Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File:                     O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier:          7RWUPfKOMhP2D58VIKUmJPZzYJnvDQd4HaIczM1nSNY=
Subject key identifier:   29:37:4A:C0:0F:64:C0:09:B0:50:B6:B0:C6:04:E0:F5:4D:F3:CB:A1
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer:       /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial:       01962F067BAC39E64600C25F5E4D4505368D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number:          096B
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=)
                          2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: hESg4j7DPr54ZK7fPvOIKdzuMkWVLZJ2c9N8qzuPHv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7b:ac:39:e6:46:00:c2:5f:5e:4d:45:05:36:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=29374ac00f64c009b050b6b0c604e0f54df3cba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:c9:73:91:69:7b:8d:c7:78:b2:97:d7:aa:
                    24:ab:3a:2a:ba:f1:dd:5d:fb:ff:c2:17:c9:ac:f3:
                    bf:f8:76:8f:57:92:4d:6b:9d:d3:f2:24:8d:31:82:
                    1b:17:89:19:3d:58:31:4a:42:30:d1:49:2b:50:09:
                    0d:5f:6d:c4:51:9e:02:d0:e4:50:5b:e4:c0:6e:7d:
                    83:c8:0b:4f:2f:7f:e4:1c:1a:c8:74:a8:ab:23:ed:
                    90:2c:fd:27:4d:05:8c:4d:16:22:6e:93:1a:58:56:
                    18:36:49:d4:ef:49:e8:0e:18:d5:42:49:18:73:77:
                    47:a5:b2:6a:3e:24:2d:2b:6c:2e:c0:63:9e:26:85:
                    60:75:72:b3:ae:59:a4:2d:6e:47:51:27:be:d8:22:
                    23:52:f1:5c:ce:c3:d9:e6:f6:a4:6e:51:a4:ed:7f:
                    fb:37:2d:ad:ec:70:58:2e:44:c2:3c:4f:1c:74:29:
                    21:5d:bc:7d:95:66:b0:29:ae:2b:5d:4d:6e:84:5f:
                    54:11:82:6a:2f:ab:de:3e:7e:94:20:25:78:e1:f4:
                    a5:4e:15:d9:c8:2a:01:93:c9:d8:95:f5:c9:23:a2:
                    21:54:97:58:71:ad:ff:e1:04:30:30:8a:1e:7a:61:
                    c2:37:f8:c2:db:18:f7:d4:b3:45:d2:7a:77:00:8f:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:37:4A:C0:0F:64:C0:09:B0:50:B6:B0:C6:04:E0:F5:4D:F3:CB:A1
            X509v3 Authority Key Identifier:
                keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:fc:2e:fd:b5:b0:02:60:56:45:d8:35:fd:fb:57:99:c5:
         ed:89:63:c9:32:7e:21:37:85:8d:78:68:c3:b3:57:6b:0f:b3:
         3b:76:e3:a4:c6:89:e6:30:98:4c:ac:69:5f:16:98:39:17:f0:
         80:62:22:f3:d2:3e:d9:25:f6:a3:4a:1a:7d:76:b6:28:29:0e:
         87:17:98:72:a5:98:ff:d3:a0:53:47:bd:74:19:26:28:49:45:
         b6:1e:11:c5:dd:b8:74:90:bb:99:b0:71:58:b6:45:3c:48:ff:
         06:51:b7:f6:2a:f8:56:39:51:31:ff:37:46:94:ab:49:a1:1c:
         e5:8d:78:cd:b0:76:9d:70:15:72:cb:2c:6e:a3:4e:46:31:bc:
         f2:4a:e0:33:e8:d2:9c:c5:19:a8:91:bf:05:94:98:4c:c2:cf:
         37:06:eb:e5:dc:2e:f0:d1:34:e5:02:08:d4:a6:20:31:72:c0:
         5e:31:d1:5a:6a:80:c6:64:60:84:d2:01:83:10:7e:43:cb:59:
         a8:5f:28:ae:bb:a2:5a:81:8d:28:7c:9b:ed:05:5d:b4:ec:7b:
         2c:b8:ea:74:8b:6a:25:df:11:9e:fa:5e:9f:8f:69:09:1a:43:
         5e:9e:fc:f8:e7:11:e2:65:c5:ab:2e:7c:d5:9f:bf:d1:e4:41:
         ac:ae:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----