Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File:                     OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier:          hHHux/w2SlWfD1QkV1D09evptHnV94ASF/+l7PMRG2g=
Subject key identifier:   42:DB:FC:97:87:73:E8:B0:F9:F9:12:68:2A:AF:46:10:35:B4:C7:13
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer:       /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial:       01962F072726B73D3F5C08539C7C73823FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: gIqJbim0pbWWadhD2W3V/ZZ/xFC23FAGxNet273Syyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:27:26:b7:3d:3f:5c:08:53:9c:7c:73:82:3f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=42dbfc978773e8b0f9f912682aaf461035b4c713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:cf:93:02:5b:48:bb:e1:59:1f:00:0f:79:
                    34:b4:0b:9c:06:89:55:d5:ab:9b:f5:35:2c:56:75:
                    cd:99:c4:e8:9d:dd:88:b7:92:97:37:a9:e0:8a:81:
                    91:90:24:ec:39:93:44:41:37:e7:20:03:98:8a:cf:
                    a3:fa:b2:e7:c8:ea:ec:01:5e:e2:17:c7:bf:1d:87:
                    cc:ac:3b:6f:34:57:0b:4c:29:71:ab:f8:83:5e:11:
                    cc:06:d2:18:3e:58:87:81:04:9c:76:75:45:fe:d7:
                    f7:8d:f8:58:38:93:ba:73:5b:bc:97:e9:4d:e8:71:
                    0a:c7:90:a0:7a:dc:bd:14:87:a3:bd:0f:d2:d6:98:
                    e4:07:0c:04:ad:94:2b:cf:ef:6c:d5:ef:02:7e:fe:
                    61:4a:71:4b:2b:48:2b:5b:18:24:04:d7:4a:24:95:
                    e1:ae:60:5d:c4:42:5c:70:34:0a:8d:b6:33:f4:c0:
                    e7:9b:7b:e3:82:e7:5b:88:4d:51:1f:8d:1f:c6:92:
                    58:9d:1d:d9:ed:52:53:86:fc:ee:3f:60:1d:b1:f7:
                    59:ff:e3:5d:63:5c:b7:a4:96:1a:8d:3c:38:b1:e3:
                    d7:24:93:aa:f4:d9:9e:30:6b:bf:8e:39:d1:96:98:
                    1a:cf:59:40:a1:79:08:45:73:a6:d4:5d:8d:84:97:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DB:FC:97:87:73:E8:B0:F9:F9:12:68:2A:AF:46:10:35:B4:C7:13
            X509v3 Authority Key Identifier:
                keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:59:8d:5c:ba:d2:34:07:af:2c:cb:54:c9:3b:36:8a:c1:1a:
         e8:27:37:59:bc:49:57:29:fd:76:21:e4:bc:6f:e8:96:93:e7:
         a6:d4:19:13:49:d7:61:ca:12:bd:68:c0:b1:2f:1e:8f:1d:29:
         3a:a6:d4:cc:d9:c9:a6:28:86:a7:b7:53:0e:45:15:c8:d7:dd:
         d9:69:e4:a6:99:e9:c0:a1:06:2d:64:e2:69:3d:66:c6:78:48:
         3a:3b:31:33:bf:9c:d8:9c:b4:05:63:b0:e6:c6:48:dd:4b:fd:
         9f:a8:34:28:cc:b0:77:27:95:c8:d6:04:78:7f:83:fd:d6:70:
         e9:d7:eb:05:e4:33:71:00:be:03:e2:03:2f:7c:91:ed:39:83:
         b8:fa:21:ed:5f:19:9e:48:68:15:55:9f:28:b4:96:94:64:79:
         4d:c6:8b:2c:53:57:c5:eb:79:b5:14:91:5a:21:f8:60:5e:54:
         4c:c6:da:2f:3f:eb:f2:95:5b:96:55:15:02:68:9a:5d:2a:ec:
         62:4a:df:25:42:35:66:70:60:c4:9f:26:47:05:7b:d5:a1:4c:
         71:56:91:09:c8:c3:68:15:70:3c:b7:00:97:30:a0:77:9f:06:
         73:c2:42:9b:0f:18:33:94:18:e0:49:c0:62:f5:ee:cd:ba:0c:
         30:b8:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----