Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft
File:                     OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft (raw, json)
Hash identifier:          OtXpFkXnMdirCPQIRZY+XM7mI/dz6S7wwyvH4+EX29Y=
Subject key identifier:   0C:4D:47:30:F4:38:30:6F:67:D8:46:9E:41:07:27:68:9A:15:1E:56
Authority key identifier: 3A:61:1B:C2:91:FF:1D:E0:22:56:F2:31:53:45:68:06:03:FA:4E:DB
Certificate issuer:       /CN=3a611bc291ff1de02256f2315345680603fa4edb
Certificate serial:       01962E2B0A17A025F367162C3AEF9849B4E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmEbwpH_HeAiVvIxU0VoBgP6Tts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft
Manifest number:          03AF
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: OmEbwpH_HeAiVvIxU0VoBgP6Tts.crl (hash: EjxC8GgIUobPHPekja4pZb7CGOOrB4C5+BhPHCMaq8E=)
                          2: WMqMrN8GSXOfRqdUfWDSfGSeNoY.roa (hash: +HUvEm/zmLGsWH85M7k1xXVdXwdEmqkh5XDlJHFGu2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0a:17:a0:25:f3:67:16:2c:3a:ef:98:49:b4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a611bc291ff1de02256f2315345680603fa4edb
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=0c4d4730f438306f67d8469e410727689a151e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:60:a3:ca:85:ef:5a:f4:2d:0c:d9:eb:2c:
                    85:a2:6d:13:14:cf:05:c2:1e:7d:31:76:2d:63:6e:
                    02:8c:58:74:40:dc:20:d4:09:1e:04:bc:9a:cb:01:
                    b5:ed:27:c6:43:0f:11:6c:55:86:7b:39:d5:99:c3:
                    e4:22:c9:15:5e:3e:ac:00:99:b8:d7:f6:4c:04:17:
                    ff:c8:cc:05:5a:a9:54:b4:b9:d3:4b:85:4c:14:93:
                    4c:a8:e0:ea:13:ea:a9:fe:6b:52:1a:84:b5:e4:28:
                    04:71:66:e6:aa:d1:18:2d:f7:70:4b:d6:8f:e7:b8:
                    ea:94:80:58:40:ef:c3:d5:40:16:b1:ae:95:22:5e:
                    c2:cd:f6:46:3c:78:dc:22:83:a6:b6:29:06:1e:a8:
                    58:fb:dc:63:a0:8f:61:bd:12:dd:28:37:c8:0d:07:
                    4a:21:76:87:50:a5:33:1f:89:f2:f7:4e:1d:92:af:
                    78:7c:ba:a7:b5:3f:93:01:97:8f:08:07:96:b8:d0:
                    8e:66:7c:04:bd:34:db:6e:ce:b6:98:2a:fb:03:f4:
                    6c:bb:2b:d9:9f:20:b6:41:a9:ee:ec:8e:1a:05:6e:
                    2e:46:b2:f2:26:bb:8e:3e:ef:9b:d3:f2:fa:b5:15:
                    ad:d3:5f:7f:c7:8d:1e:55:a6:35:6f:9c:0f:77:ef:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4D:47:30:F4:38:30:6F:67:D8:46:9E:41:07:27:68:9A:15:1E:56
            X509v3 Authority Key Identifier:
                keyid:3A:61:1B:C2:91:FF:1D:E0:22:56:F2:31:53:45:68:06:03:FA:4E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmEbwpH_HeAiVvIxU0VoBgP6Tts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:22:21:94:d9:6a:33:11:b4:64:61:95:dc:cb:d4:a1:de:40:
         1a:f4:35:f6:3d:22:5e:64:07:0c:8b:f7:3f:32:af:a8:f8:ba:
         b2:a6:c6:49:7b:72:e7:2b:43:dd:f5:f0:76:fb:8c:45:41:73:
         40:66:18:a3:08:08:5b:a7:58:25:86:45:8c:90:1d:b4:fa:57:
         6d:41:48:e5:44:c3:08:f5:47:37:b6:23:94:f9:5e:2f:0d:39:
         53:1b:c8:56:56:72:8f:ec:d2:1e:4c:95:be:f1:cc:b5:2c:af:
         57:df:06:56:ca:37:59:27:08:dc:0e:af:4d:bc:5b:8c:31:27:
         75:4d:b7:87:d0:8b:4a:db:cf:f4:14:6e:57:b3:55:bf:74:6e:
         ff:f8:0b:e6:28:fb:d2:e0:d0:41:dc:45:d1:3d:23:17:c9:d7:
         29:b9:ba:39:4b:91:69:18:0e:2c:36:4e:0c:ca:14:1f:c5:33:
         5b:ee:58:14:af:5e:0e:b1:d0:95:88:16:c1:de:fb:c5:15:d4:
         48:6c:0a:de:b1:2a:e3:99:4f:83:a0:f5:4a:eb:c6:f9:ce:f1:
         4a:70:7a:da:53:6b:ba:3c:d6:a6:94:85:f4:da:3a:da:96:7c:
         8a:a0:23:05:a7:c1:4f:1e:93:69:b8:9f:59:95:66:45:d4:34:
         ee:b0:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----