Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
File:                     OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json)
Hash identifier:          siqF/7rCZXPO1VUOJvglq2j607YUlbGbjZeF+WQZHtg=
Subject key identifier:   0B:B7:7D:AA:E1:0D:99:54:E7:C4:E9:D2:B9:3A:E4:A1:28:E4:69:9C
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Certificate issuer:       /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial:       01962FAB6AA1BD90ABE5B1F41055E0D7C3DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
Manifest number:          028E
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: mRXINp2ocdQhvopzaryk+khQDqLIsijKS7w4VHD2/oY=)
                          2: c6YXeFcziXYV8oA7IxxFWWIl7jo.roa (hash: 772kO8FIL8B9L379YEWTLwC21iJYKEhsMHuMIDdHwY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:a1:bd:90:ab:e5:b1:f4:10:55:e0:d7:c3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=0bb77daae10d9954e7c4e9d2b93ae4a128e4699c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:5d:89:3d:21:19:a0:84:98:1e:bd:c1:6a:
                    b7:c3:13:6d:3f:6e:62:d4:eb:d6:69:53:47:6a:51:
                    dc:26:d7:5f:8c:9d:28:63:3f:99:10:58:d9:7e:2c:
                    20:23:7f:57:6d:43:b8:cd:a9:e7:1f:eb:e5:91:e8:
                    aa:d9:36:05:7a:d2:6f:78:35:7e:8a:9a:9f:e6:30:
                    6d:c5:94:76:88:27:02:1c:80:6c:ee:c5:7e:9e:83:
                    f2:89:a6:7b:48:91:5d:6a:46:f4:36:30:03:cf:47:
                    88:4b:f0:2a:2a:7b:f8:c5:15:43:61:99:0e:61:5b:
                    97:98:2f:10:18:7b:45:9b:9c:9f:d6:b3:7e:1d:d2:
                    e1:a6:c9:e1:63:4d:a3:54:a7:2f:7a:ee:d7:61:dc:
                    04:c8:a0:0c:ea:dd:f6:54:a5:fb:4f:77:91:ff:28:
                    e3:c6:07:54:9a:34:46:f6:13:48:91:5f:31:79:d6:
                    be:e9:cf:9f:05:28:0c:9d:92:8c:9e:f1:5c:e1:30:
                    98:b2:71:5f:d5:17:70:b7:fc:e3:93:6c:d8:8e:c0:
                    04:94:61:bb:cb:4b:71:e0:29:01:e5:77:7f:de:31:
                    e0:5e:0c:f3:4c:7a:5a:15:0e:3f:ac:cb:e5:fd:6d:
                    b5:f9:2f:29:a8:09:18:62:33:8d:ae:62:e6:4e:05:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B7:7D:AA:E1:0D:99:54:E7:C4:E9:D2:B9:3A:E4:A1:28:E4:69:9C
            X509v3 Authority Key Identifier:
                keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:54:43:9a:13:d6:8f:45:1a:ac:e2:3d:27:43:6e:d4:40:cf:
         1c:56:d4:96:99:ec:34:33:d4:d2:74:14:6f:1c:80:c9:fb:02:
         d8:e4:16:1f:04:64:2d:21:e1:97:6b:c2:89:73:75:6c:00:a6:
         68:83:07:49:cb:76:46:ab:2c:03:bd:16:1a:8b:d4:04:fd:d3:
         aa:d6:35:32:26:e2:f1:82:7b:63:5b:7d:08:fe:1c:66:99:ea:
         68:ed:0a:c1:9b:71:76:77:43:06:92:c3:da:34:a6:86:ba:83:
         10:a9:10:dd:53:e4:92:13:2a:3f:a3:95:be:ce:27:71:63:90:
         ac:75:cb:53:22:90:22:f0:98:0a:51:e1:20:63:38:26:a5:15:
         96:83:e9:54:a6:23:c4:db:da:c9:ac:38:a7:e7:86:d9:6a:dd:
         bd:e8:49:d9:78:25:f1:67:9e:36:b6:5a:25:1f:a2:e9:b6:8d:
         65:6d:3d:93:78:2e:0a:0e:71:9a:47:f1:9d:84:8b:ce:fd:7f:
         f8:9a:44:32:30:e3:b8:26:06:0f:b0:4a:c6:9e:b2:f7:51:13:
         5a:91:93:c3:7c:f6:14:ce:4a:0a:41:58:16:c5:77:11:7b:ac:
         33:9f:66:70:f9:74:b7:24:dd:b0:1c:ca:8d:e3:ce:16:26:ff:
         3e:ad:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----