Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File:                     OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier:          7U4z131dN0A2rpn3kDARGL/0bMhVZM+iwxhjKxwX9J4=
Subject key identifier:   41:D8:84:59:0F:7F:84:A1:3C:FA:2C:09:06:D1:C5:44:23:D8:D0:F5
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer:       /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial:       01962F74965AA74E3127DBE92D44BB37FE4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=)
                          2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: +UrBvQILXCln7fEWe/Fm4sXBAJbW9qzJJ7or2iPL88c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:96:5a:a7:4e:31:27:db:e9:2d:44:bb:37:fe:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=41d884590f7f84a13cfa2c0906d1c54423d8d0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:5c:b7:62:f4:8a:10:e8:d5:11:fd:0b:0a:
                    80:d2:b9:d3:f0:9a:29:50:6e:7b:34:42:a7:d9:1a:
                    b2:2e:35:cb:a5:dd:3b:eb:3a:ff:ec:fa:9c:e8:17:
                    46:b7:c4:6a:75:35:03:27:75:91:7b:71:80:23:63:
                    c9:4e:bd:b4:da:72:7f:a0:16:16:b6:a9:66:98:0d:
                    fe:ba:cd:59:5c:0b:f3:32:78:16:67:b0:d6:85:ac:
                    11:5f:cb:83:d1:ea:5f:d1:50:37:31:1f:45:9f:e5:
                    7e:56:49:4f:4f:9a:0d:68:3b:08:a9:a6:d6:44:06:
                    94:2a:4b:e2:d2:23:94:be:bc:7c:80:be:e6:b8:fb:
                    91:6f:d2:1f:41:f0:8d:64:de:6b:6b:97:eb:0b:0c:
                    b3:57:84:b3:74:f2:84:6f:cd:f4:9f:1e:b6:bb:69:
                    1d:8e:65:f5:fe:4b:90:05:c5:17:a4:8a:60:ce:2c:
                    fe:fb:29:d8:69:0c:9c:6b:00:f5:82:23:3f:b7:08:
                    20:78:40:1b:2b:21:db:50:4a:e5:9f:19:e0:ef:bc:
                    a8:a2:03:fe:67:b5:5e:8d:4c:b5:18:7b:88:7d:ab:
                    f6:fc:b3:66:37:ab:fd:45:ca:43:15:c4:f3:a3:4e:
                    80:e6:de:55:6c:b9:0c:35:9c:2a:34:bb:a1:2a:77:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D8:84:59:0F:7F:84:A1:3C:FA:2C:09:06:D1:C5:44:23:D8:D0:F5
            X509v3 Authority Key Identifier:
                keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9d:ad:88:6d:5b:0a:d5:f3:ba:32:a3:a4:fb:a1:11:05:ea:
         2e:33:80:d7:a4:ed:9a:69:42:c3:bd:6d:05:bc:78:29:f2:6b:
         53:3d:0f:72:62:e5:70:f1:58:76:d7:48:36:36:58:8e:48:2b:
         ab:02:24:1c:53:35:e0:5e:83:53:8a:3a:9b:7e:06:76:07:95:
         5b:8d:19:f2:1c:cd:41:70:59:4b:86:74:a9:39:84:ff:4e:4f:
         b1:30:a0:d3:69:67:4e:15:43:ad:29:31:69:ce:17:90:0f:4c:
         bf:74:1f:e0:e1:49:76:be:90:6e:8a:5e:72:a2:03:fa:7c:dd:
         5c:99:43:12:ab:6d:6a:dd:4f:4a:dc:b8:cd:a6:33:57:a1:51:
         e3:69:fd:df:67:47:4c:c4:9c:1a:14:bb:65:29:b2:a8:eb:a8:
         bb:7f:d4:2b:4f:e2:f9:2e:be:b0:13:7b:89:4a:6e:d6:e4:7b:
         1c:61:af:36:2d:8c:c7:60:ff:51:19:38:6f:8d:31:c3:97:da:
         ea:02:45:89:50:20:c3:b5:b6:1e:b4:4b:9e:76:dd:25:e3:4a:
         63:f5:0b:69:1a:91:57:57:6f:9f:f6:e0:1f:68:48:e9:77:25:
         30:80:71:af:d4:e6:65:42:73:82:05:e8:ca:55:31:7f:8e:da:
         a0:75:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----