Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File:                     OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier:          uKDcb6jktP6UgYzi9W1gi4ckq1Y88Wwl4BaaGGhMcQ0=
Subject key identifier:   47:EA:47:F7:08:F0:6F:5F:15:83:A8:5C:FA:8D:37:A3:AD:A3:AA:B0
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer:       /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial:       01962ECF9E7F14F03A3A623AECC60AC0FD72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: YN92kPBRA3iNnv0M6lSgj8nvQldklI5dGT2KUWGMqZY=)
                          2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9e:7f:14:f0:3a:3a:62:3a:ec:c6:0a:c0:fd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=47ea47f708f06f5f1583a85cfa8d37a3ada3aab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:b8:da:31:5c:28:f6:f9:91:40:f8:ad:ba:
                    82:e4:93:86:14:51:c1:b0:3f:8e:97:b7:c5:4d:14:
                    74:2f:57:83:65:42:c9:79:23:36:bf:c2:06:c5:b9:
                    53:ec:fa:b0:d5:94:ac:77:a7:ca:f2:c7:c3:32:62:
                    73:80:91:d2:97:44:4a:76:46:b7:98:c6:33:8c:4c:
                    bb:d0:80:59:3c:bd:7b:e0:1c:cd:9e:73:f7:25:5d:
                    11:bc:f6:21:2f:b5:ff:c5:f7:11:8c:c2:86:15:74:
                    63:1f:1c:b3:55:c4:7d:bc:6d:29:ce:cf:c5:c4:a0:
                    6f:54:f7:60:bf:a8:ef:60:0f:32:9f:1b:1b:0b:a1:
                    07:5a:f7:6b:f5:8f:89:25:32:ac:20:53:d3:24:70:
                    88:72:b5:46:67:16:49:00:4b:97:5b:e3:59:8d:d7:
                    95:bc:d8:a6:e2:ee:76:49:a3:c3:01:22:11:fa:c3:
                    ed:c1:77:9e:92:fa:11:8c:d7:73:69:c0:54:7b:97:
                    ad:9f:95:ec:a9:f4:ab:6e:ab:f3:39:8e:4a:31:65:
                    2e:43:b2:99:ab:1f:19:ab:93:96:f3:91:f9:82:68:
                    56:3d:75:4f:28:47:e0:d0:41:18:50:e3:62:c1:35:
                    a6:60:40:40:0b:d5:3e:7b:dd:fd:15:49:25:6b:d9:
                    c8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EA:47:F7:08:F0:6F:5F:15:83:A8:5C:FA:8D:37:A3:AD:A3:AA:B0
            X509v3 Authority Key Identifier:
                keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:67:d0:bc:36:96:ea:05:83:69:a0:44:bf:51:e3:3b:f0:
         21:88:7c:70:17:8c:6a:59:7c:bf:fe:4b:92:23:c5:b5:8b:e4:
         97:ab:15:72:05:83:1b:56:80:44:28:df:24:d0:9d:55:5c:fe:
         a3:a7:c2:ea:c6:7a:40:b1:04:d4:ea:d0:e5:e6:85:13:a2:e9:
         ba:d2:44:14:ee:8d:e5:2a:3b:f0:4b:f1:c2:f2:db:7b:10:1a:
         b3:d2:8c:f4:67:51:d4:e3:5e:97:c8:e3:89:6b:d6:d6:ca:31:
         67:17:fc:8e:da:76:d8:98:4e:94:9e:27:b4:bb:57:e8:0f:1c:
         56:f1:5d:3f:1e:5b:47:e9:92:2f:25:9b:bf:af:1b:4a:62:b0:
         25:77:f7:00:a2:8e:43:5c:b6:26:42:a2:05:8c:f7:5c:c8:34:
         f6:73:b0:b9:75:f3:0b:97:51:0e:d4:40:3a:53:1b:45:ab:3a:
         ce:34:b9:26:f3:2a:7c:6e:50:f5:72:94:a0:cf:08:64:da:50:
         19:ea:25:41:a8:53:43:36:de:23:96:b0:73:69:a5:eb:83:bc:
         24:b8:ab:1c:41:5c:08:b4:56:cb:10:44:ac:86:33:49:6e:de:
         51:b5:c6:11:8c:96:b9:c3:91:d0:ff:b7:bb:03:0c:16:c3:19:
         13:8c:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----