Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File:                     O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier:          ZRIClKbZW8ASt1VHZMAOPuES6EAP9LsKYXEpvNdBTjQ=
Subject key identifier:   EB:A6:90:F5:E2:F6:11:2D:B5:CA:9C:3D:57:3B:F7:91:1A:37:96:73
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer:       /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial:       01962F750DA80E00D8BD55504ACCAEC3A51E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number:          044D
Signing time:             Sun 13 Apr 2025 14:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:02 +0000
Files and hashes:         1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
                          2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: oTig0I9Nsm3S6bQAStCylBizrgjUxWxl15c4nmEH9gg=)
                          3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:0d:a8:0e:00:d8:bd:55:50:4a:cc:ae:c3:a5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
        Validity
            Not Before: Apr 13 14:02:02 2025 GMT
            Not After : Apr 14 14:02:02 2025 GMT
        Subject: CN=eba690f5e2f6112db5ca9c3d573bf7911a379673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:56:82:2d:8e:ca:29:69:3c:4c:6e:7c:52:
                    66:59:1f:27:24:2b:e8:cc:19:56:9c:c8:d6:b7:06:
                    3a:d3:07:e8:3f:d8:c7:41:5c:55:ce:af:62:12:f8:
                    f6:3b:61:f3:77:88:63:fb:73:4a:03:46:07:cc:08:
                    c7:31:4f:42:c5:ec:35:65:7f:15:ff:f5:18:88:77:
                    0d:9d:74:e3:8c:3a:9e:3a:ca:55:7f:21:1d:7f:5d:
                    cf:ac:6f:e6:66:b8:13:e5:12:3b:5e:a5:ce:ab:5d:
                    d3:2b:0b:e0:d3:8e:82:06:05:19:1c:86:5c:9f:99:
                    95:df:67:fd:b8:7d:05:97:72:80:60:38:58:ac:f3:
                    a9:ec:f0:d1:4e:9f:28:d6:d7:cd:d0:af:e5:8a:28:
                    9d:9e:84:25:77:c8:80:9e:62:b5:0f:28:e8:5f:73:
                    04:0d:e3:62:27:27:b1:8a:ca:c9:b8:af:99:63:e2:
                    05:1d:56:d3:7a:84:b7:45:72:73:56:77:cb:29:a2:
                    ec:4e:80:dd:7f:83:26:9d:04:a2:7f:b6:04:ba:a6:
                    0c:6c:fc:f7:f9:d7:15:2a:f7:0c:f1:22:48:40:cc:
                    23:ed:60:36:ec:08:16:70:f2:5b:7c:44:c5:39:c9:
                    ab:f4:b3:de:a9:cf:b9:cc:23:ba:e1:c1:7a:e8:2c:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A6:90:F5:E2:F6:11:2D:B5:CA:9C:3D:57:3B:F7:91:1A:37:96:73
            X509v3 Authority Key Identifier:
                keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:7d:54:63:d3:73:25:6e:79:05:3d:dc:dc:31:d9:22:c8:
         41:d1:52:bf:86:6d:31:c4:32:56:12:bb:3d:52:47:31:fd:6e:
         53:91:57:3a:50:34:be:1c:67:68:7d:db:ec:82:e7:17:0e:66:
         d6:22:75:f6:69:ed:fe:63:e3:46:b1:a4:2f:e9:fa:1a:f8:ef:
         da:d6:f6:fc:ea:f7:08:7b:1f:41:94:5c:7b:6e:82:c8:99:f7:
         86:32:f3:e9:76:09:3f:dd:d9:f0:17:4e:1a:9b:0d:83:59:50:
         a8:6a:ee:6d:d4:51:0a:2b:69:8f:8b:fb:d1:16:89:0e:77:0b:
         f5:ed:4e:88:f5:2e:7b:0a:db:00:20:f1:eb:8c:64:3b:cb:b2:
         44:fe:ad:5e:b6:2f:6e:fb:70:18:b4:f5:c2:38:41:75:5d:1e:
         7e:32:8e:5b:64:b2:9f:d6:c6:b0:38:01:0d:65:27:9f:04:d6:
         7c:e6:ab:e7:81:59:3c:97:ba:cd:f8:71:b7:bb:96:0f:7a:a7:
         09:2a:c3:ad:97:3b:f7:02:e8:de:2b:fc:75:da:e6:56:ca:fe:
         47:a2:3d:cf:67:3f:b9:ea:f0:5f:71:c2:f2:3a:1d:e1:86:ea:
         26:8e:f0:23:8e:ce:85:af:16:11:73:19:6a:10:39:f7:00:44:
         79:f6:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----