Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
File:                     Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json)
Hash identifier:          EM4yVX3P0tWvgQ3wWY7depXNBaF73GHEMEpb/SrYLog=
Subject key identifier:   50:8E:2F:CD:E5:69:9D:ED:5F:5B:4B:CC:A1:30:60:95:E5:97:56:71
Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D
Certificate issuer:       /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
Certificate serial:       01962E992A71679A14575DADE89062F5BF8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft
Manifest number:          1092
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: caN+laz1xjOVXCi4cjhErNZU64IPFJi0GWy53DVSCNQ=)
                          2: wGg0J5Z28xFGgoF0T-AWE9a8nD0.roa (hash: kGXsD5CJ+k4dwjP4TcCf3ci1gDFHD1TYaxVZBZkFLBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2a:71:67:9a:14:57:5d:ad:e8:90:62:f5:bf:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=508e2fcde5699ded5f5b4bcca1306095e5975671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:4b:0b:39:47:f5:34:d1:05:b9:39:93:53:
                    25:c2:fb:a6:ac:24:1b:32:4c:dd:de:d7:09:a7:5b:
                    d7:1e:16:0d:bc:e1:95:2f:3f:e8:24:b8:2d:5c:81:
                    bf:a3:cc:86:57:db:cf:f3:ec:b0:1f:6a:96:b1:d6:
                    b8:b3:4b:81:2e:27:61:ec:99:28:47:10:85:28:71:
                    84:12:25:ec:34:07:e7:7a:2b:61:9c:e5:01:6e:ea:
                    98:a3:87:9f:12:67:50:12:17:01:ff:4d:92:32:ea:
                    82:0a:7a:bc:77:4c:e9:e2:7b:1c:2b:e9:8c:4f:1d:
                    47:11:6e:78:a6:22:54:a9:38:56:c0:bb:1b:ad:09:
                    1c:5c:8f:32:5c:ee:7a:02:8a:b3:49:1f:a3:5d:40:
                    20:50:df:09:27:75:24:fa:21:67:2e:57:b2:56:36:
                    48:12:b5:48:2a:2a:10:08:87:5b:23:10:f6:97:d6:
                    2e:b6:5e:77:9b:ff:7d:2d:bb:67:b0:07:6b:8c:19:
                    98:ec:38:de:02:37:d2:05:0f:6b:13:37:29:fe:70:
                    bd:39:dd:e8:56:d0:5a:e2:1c:68:44:98:67:48:26:
                    85:c5:2e:64:9b:41:4f:44:69:c4:5a:7c:4e:4c:38:
                    83:70:96:5f:95:4b:f4:6d:c2:a5:5f:df:58:72:b5:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8E:2F:CD:E5:69:9D:ED:5F:5B:4B:CC:A1:30:60:95:E5:97:56:71
            X509v3 Authority Key Identifier:
                keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:db:30:59:b4:f5:11:d8:d9:3f:3f:4d:30:0c:7b:ec:57:a1:
         d2:bf:77:cf:5e:89:5c:e8:7d:6e:5c:9d:4c:88:14:27:df:a6:
         42:a0:08:3e:af:64:9d:d6:cc:15:95:a3:b8:f7:dc:9e:af:2e:
         10:a8:3a:cc:b2:72:90:c0:6b:03:5c:ea:05:0d:35:69:4b:51:
         b0:fd:10:2e:23:d3:ff:a8:30:bf:a5:0b:60:de:8a:6d:d6:dd:
         7f:bf:e2:81:0a:4b:28:b3:9b:c9:d7:3b:dd:a2:ce:9f:76:09:
         c2:81:82:6f:ab:c6:fe:bc:d3:af:ef:87:22:a0:dc:4a:e4:0b:
         a7:1d:7d:0a:de:91:aa:30:4e:65:88:15:c4:63:be:75:b0:eb:
         cd:0d:ae:5f:f3:61:5a:5f:c9:53:09:11:99:1e:df:29:25:e0:
         fd:db:54:c7:d6:22:8d:3f:41:80:2a:1f:d8:ac:59:d4:67:00:
         b4:61:19:4c:df:b3:f5:93:76:4e:15:be:b7:48:9d:bb:9d:bc:
         3d:2d:e4:73:f3:36:6f:a1:6a:91:75:a2:4f:7b:ba:1a:d6:d6:
         ab:4b:18:07:7e:28:41:84:ad:d9:ec:d2:74:e3:ba:e5:98:d3:
         d0:d0:5b:df:09:3d:72:5b:f2:7f:a5:05:75:8a:7d:c5:d7:6d:
         13:38:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----