Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File:                     OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier:          trQar8GC29Mr8ysfclKMHfE5g6lUw7uT7tprpiS6+Ug=
Subject key identifier:   F9:F2:F3:3F:EB:63:23:CC:E9:03:1C:FD:FF:63:8A:03:42:4F:52:82
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer:       /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial:       01962FAB3F4C24FCD24200B209E73AC64E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number:          0961
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: 9APcYTdJYEaHfvbE3jky8ZwUE0EKsueqF2K9eU3TDpg=)
                          2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3f:4c:24:fc:d2:42:00:b2:09:e7:3a:c6:4e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=f9f2f33feb6323cce9031cfdff638a03424f5282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:89:4f:27:55:f3:54:94:92:7b:b8:41:e7:
                    f8:d7:1d:30:ea:6b:35:e3:8c:ec:d9:d5:8f:58:e7:
                    e1:10:f0:4c:89:8b:e9:db:9b:fb:be:ca:f0:8f:82:
                    f1:4c:6a:ed:7c:2e:0f:d1:0c:a4:1b:0e:7a:01:b2:
                    19:4b:f8:2f:69:cf:42:ee:7d:60:5f:c9:f4:9b:92:
                    98:35:e2:45:7d:c4:e6:96:c7:43:2d:d3:10:aa:73:
                    4a:f0:24:e5:33:c2:c1:e4:0b:b1:cb:7d:19:bd:e0:
                    82:a5:f9:f6:c2:9b:c7:1b:4d:ad:a3:bf:71:21:fb:
                    64:32:cb:85:87:f3:b2:eb:53:59:9d:66:a4:d5:2e:
                    9f:12:80:d9:a1:17:fe:6f:57:2e:86:7b:dd:61:02:
                    aa:e1:cf:10:9f:bb:51:8d:10:0e:5e:41:54:02:c4:
                    9b:54:9d:80:41:d7:66:88:2f:e9:c7:e2:05:78:b5:
                    9b:e7:d1:c3:d0:c4:ae:fd:8a:2d:a4:35:9a:98:72:
                    4e:bb:d8:d4:7e:6d:c4:7a:6b:55:98:bf:39:5a:37:
                    4f:67:30:da:65:6d:0d:68:9b:dd:ba:59:1d:60:e7:
                    33:26:c0:3b:a2:84:a2:27:b2:94:60:5f:91:09:ba:
                    32:c3:6e:f8:94:ab:c0:0b:0b:f8:10:c8:31:92:71:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F2:F3:3F:EB:63:23:CC:E9:03:1C:FD:FF:63:8A:03:42:4F:52:82
            X509v3 Authority Key Identifier:
                keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:33:f4:60:de:65:0b:c4:a4:5a:78:2e:af:31:55:08:97:8f:
         8c:bf:71:b4:82:61:0d:ce:61:3a:f8:cb:9b:a3:07:aa:ea:10:
         1b:51:c3:dc:96:19:de:15:de:cd:c1:18:e9:72:40:cd:f6:18:
         e2:f1:7a:35:d8:6b:b6:b1:0a:dc:fd:12:21:a5:4f:65:c7:c5:
         56:c0:b0:15:d3:65:6d:b0:fe:25:2b:e5:5f:dd:99:f1:c9:c9:
         38:8f:9d:f3:f1:a9:26:cd:8f:06:42:23:a8:86:30:2a:31:a5:
         d9:c3:44:72:13:e4:c1:6a:5a:a8:c3:43:44:d3:76:0c:ce:48:
         47:4f:b2:9a:18:80:f1:ea:95:d5:ed:f2:f3:d4:a4:ea:55:6f:
         42:ca:28:f9:ce:61:2d:c5:8e:cf:5d:47:da:5d:0b:24:ec:44:
         37:71:9c:7c:c6:f2:7a:bc:c3:da:0c:b2:16:1b:d0:2e:89:df:
         b4:3f:9a:57:7d:43:0c:d1:e5:d6:68:f1:43:e6:c6:98:da:b9:
         09:8d:fe:61:d0:93:c3:92:79:6e:06:b8:cf:a6:7b:32:a4:1e:
         4e:3d:3c:fe:23:d0:bd:bc:b1:f1:5d:87:d6:af:5e:47:e9:a3:
         26:81:8f:98:f3:0d:6c:d8:e2:c8:16:9c:b8:f1:0b:fd:82:41:
         f0:ce:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----