Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File:                     O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier:          2URvaJCGMnANX+T3xMz78+JnWnxj+WkXw9Wn5LAjqMI=
Subject key identifier:   02:51:CE:D7:D4:6A:26:E0:31:92:FC:48:35:D4:22:29:E6:E9:67:D2
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer:       /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial:       01962FAB9441185DBA83437DA81B6C6AEC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: 9BmVkWHqnPagXm5os2wnNWK9INk.roa (hash: 8RngoNykTFTJnIq5oyzFYRTf3TP7cyLKV5cry6M5mgE=)
                          2: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: qD0hZXlwIh2R6vUZ3rKFf+yyQV2sJxpuRGxx8D/ZVq8=)
                          3: UceenS0AW37r9tIac-IPww_60R8.roa (hash: V8RGgQn1l8C/6JS3VLbt67ThWSSYzYF+1zDXdf2gvmc=)
                          4: XMfgeWsouW7zDItYh1JZ2jjj45k.roa (hash: vbzvSSJRPNTDibm8O4OpKJZcb0gn8EqIPSb4vf2O1YQ=)
                          5: bfaBM6FlZYXa4nbuYDgVUb-kZ3Q.roa (hash: xgsMr2NauAKQSxWJwA/kjcmJfb7a4hHGqMdZNQtzfIo=)
                          6: ect9rt1iTOwU4l499MLwvhBDleI.roa (hash: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=)
                          7: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (hash: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=)
                          8: n15MEYNvv2pMvnP0JWDh9ke-rMw.roa (hash: a5c2NX6rzpDN08ss2QyMsYiZjq6GT9uV8kCAFrcH1WA=)
                          9: wb50_D1ewkMOUFxLDz2rdaS7yFE.roa (hash: oMtAJWBhFmyN0NJmKrxaTP7Y/Gbn/GmAXozjV5Dt6I8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:94:41:18:5d:ba:83:43:7d:a8:1b:6c:6a:ec:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=0251ced7d46a26e03192fc4835d42229e6e967d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0a:1a:0a:27:11:36:a6:6f:58:3d:92:27:33:
                    ae:e0:0b:d6:40:f9:4d:f3:27:d9:df:f8:ef:37:80:
                    9a:7e:6f:72:04:b4:6e:be:e9:70:9e:b1:a5:da:f3:
                    3e:3f:f3:70:7f:05:be:98:6c:0c:aa:10:73:76:b2:
                    cc:63:23:fa:d2:67:22:0a:4a:07:e9:37:4d:08:b8:
                    a1:22:e9:e7:c3:7d:3d:74:36:84:b4:22:14:d2:80:
                    39:c8:f0:96:ca:00:d8:54:96:44:4d:48:a7:da:87:
                    24:66:23:61:53:d0:13:71:49:da:43:8b:bb:c3:6a:
                    cd:ac:4d:02:4c:4a:d4:61:69:b4:af:53:b1:55:c7:
                    97:ca:64:60:4a:0d:05:96:e6:d4:d5:4e:5a:e0:03:
                    56:1c:13:42:b2:53:e8:25:72:85:ce:ef:37:2c:ec:
                    35:4e:35:7c:60:47:94:d2:63:c5:5b:46:63:52:01:
                    bf:ed:b1:61:7f:99:f5:c4:83:12:16:c4:cd:11:da:
                    21:de:f3:41:02:da:53:91:cf:1c:05:c6:89:c2:cf:
                    fe:c6:2d:8f:81:91:13:d9:b9:59:46:e0:7b:93:ae:
                    c5:70:93:d7:52:d7:b9:0b:98:48:94:de:37:07:b6:
                    b2:73:43:29:d2:7a:47:54:d3:41:5e:7b:20:de:7b:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:CE:D7:D4:6A:26:E0:31:92:FC:48:35:D4:22:29:E6:E9:67:D2
            X509v3 Authority Key Identifier:
                keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:c6:a0:50:15:2f:dd:d8:55:6e:58:5c:3f:ef:74:34:99:
         54:52:e2:03:1a:1a:b6:d3:48:48:b8:53:59:d7:18:3b:93:76:
         e5:95:c2:65:9c:38:a3:fb:1c:68:2e:c6:14:fb:b4:47:ef:48:
         6d:f7:42:97:e6:03:65:58:5b:ee:40:69:f9:d9:a0:f7:95:b8:
         99:92:7e:dd:d6:a0:21:ae:b9:b5:bd:5c:74:40:93:c9:7a:21:
         37:e3:b2:d2:86:34:cf:af:a5:18:e0:b6:70:8e:44:f5:5f:5f:
         cf:36:e5:30:87:78:18:61:12:bc:09:4a:d4:d2:25:3e:87:e4:
         a1:57:9f:a2:97:15:0a:67:cd:06:d4:74:1a:46:7a:96:99:e5:
         4a:9a:8d:a9:c5:5c:be:95:96:e6:93:5b:06:d7:73:2e:16:f9:
         26:61:50:5e:7b:30:c1:62:c3:d9:8b:6f:14:12:b0:a2:82:97:
         24:7c:dc:be:df:62:b8:17:5c:2c:d7:26:7a:b4:b0:a6:8c:71:
         c4:7b:51:cf:e8:e0:32:33:65:f2:4a:25:95:d6:65:ab:7f:d0:
         9b:52:f0:33:fe:85:b2:bc:d1:47:14:32:cd:7e:06:6e:c9:2e:
         da:4e:d3:2f:25:0c:11:22:80:b2:ae:8b:4b:64:36:ea:2f:90:
         79:58:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----