Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File:                     OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier:          Id8QdkUV1RajEUimltbHzLTZR5hL7AxaUp0QkvB5VYU=
Subject key identifier:   13:7A:3F:1D:8B:19:2B:AA:7F:9C:79:7D:BE:9C:C3:38:85:E9:52:32
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer:       /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial:       01962F3D8EA3566C2BF0E27DDC4525796E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (hash: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=)
                          2: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: CrqadHid+SiREjx4shKAJUrYMJlIOLWxbAlPSg71OEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8e:a3:56:6c:2b:f0:e2:7d:dc:45:25:79:6e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=137a3f1d8b192baa7f9c797dbe9cc33885e95232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:cc:3e:5f:57:99:d1:80:52:14:f0:16:45:
                    bd:aa:3f:e3:e0:ba:2e:8c:54:34:f2:c5:c4:6c:54:
                    72:5a:11:7d:35:fa:fe:17:e7:9a:9d:8d:df:93:c0:
                    1c:b0:13:4b:35:d3:83:5c:67:d8:95:74:ef:78:41:
                    a4:ec:08:e3:d0:c0:f1:02:2e:19:4d:78:56:07:c6:
                    15:fa:b2:b7:2f:47:1e:b4:fc:e9:76:c7:9a:0f:4e:
                    11:9b:9d:3d:24:00:e9:ac:97:ba:ea:b1:ab:aa:32:
                    19:02:d3:95:2b:55:12:84:18:5f:dc:04:1c:89:e1:
                    ed:6c:2a:7f:87:93:1a:67:fb:6d:f6:34:18:f6:f5:
                    ac:25:a9:7a:fc:aa:6c:2f:d3:8a:3f:56:50:45:93:
                    5c:a5:b4:e0:6d:56:ff:14:bf:df:64:87:44:18:c0:
                    f5:1a:77:9b:73:71:8e:17:1c:cd:f8:60:f8:0b:77:
                    52:97:f2:af:fc:1f:42:80:0b:a8:74:a6:53:aa:6f:
                    0b:66:4f:04:17:ce:7d:d8:ec:48:1f:94:76:b3:01:
                    7a:5a:61:be:cb:f7:79:81:a3:7e:e8:3c:d9:c9:96:
                    b8:0b:8f:ea:fb:dd:97:65:ce:77:23:91:36:77:24:
                    72:36:80:98:eb:5b:6a:62:fa:ff:0b:3a:10:71:fb:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:3F:1D:8B:19:2B:AA:7F:9C:79:7D:BE:9C:C3:38:85:E9:52:32
            X509v3 Authority Key Identifier:
                keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:fd:14:a9:47:d1:31:1c:e8:8e:20:d9:c4:9c:dd:4e:14:
         70:1f:6f:da:c9:38:57:6f:5f:d5:d1:0a:1e:9c:6e:cb:a8:7c:
         d2:a4:11:d7:62:35:a9:36:9d:5b:66:cd:da:e6:6b:0c:1c:1f:
         b3:41:9a:2d:b6:c3:20:e4:18:5b:a4:21:9d:d7:1d:7a:41:2b:
         05:6e:6a:28:dd:58:c8:40:5d:24:0e:37:ad:b3:fc:95:74:a6:
         52:46:47:2c:79:06:ee:8e:f6:c0:93:75:c3:f6:88:81:d1:85:
         80:3e:a2:a5:cb:61:52:4f:a6:bc:e5:5f:6a:f0:ef:88:20:f8:
         8d:61:af:c4:ec:1a:5e:44:74:74:f3:b7:f9:5c:bc:36:60:1f:
         51:a4:4e:14:27:dc:ce:5b:cc:cd:52:80:34:bb:e4:73:71:cc:
         5b:92:28:ce:dd:db:c1:9d:25:1b:64:dc:28:1f:ba:76:45:9d:
         62:54:f4:22:94:91:4f:9e:33:bc:0b:ec:4c:20:a1:f7:5a:ac:
         53:64:38:00:32:a9:88:16:c1:99:72:eb:6b:9e:84:d6:bb:34:
         06:18:e3:82:72:55:16:c7:4a:5d:dd:d1:5b:68:12:7e:76:6e:
         39:2e:e1:74:75:e5:83:03:ae:76:58:66:fd:7f:1b:9d:1f:e1:
         6e:cb:cc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----