xG844PWcDk.mft
File:                     OitQeZsxwLFFEkZQ1xG844PWcDk.mft (raw, json)
Hash identifier:          qaoIQ7PSolz8tJD6ntQPcN4VhmLePsiUInLKEXILmuU=
Subject key identifier:   A7:0F:6C:6D:E7:EC:21:91:42:F5:F6:44:BF:80:C0:2B:AE:77:8C:6F
Authority key identifier: 3A:2B:50:79:9B:31:C0:B1:45:12:46:50:D7:11:BC:E3:83:D6:70:39
Certificate issuer:       /CN=3a2b50799b31c0b145124650d711bce383d67039
Certificate serial:       01962DF43EB6415E39E9719F76C663C0B95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OitQeZsxwLFFEkZQ1xG844PWcDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0152ab-d346-4e11-b0c3-332730fb1c8a/1/OitQeZsxwLFFEkZQ1xG844PWcDk.mft
Manifest number:          093B
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: OitQeZsxwLFFEkZQ1xG844PWcDk.crl (hash: LuitW19DOcpabRE51VKuqEkBtFGvXzSZvYmTpoD8X7A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3e:b6:41:5e:39:e9:71:9f:76:c6:63:c0:b9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a2b50799b31c0b145124650d711bce383d67039
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=a70f6c6de7ec219142f5f644bf80c02bae778c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:96:06:c2:29:5d:60:83:e9:36:1d:0a:69:
                    88:d7:96:b2:b3:64:74:c0:ec:18:ea:33:98:d9:e1:
                    a9:12:f0:c9:c4:4e:6e:39:9b:91:7e:24:b4:c7:00:
                    c1:6e:b5:96:9e:51:b7:e5:2a:e1:87:56:97:64:6f:
                    f1:4e:86:63:4a:e2:7f:b0:48:05:7f:af:81:2c:25:
                    a7:3e:24:68:7a:eb:6e:9d:06:63:69:af:ae:79:50:
                    43:c3:92:20:28:cb:89:0c:03:6f:41:1d:3a:61:eb:
                    bb:73:16:a6:86:bd:9a:eb:0f:7e:6b:2a:30:22:d7:
                    81:51:fe:6d:50:d3:2f:7e:2f:42:87:af:9e:4e:1c:
                    83:da:57:ad:43:ae:a3:0b:1a:8b:2a:20:aa:44:2c:
                    2b:68:99:c6:8c:de:d4:a5:12:1b:85:d5:0f:cd:be:
                    11:bf:57:84:a7:27:2a:da:48:74:07:6b:32:14:0c:
                    f2:3c:c8:56:6f:5c:2a:47:03:59:9b:fe:33:31:61:
                    32:56:83:56:a2:cb:cd:fd:01:f8:07:6f:c8:f4:c5:
                    35:c5:a1:e7:b2:f2:d7:0c:00:6c:81:34:e2:5b:77:
                    f0:7d:f3:99:1b:3d:fb:b9:08:63:b8:b9:ff:ed:64:
                    97:65:33:1f:d6:4b:44:f7:bb:39:e0:cc:00:28:54:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0F:6C:6D:E7:EC:21:91:42:F5:F6:44:BF:80:C0:2B:AE:77:8C:6F
            X509v3 Authority Key Identifier:
                keyid:3A:2B:50:79:9B:31:C0:B1:45:12:46:50:D7:11:BC:E3:83:D6:70:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OitQeZsxwLFFEkZQ1xG844PWcDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0152ab-d346-4e11-b0c3-332730fb1c8a/1/OitQeZsxwLFFEkZQ1xG844PWcDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0152ab-d346-4e11-b0c3-332730fb1c8a/1/OitQeZsxwLFFEkZQ1xG844PWcDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c6:96:d9:0c:8b:34:b4:fd:51:62:e5:07:d0:82:74:70:c5:
         94:83:f5:56:e0:1b:9c:18:3c:5f:22:c2:16:c1:ae:30:d8:1d:
         de:bc:96:e6:fb:1c:c6:2d:64:d9:7d:ae:ad:3e:a7:dc:75:71:
         db:76:09:80:d6:d7:46:c7:9d:9e:68:06:b7:c4:2e:14:17:52:
         c2:4f:a7:95:d4:e7:44:56:1b:4e:41:dd:4c:09:f6:11:41:42:
         3c:50:f4:04:bf:67:5f:57:0c:bb:27:a2:ee:fe:2a:0b:ff:79:
         97:38:a8:6f:bc:47:bd:79:e4:b8:d7:74:2d:fc:0c:8e:f8:c7:
         ee:9d:7b:02:c9:68:6b:40:51:fe:d6:1a:65:a3:9c:55:d5:f9:
         ab:da:47:db:80:c6:40:ac:1b:19:4f:8a:dd:1c:63:b1:c5:c7:
         25:5b:0b:42:01:b7:d2:fb:15:f6:85:65:12:a0:14:8f:0e:70:
         cb:6a:76:06:e6:0f:10:23:65:27:ff:73:9f:7a:f5:92:68:27:
         2b:24:91:16:af:5f:22:81:37:9a:c4:bb:0c:65:c6:a7:fe:80:
         e0:09:2b:2a:64:d5:9c:cd:bc:00:eb:e9:86:3a:92:6e:12:43:
         03:26:d7:38:90:8c:56:3e:47:a4:b7:42:14:6e:de:c5:ae:e9:
         07:5b:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----