Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File:                     OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier:          20cWuIOlFO0lPIBzBAq9bh77v3xAtY5VUAAGArDkhJI=
Subject key identifier:   5A:D2:F3:3F:77:46:23:43:BA:BD:04:FB:F9:5C:F3:9A:AC:19:19:C6
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer:       /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial:       01962F7441DFE13DFF102512341C687009A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: BnrxL-Ur42kihA32O4JXiXZBN8E.roa (hash: au6tBTrdwYycWLV+cOCZ8jXfmlb22WJOhmDS5f3OYxY=)
                          2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: 9Ec3lIJowKS2LglmVCfILTR2CbD2T2dGJpqF9uJp/wc=)
                          3: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:41:df:e1:3d:ff:10:25:12:34:1c:68:70:09:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=5ad2f33f77462343babd04fbf95cf39aac1919c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:0d:47:4b:90:55:08:c7:52:ac:2c:fc:04:
                    9e:51:95:0d:11:a0:44:37:96:a9:f0:89:31:e2:be:
                    5d:44:55:2e:a6:76:68:be:ff:81:96:62:af:38:16:
                    7c:62:bc:1b:7b:7b:06:f8:25:18:0c:31:5d:8b:fa:
                    0e:60:93:94:74:88:b3:de:93:e2:3f:6d:20:10:b2:
                    bd:a5:8f:8e:c8:c5:40:d5:ea:df:86:d8:39:a7:7f:
                    0a:00:93:42:39:55:f5:a1:b6:2b:a6:24:98:1c:dc:
                    8f:36:fe:6e:9e:01:7c:01:4c:1e:11:0d:92:6a:59:
                    bc:6d:08:08:77:79:21:1b:60:a0:5b:e5:67:26:2d:
                    5a:e9:9d:25:c1:15:87:9d:56:f3:f1:e2:8d:62:31:
                    b9:9d:90:75:d2:64:37:72:d0:a2:c5:c5:79:e8:7d:
                    5e:53:de:f8:bf:b5:f4:5e:0e:20:10:2a:db:ff:33:
                    aa:5d:5f:e2:7f:03:fc:88:be:60:bf:ee:93:d6:97:
                    5d:f6:56:22:57:bc:4e:9c:fc:6e:99:7b:b8:32:de:
                    25:c7:45:da:d6:97:1b:dd:ab:e4:87:ac:1a:47:56:
                    b2:0c:a7:3a:56:0f:02:c2:e4:c5:0a:06:75:b4:85:
                    05:01:db:5f:27:3c:d2:da:33:fe:0c:2a:6b:30:ca:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D2:F3:3F:77:46:23:43:BA:BD:04:FB:F9:5C:F3:9A:AC:19:19:C6
            X509v3 Authority Key Identifier:
                keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a5:34:68:fb:b8:7c:e7:a6:df:61:3b:ee:3a:09:89:15:26:
         53:90:89:6b:18:e5:c9:a6:a3:67:ac:fc:30:3c:86:3a:7e:a9:
         5d:43:c1:60:fb:ee:c0:13:23:dc:d1:8a:10:2d:5f:ae:56:fc:
         d7:d1:b8:72:74:df:25:27:d8:e1:58:af:15:7d:4e:29:63:66:
         36:6d:90:a1:d3:7c:ab:0e:99:68:53:88:e3:2f:7a:b3:e6:45:
         4f:88:9b:8a:7f:cc:e8:5c:12:1e:0a:bd:58:46:ca:92:66:b7:
         79:2a:7b:12:8e:fc:6d:e4:50:d0:ef:3b:08:49:f0:5a:72:e2:
         5b:15:f5:be:1c:6a:05:01:96:85:73:c2:76:56:97:49:06:11:
         86:4b:6c:96:b7:f2:91:5c:98:19:4b:93:d2:bc:f4:a5:3b:4b:
         c3:97:26:f5:e3:51:7f:44:91:fc:44:28:d0:5c:2d:ca:12:ed:
         6b:c6:4c:68:50:dd:8e:a4:81:3e:68:22:bd:39:2d:3c:54:e1:
         1c:cf:a7:a2:06:72:9e:c9:9d:9f:20:b8:b6:4d:95:e1:0e:70:
         83:99:bf:d9:c0:cb:c6:be:9f:24:59:60:d0:fc:1b:4e:78:23:
         a9:90:4f:b1:cd:e8:37:f0:7e:b9:b0:14:6d:ef:28:8d:e1:6f:
         89:39:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----