Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File:                     1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier:          4POAEGmunwjGVTFsBB9RTl81F+q4g2xwFNeWSXHEts8=
Subject key identifier:   D8:4A:F5:A0:0D:DE:34:5C:AF:51:60:01:6C:6B:6B:7D:72:0C:69:3A
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer:       /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial:       01962F3DDEAFC5DD5A87C80ACDDC66E77492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: M31CDxV0+HBD32wUkEIShAHbGnTi93L5ucU3ROaNAYo=)
                          2: JSqJ02JsxZMyq1FZ1Ds1WnAXfzM.roa (hash: FrjQUqzgc9bbbA26gpxWpuyB85Zjnu+GzKv9yBO8vww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:de:af:c5:dd:5a:87:c8:0a:cd:dc:66:e7:74:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=d84af5a00dde345caf5160016c6b6b7d720c693a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e5:99:99:52:84:38:32:8e:1b:d5:1e:d5:60:
                    e5:b2:d9:58:4c:7c:80:4e:6a:e1:d9:ff:4a:81:29:
                    62:33:44:4f:f8:fe:81:11:14:99:fc:1b:44:21:1e:
                    13:80:34:0c:ea:8d:4a:fc:75:e8:27:c0:c6:c9:3a:
                    27:2b:2b:98:8e:2a:24:8f:d2:a0:df:c9:d8:a5:5d:
                    9b:eb:6f:4c:7f:01:3d:06:ae:c4:c8:96:91:3e:70:
                    30:52:6c:5c:21:0c:28:f3:8f:0e:f0:4f:95:05:8a:
                    93:d8:99:39:3c:84:ba:27:13:d5:c0:d2:06:d2:f0:
                    0f:ef:e8:cf:5a:0d:12:72:ec:a3:d6:d7:dd:73:13:
                    67:84:05:e0:ca:e0:54:fb:f6:7b:90:07:d1:12:fa:
                    b6:02:04:55:c9:6d:a6:12:6a:ca:9c:d5:f5:7d:47:
                    6b:19:0f:e6:73:0a:a1:86:80:48:cd:cc:46:95:79:
                    b7:94:d4:1d:f6:54:9b:53:10:3b:9e:61:16:11:b4:
                    08:ba:88:a2:1c:d2:d7:70:45:6c:e7:82:b0:3e:ab:
                    4a:a0:8a:3c:f9:15:39:27:ee:d6:e8:64:3c:6d:f4:
                    32:0c:6e:1c:09:fe:06:4d:ee:95:63:ed:1a:97:93:
                    39:bc:cf:64:e2:ef:8e:51:b5:ef:6d:68:f7:9b:64:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4A:F5:A0:0D:DE:34:5C:AF:51:60:01:6C:6B:6B:7D:72:0C:69:3A
            X509v3 Authority Key Identifier:
                keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:d0:e0:08:ef:4f:f1:1c:8d:ba:df:a0:c5:76:6f:2c:b8:
         fd:5e:91:89:7c:de:85:49:e2:b6:1b:f1:cd:64:c4:f2:7f:f6:
         df:f2:a6:15:ee:89:9e:ca:0f:46:41:6b:e2:98:dd:9a:0c:ce:
         73:d6:29:58:d2:51:72:16:1d:9c:83:3f:76:0f:b3:47:f3:77:
         f1:28:f3:af:fa:6a:80:30:4f:49:f4:c2:b4:38:ed:c8:ad:1b:
         f3:45:03:77:35:c3:96:dc:70:57:05:d9:ed:64:0b:a7:e7:83:
         6d:04:31:83:b8:72:cc:20:76:95:07:cc:98:5e:8b:26:26:ed:
         ea:0e:cc:c6:cd:a3:18:b5:47:24:9a:47:e1:01:5d:b4:b1:7d:
         21:18:8f:09:d7:f6:ba:95:c8:0d:85:f1:3f:42:96:31:5d:21:
         c6:05:91:cb:e7:0e:d6:24:d5:ad:1d:28:9e:b7:51:75:99:53:
         4d:1f:b4:f0:c4:cf:81:92:8c:0b:a4:e1:ef:a5:8e:f1:66:e0:
         79:1b:28:e7:5b:b3:42:2c:80:f0:c6:fa:67:87:82:02:1c:71:
         68:73:fa:fb:c1:92:d6:c5:d1:94:77:7d:64:bc:49:8e:fd:e9:
         22:4e:62:ea:3e:7c:5d:a4:55:b8:1e:76:7b:fd:60:e8:9d:ab:
         c0:1b:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----