Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
File:                     OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json)
Hash identifier:          OM9wv9QYcrRBUh79zN+QmPTGvIjj6Oe7/HVH5VpoIMA=
Subject key identifier:   BA:72:4E:8F:34:37:90:BC:D7:87:76:02:65:CD:D5:A9:64:10:65:A3
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       01962DF419540D8677AD7D8A1C43BAD1867D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=)
                          2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=)
                          3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=)
                          4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=)
                          5: MP0FknZx-rt-jXqxm1yu7mNghjg.roa (hash: 0IVLTHz5qrQC3E0s/+3I0aF+dTWKqMK9+O5p+t6rJac=)
                          6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: 0K+9/leeHSSW+icydjNNk495ucNegYk3hZRB8cx2IsQ=)
                          7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=)
                          8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=)
                          9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=)
                          10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=)
                          11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=)
                          12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=)
                          13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=)
                          14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=)
                          15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=)
                          16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=)
                          17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:19:54:0d:86:77:ad:7d:8a:1c:43:ba:d1:86:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=ba724e8f343790bcd787760265cdd5a9641065a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:e4:b8:b7:3b:de:6b:6b:93:45:0d:d8:29:
                    ab:64:a6:1f:97:a3:5b:0e:ba:40:a6:29:66:dc:f9:
                    7e:df:9b:46:b4:04:0a:f6:bc:f8:d6:ec:20:3f:00:
                    fb:64:2e:c5:e2:e3:9d:8a:4b:93:8d:e6:0e:c2:3a:
                    53:af:7c:ef:40:5b:4f:0d:db:69:11:ed:f3:d6:39:
                    59:0d:7d:c5:c1:cd:45:27:0d:de:92:5f:98:2c:cb:
                    d2:ea:04:75:f0:79:51:4e:63:01:e7:19:25:38:64:
                    aa:9f:b6:05:fb:db:7a:a5:15:f7:c5:77:a4:e6:d0:
                    80:b0:ac:1d:9a:d4:a0:fd:4d:15:11:c1:ea:e6:34:
                    81:35:72:84:85:cd:fe:e0:5a:f7:60:4f:8c:23:77:
                    91:56:48:00:5d:f9:22:c6:62:cb:a0:2a:3a:c4:6f:
                    74:91:ff:b6:27:72:de:d5:0e:6e:f7:bf:45:c3:97:
                    5c:0e:ee:9f:20:63:e3:2c:9f:ad:1a:aa:56:fd:fc:
                    71:0d:26:b3:5d:ae:de:a0:55:d9:36:6e:10:82:b5:
                    e5:3c:aa:ec:8a:ed:0e:a8:bc:25:7e:42:28:ad:df:
                    58:38:4a:d0:9c:61:8c:c5:39:6f:3f:08:88:9f:23:
                    e1:f0:44:e4:e7:8b:3f:b9:99:0a:12:da:10:48:3c:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:72:4E:8F:34:37:90:BC:D7:87:76:02:65:CD:D5:A9:64:10:65:A3
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5b:e1:a3:c6:bb:db:ce:35:66:f9:30:a8:23:c6:00:2c:a8:
         57:08:9a:4e:70:94:3f:3c:6a:d0:dd:76:29:20:e3:fa:c5:24:
         16:66:98:1b:2a:d2:fa:3e:bc:08:ff:76:c4:32:22:b6:47:51:
         a9:57:47:c3:9d:5a:66:20:db:d2:1f:90:bb:44:48:e5:b5:f2:
         2e:1c:73:83:f0:78:76:7e:73:01:cf:6a:57:9c:08:20:5c:4e:
         bb:f4:2d:1d:d2:2a:d7:2f:a3:66:62:9f:90:08:65:87:35:a5:
         22:59:10:2b:1c:66:39:3b:fc:49:57:ed:e7:56:7b:d0:e2:4a:
         38:ff:5c:34:b0:bb:77:b8:f7:6d:b9:0d:5a:1c:46:25:c5:c1:
         bf:9a:f7:ac:3c:db:b0:87:b9:70:15:ec:eb:ea:2b:c8:3b:6b:
         16:02:ab:07:51:60:f8:47:96:f5:99:06:51:3f:f0:58:a6:12:
         17:95:7d:00:34:e1:ac:f6:87:17:e6:7c:37:fe:79:79:64:b5:
         75:26:9f:2c:2e:08:92:a6:b6:ba:b4:82:a1:62:02:1e:c4:eb:
         8f:e0:24:51:2e:bf:39:89:2c:0c:db:7c:87:7c:aa:19:1c:38:
         53:55:c5:ab:b5:fa:a5:0e:43:a6:98:b0:95:ba:fe:b4:3a:3f:
         28:6c:f6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----