Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File:                     f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier:          h9+5wTKXkYpOYO2/Uk7i5cRyXCnE8mdrq1iuu+VXXao=
Subject key identifier:   70:9D:C9:4F:4C:2B:81:A3:8B:87:8A:F6:F0:C2:1D:10:5E:E3:04:FF
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer:       /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial:       01962E2AD11C885ADEDBF7B4CF028E72F5C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number:          BA
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=)
                          2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: A5E/CCtX+iqISgL/f8v3lGX0tr07evbI8yCgsv1VNNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d1:1c:88:5a:de:db:f7:b4:cf:02:8e:72:f5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=709dc94f4c2b81a38b878af6f0c21d105ee304ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:e5:f1:3f:18:3d:6e:03:2b:40:2d:a2:5c:
                    89:5e:f3:45:6c:ab:cf:21:f6:02:ee:7f:e2:06:ab:
                    da:7e:9f:e2:a9:5f:48:7f:22:25:36:14:54:68:1b:
                    19:ee:10:c6:10:00:5b:7c:2d:75:97:02:20:56:9c:
                    33:66:53:1f:02:b7:02:bd:ff:d5:1e:65:e1:0a:af:
                    ef:28:0b:25:41:80:22:00:78:18:19:00:b5:a7:68:
                    f9:4a:18:e5:5f:be:a0:fc:98:c9:ef:fe:ca:a6:29:
                    0c:51:c4:ee:e2:9b:0b:b1:96:f9:bc:cf:bc:69:a4:
                    6d:70:e2:d2:87:4b:1d:0b:0b:52:74:b2:ef:21:74:
                    92:16:ec:40:e1:07:f8:e3:be:84:ae:4d:81:d8:e8:
                    43:39:67:ab:f0:ee:85:6f:5b:63:b9:bf:89:c7:25:
                    3f:28:83:73:c6:ed:4f:ba:6e:05:1c:59:71:2a:8d:
                    cf:73:48:80:82:33:4f:0d:35:9e:34:14:bd:f9:10:
                    e4:67:01:37:65:e0:aa:08:bf:f4:67:d5:8c:cc:c7:
                    f4:e6:05:13:58:ad:8f:7e:cd:97:70:9f:85:2a:39:
                    0c:07:88:37:6c:d9:11:cc:3f:be:15:71:39:fc:9c:
                    c2:8f:80:bd:00:de:6d:90:07:30:e1:a4:9a:fb:64:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9D:C9:4F:4C:2B:81:A3:8B:87:8A:F6:F0:C2:1D:10:5E:E3:04:FF
            X509v3 Authority Key Identifier:
                keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:27:c5:b3:dc:b8:e8:24:04:a3:20:2c:5c:f4:3c:8a:b4:
         af:1d:b6:b2:3e:b8:87:17:1f:5d:70:2a:a6:05:7d:dc:d6:b8:
         15:20:8c:63:46:98:07:d1:10:e5:49:eb:24:29:e0:08:6e:bd:
         1f:b9:7e:6d:fa:81:5e:cc:a4:22:e5:c3:6c:df:2e:af:13:a4:
         54:9b:02:a3:af:7c:72:70:2a:98:72:b6:17:d4:b7:ff:ee:85:
         eb:3d:1c:58:26:1b:51:56:40:1d:92:0d:11:87:3e:7e:e1:ad:
         dc:70:3e:a5:dc:6a:73:bc:0b:a2:b3:f9:dd:ee:29:6e:d6:65:
         69:85:35:b0:3b:80:18:12:63:37:a2:69:03:79:3c:4f:29:b8:
         00:69:eb:10:ae:b5:ed:75:d0:dd:c7:3d:9b:21:c9:27:a6:d3:
         69:3d:36:c5:db:fe:aa:f6:c8:da:97:09:bd:19:f7:de:fe:8e:
         3b:ef:0f:ea:09:c9:b4:ec:7e:62:19:f9:db:e1:43:56:4b:ed:
         60:f2:ac:43:c2:6c:bd:ac:76:aa:f2:99:7f:d4:f4:5b:68:8d:
         da:4c:68:3a:35:94:4f:57:7b:20:d0:2c:98:ff:ed:eb:f0:d1:
         13:b3:e6:aa:02:e4:de:f8:ef:52:4f:9b:7c:80:68:5a:b1:a8:
         41:70:53:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----