Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
File:                     OZETdfzEhZYSGQ6-zHrjcaAaam0.mft (raw, json)
Hash identifier:          vkw6TIAPiOf4ba8KhPFPWCULo8i55GTuVtSyuVYUc9c=
Subject key identifier:   14:58:68:EF:E1:35:AD:57:38:69:5F:C3:74:4E:47:C0:99:72:92:8E
Authority key identifier: 39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
Certificate issuer:       /CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Certificate serial:       01962F3D4466E8F38362BD699A29A9CB9BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
Manifest number:          0E13
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: OZETdfzEhZYSGQ6-zHrjcaAaam0.crl (hash: iyH6gBQdpWWrGjhNGmlZsi3qNiOz1eLof9IBurnuPtE=)
                          2: mV-huyQ7uf2YxiJ1JUpDypBxzhA.roa (hash: XQgQ9aC7Ey76psDYNwOwzM5lgNTkkh3rEJlv1Rte2h0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:66:e8:f3:83:62:bd:69:9a:29:a9:cb:9b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39911375fcc4859612190ebecc7ae371a01a6a6d
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=145868efe135ad5738695fc3744e47c09972928e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:93:ed:b4:e4:ff:7e:a8:70:c8:77:8e:a5:
                    39:bd:f3:1a:dc:e2:9f:1d:6f:41:eb:e6:7e:04:34:
                    74:83:78:01:4f:76:72:e5:bb:01:a8:c7:37:44:b7:
                    1f:37:31:25:83:36:c2:cc:8b:2c:a7:ce:51:a2:92:
                    02:e4:34:4a:62:8b:dd:97:36:af:00:51:90:e0:53:
                    d7:52:cf:d3:46:b5:d3:f6:0e:ba:e9:cb:25:d4:91:
                    30:2d:ea:fd:9e:04:6a:29:7c:ca:42:e6:83:88:8d:
                    5d:98:54:1c:e1:51:74:91:81:e3:bf:e1:a6:84:5b:
                    ac:7d:6f:8a:a6:93:f8:f2:4f:89:60:51:7b:c0:eb:
                    93:77:cb:f7:81:d8:97:60:5d:c5:e2:ed:1b:9e:62:
                    40:3f:97:22:c9:1d:71:0a:6f:8c:17:ca:a2:6b:e6:
                    70:5f:00:df:b4:97:80:8f:6c:34:56:b3:c2:7c:b9:
                    13:6d:41:42:e8:8a:f5:f1:e8:b3:96:56:0a:2d:c0:
                    43:3b:7f:24:e2:9d:67:c5:e8:c5:ed:b5:ad:f6:77:
                    78:de:11:7b:da:7d:f5:82:8e:ed:41:03:6a:a7:d7:
                    40:7d:0e:55:a9:79:4c:f5:d0:f8:4b:53:22:06:55:
                    06:83:18:47:54:97:e6:07:2f:45:90:12:7c:68:7b:
                    3b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:58:68:EF:E1:35:AD:57:38:69:5F:C3:74:4E:47:C0:99:72:92:8E
            X509v3 Authority Key Identifier:
                keyid:39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:1d:5f:60:ee:4d:00:7f:8c:b1:65:be:8a:30:66:b0:87:
         24:17:26:9d:98:68:47:d2:6e:e5:7f:0f:ca:61:af:c5:21:73:
         c6:e4:bc:f6:57:97:36:3a:7a:70:b7:76:01:e0:39:39:4f:e1:
         44:02:e0:fc:c9:27:bd:5b:7d:c9:f3:e6:c6:40:e0:52:8d:72:
         48:73:a4:a3:e9:a3:e5:42:af:f8:65:c2:0c:1f:b7:ce:54:67:
         36:96:ac:4b:ab:6e:03:55:b4:20:36:15:8c:a1:4d:2c:33:10:
         fa:c2:6c:0c:e5:7c:1a:6b:81:77:cb:07:ac:84:d6:79:c2:3c:
         06:c2:28:81:ca:78:1e:b4:90:15:b9:c5:81:9a:06:95:00:da:
         2c:be:70:2f:2d:83:e5:ff:f6:94:b2:f3:86:5d:53:05:34:12:
         4e:e9:e6:e5:89:ed:38:2d:0c:68:6c:be:20:cf:fc:2c:b9:84:
         95:7e:3a:df:21:21:1d:39:d4:d2:7c:b0:6f:24:dd:f3:46:a9:
         dd:00:73:a3:d5:6d:a1:1d:da:db:fc:b7:54:fa:f5:25:7b:18:
         32:88:a0:91:4e:72:1f:0f:d0:47:32:db:eb:8d:76:42:32:c5:
         f9:dd:a0:0d:59:16:8a:ba:17:c8:bd:c6:4d:f0:ef:98:c4:05:
         0c:77:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----