Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
File:                     OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft (raw, json)
Hash identifier:          QjreCZhcj0uuw376V1PsC0SqiTywZgUlW3nB3ZhWm0I=
Subject key identifier:   4E:E4:98:A8:6E:4D:E7:39:4D:B5:7E:E0:E0:4C:B7:43:0A:EE:77:D4
Authority key identifier: 3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
Certificate issuer:       /CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Certificate serial:       01962F06E167A9D1CDDD0732EA48AE57987D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: 0wAgKVyytNbhNR-_RR1IsIpFFy0.roa (hash: hGr01I8nbqs/LJEbN09Cfzd/lbJVo6JwWOtLmEfD1wA=)
                          2: OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl (hash: w+e2O9wsuCl8AV7FQuSRNPfc6K1KUidjZDT59EC08ms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e1:67:a9:d1:cd:dd:07:32:ea:48:ae:57:98:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a40ff154c453943a0b02aa65021c9c264947c2b
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=4ee498a86e4de7394db57ee0e04cb7430aee77d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:dd:cc:91:af:e0:2e:a2:94:f5:1b:bd:ab:
                    c2:d5:bc:90:49:de:08:97:ea:ab:e3:8f:90:2d:c4:
                    a9:93:ab:1d:05:56:f1:f8:d4:ec:c1:d0:73:2f:63:
                    26:d2:45:2b:65:98:a8:f7:1a:68:2c:ca:10:e1:83:
                    2f:80:1e:db:17:56:02:42:a9:ac:ec:81:82:ea:e6:
                    0f:86:3c:2b:b0:49:b6:67:d2:bf:c9:2a:25:bf:b8:
                    96:0b:e0:8e:f7:a4:4f:0a:93:7e:31:1b:c3:fd:94:
                    f6:33:01:cc:49:d4:82:82:ff:3f:28:83:61:18:4f:
                    a5:5d:2a:8b:86:11:9b:77:e1:8c:21:0f:ed:5c:56:
                    23:1e:3e:38:8f:17:15:99:5a:df:9c:0a:ed:e8:1f:
                    cb:8a:e9:af:bd:84:e5:8d:b2:97:aa:0d:24:fd:da:
                    a8:98:d4:59:e5:9b:78:56:cc:fa:cf:be:55:a9:7d:
                    ff:19:5b:b7:3a:7d:92:7a:54:16:93:0d:fe:71:77:
                    e5:7d:c0:14:10:f3:ea:7a:90:30:a8:f4:73:4f:01:
                    0d:9d:90:94:30:7f:44:d8:4d:8c:33:fb:63:0f:18:
                    df:ed:7e:e8:96:c4:6f:58:3c:26:eb:1c:46:c3:a3:
                    88:89:89:28:43:66:d8:a1:47:08:54:bb:14:f6:18:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:98:A8:6E:4D:E7:39:4D:B5:7E:E0:E0:4C:B7:43:0A:EE:77:D4
            X509v3 Authority Key Identifier:
                keyid:3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0c:3a:ab:ab:6c:39:61:f3:54:76:0c:25:e8:05:b9:4a:65:
         d3:79:32:12:b4:ff:85:36:e3:a5:36:a1:1c:69:35:a0:6a:7a:
         62:d6:d7:c9:6c:f4:45:16:e3:2c:e4:b6:7a:72:f7:0f:f6:2d:
         cf:6c:8b:68:33:ee:d5:48:8c:9d:17:c1:32:86:7f:3c:3f:b8:
         d4:c6:d7:9f:41:e8:99:89:e6:ce:7e:73:fe:38:e6:2f:c5:f8:
         f5:cb:48:4a:4a:2a:e4:19:78:2e:0b:42:e0:aa:d4:23:a7:de:
         67:1c:38:e4:ef:52:77:6c:20:e1:10:0e:c5:ae:3b:9f:d2:51:
         f1:f4:d4:40:fa:8c:a5:56:32:96:27:cf:0b:62:47:13:0e:db:
         00:13:83:73:6d:1f:b1:47:6d:5c:4b:18:7d:5e:a1:81:be:fe:
         f7:a2:03:ab:76:69:c0:29:2b:af:91:2e:98:aa:d5:e5:c4:d4:
         23:f5:11:f4:c3:56:3a:ae:3f:b0:25:35:67:7d:08:31:af:48:
         ba:85:c8:ff:93:9a:14:54:5a:9f:b1:37:0d:78:d7:ef:43:b8:
         d0:ef:e8:e9:c7:84:9a:39:a8:c3:97:5c:e3:67:17:59:d2:c5:
         f8:ae:bd:69:4d:c2:c4:4b:b0:39:ad:b2:be:f3:cf:d1:21:48:
         27:62:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----