Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File:                     OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier:          CqMRut66loOVUlmwJBj2qjxwRXTbhxD4KM1kYDtPCHk=
Subject key identifier:   B4:D0:AA:99:08:CE:6C:A6:84:27:B4:90:48:A6:D8:19:EC:09:DA:92
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer:       /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial:       01962E2AC514AB6A0D6F7F4FDE946B7382DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: Y1CYz8HcwNB3/W7ZCI9Wv1fgDnNuG2a3bDcbnEraBto=)
                          2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:14:ab:6a:0d:6f:7f:4f:de:94:6b:73:82:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=b4d0aa9908ce6ca68427b49048a6d819ec09da92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:30:6e:94:b7:29:0d:c7:ba:10:1e:d4:51:
                    86:f7:cb:57:38:3f:86:bd:f4:e0:3b:c3:d1:b8:8a:
                    c4:75:a4:f6:82:27:4f:7d:68:58:c8:63:3e:a0:66:
                    79:5d:77:19:c4:96:14:bb:97:f8:44:18:8f:9c:fd:
                    44:0c:e6:14:07:85:a1:70:56:34:39:e4:58:94:2f:
                    9b:a4:86:11:e2:a0:d8:b9:83:97:c5:18:50:36:54:
                    25:df:24:f5:5d:c6:74:c9:78:a6:f7:fc:74:1b:6d:
                    35:8c:d1:24:33:92:4a:b3:8c:77:98:48:9d:15:8c:
                    51:8f:36:46:d2:6c:46:0f:9f:4e:5e:f0:8b:b0:b4:
                    6e:29:91:d5:0f:aa:73:3e:97:75:69:a0:29:2c:ae:
                    fc:f6:0a:ee:64:79:03:ac:28:b5:0c:c3:f0:f6:00:
                    c5:fe:63:b2:d7:37:05:33:a4:24:10:4a:75:d8:77:
                    cc:44:93:d1:ca:b0:fd:5e:b9:c4:ec:1b:77:96:3a:
                    33:29:08:08:b4:85:af:d0:d2:50:c9:e1:b8:0a:b3:
                    f2:81:78:d4:e7:d4:3e:be:da:23:e5:5b:36:d5:98:
                    08:14:de:b3:a6:c3:85:c2:7b:f1:eb:2a:a9:e2:45:
                    89:36:7a:ea:d6:b2:3d:00:6d:84:16:b3:99:70:8e:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D0:AA:99:08:CE:6C:A6:84:27:B4:90:48:A6:D8:19:EC:09:DA:92
            X509v3 Authority Key Identifier:
                keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:52:96:af:18:b0:47:c5:41:da:5f:45:68:8f:f5:14:74:6b:
         89:e7:5e:72:2e:8c:34:7a:35:72:0f:77:39:e0:8b:2d:2d:09:
         1c:6f:44:5c:88:b4:51:5b:76:1f:b9:26:f6:d3:ca:ab:b4:24:
         0d:1a:d5:fb:4e:69:fd:40:22:17:d3:6e:de:13:fe:9b:3d:f7:
         46:84:0b:62:3e:b1:c4:2f:61:7a:88:c4:ed:2d:c3:cf:ec:68:
         ec:db:06:0d:07:12:77:d0:ad:39:4a:e3:dd:44:b0:25:05:f5:
         b3:78:63:44:a0:ea:11:d2:5f:69:df:49:f8:af:cf:93:49:71:
         e5:11:ca:c9:99:5b:42:3c:10:ab:18:c5:5d:c7:e6:b4:15:0e:
         e8:8b:24:fb:23:47:b3:2c:11:c0:3b:46:a9:6a:0d:87:1f:77:
         c2:df:1c:3b:f1:54:e9:f2:2e:b3:2f:74:63:46:1a:07:a9:88:
         c3:55:40:bc:ad:b4:ef:34:63:64:54:09:c0:5f:83:e7:f4:57:
         f4:6e:d4:39:e6:57:35:f7:01:36:ce:8a:8d:20:7e:76:34:29:
         13:dd:42:c3:fc:27:76:db:af:f5:52:c6:5d:9c:06:6d:74:f9:
         6d:4d:b8:48:68:a5:da:a2:e3:af:77:8a:55:24:00:c6:4b:b8:
         f1:85:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----