Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
File:                     ODH5qlDO_oJdpfkNpnswMlSp24U.mft (raw, json)
Hash identifier:          5bqrPlBoPJcqX3mwe4esX4/qBtz2IHXlI2wQB/HP550=
Subject key identifier:   74:09:A5:F2:1A:44:EA:0B:98:13:7D:72:33:F5:6D:63:B6:89:C7:36
Authority key identifier: 38:31:F9:AA:50:CE:FE:82:5D:A5:F9:0D:A6:7B:30:32:54:A9:DB:85
Certificate issuer:       /CN=3831f9aa50cefe825da5f90da67b303254a9db85
Certificate serial:       01962DF3D7E21FCB40EC93C2077671AF37FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ODH5qlDO_oJdpfkNpnswMlSp24U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
Manifest number:          08F9
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: ODH5qlDO_oJdpfkNpnswMlSp24U.crl (hash: TKBjkNZpreo5c25IXj64owriXKjAxQ+EF3NL8rDkVOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d7:e2:1f:cb:40:ec:93:c2:07:76:71:af:37:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3831f9aa50cefe825da5f90da67b303254a9db85
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=7409a5f21a44ea0b98137d7233f56d63b689c736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:1b:26:f6:95:c7:39:e8:a8:4a:5d:cb:23:
                    18:2b:87:f9:e3:47:42:7c:7a:ce:f2:a8:43:5b:49:
                    97:4f:a9:6e:02:4b:b7:3a:c2:d2:52:57:15:f6:d3:
                    bb:d9:b1:4f:9e:97:f2:3a:93:9d:fb:08:72:0a:d1:
                    bf:25:31:70:ed:ee:13:df:4a:25:ca:d2:1a:18:5b:
                    22:f5:59:8b:d8:9d:d7:97:57:79:3d:57:39:90:a1:
                    e1:0c:43:6e:c1:28:e5:ca:30:e5:23:a6:17:6e:cc:
                    bc:76:42:ba:bf:e1:41:3c:e0:5b:40:8a:ae:f8:38:
                    40:94:12:b9:e5:58:79:a3:46:68:a3:be:77:6b:73:
                    0d:0a:15:c0:94:82:10:df:e5:56:54:bb:7f:7d:2b:
                    2e:f7:91:86:4b:78:aa:29:c8:e4:85:10:a6:ef:9f:
                    be:c0:36:c0:f2:5e:21:f5:c4:e0:6b:82:d4:76:ca:
                    f6:e5:93:84:59:61:bb:cb:13:95:56:65:19:7e:5f:
                    0f:54:4f:9e:19:15:35:42:f5:bf:8f:a2:6f:93:c0:
                    f9:7f:b7:cd:16:15:ca:31:5d:fc:ab:8a:cc:21:64:
                    83:05:a8:bf:80:8a:3e:c7:c1:1d:f4:13:76:52:30:
                    c6:d9:62:1b:09:c3:f9:36:d4:5c:54:47:3b:81:2e:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:09:A5:F2:1A:44:EA:0B:98:13:7D:72:33:F5:6D:63:B6:89:C7:36
            X509v3 Authority Key Identifier:
                keyid:38:31:F9:AA:50:CE:FE:82:5D:A5:F9:0D:A6:7B:30:32:54:A9:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODH5qlDO_oJdpfkNpnswMlSp24U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:07:d9:18:5e:54:3e:11:c1:5d:2c:5a:4c:eb:b7:c2:c7:
         a0:dd:d4:91:4e:1e:5a:53:88:e8:38:7f:44:57:c8:a5:c7:13:
         0b:eb:31:6e:ea:a2:34:e0:39:44:2e:2b:42:1f:62:9b:a8:6e:
         9e:af:16:88:ed:da:42:e3:b5:ce:f1:54:9d:53:64:6a:50:08:
         a4:1d:cd:c5:6e:9d:cb:2b:0c:7d:57:0c:ce:09:c7:a3:b4:7a:
         72:fb:5b:43:c6:ba:c3:eb:d6:be:92:54:fb:c0:2a:df:44:20:
         f7:da:d3:e0:6f:59:d8:fd:40:b6:93:2d:69:a7:b8:20:17:1a:
         9a:38:01:1d:20:22:c5:3e:7c:22:c0:53:c2:e9:44:60:a0:d0:
         b6:88:a9:1a:0a:ba:06:7b:ae:33:f1:54:58:f0:e1:6e:1c:a3:
         21:a8:78:a5:2f:fb:57:3d:de:6d:73:b6:1c:cf:2b:e6:53:f4:
         08:d8:e4:8f:80:76:f2:4d:99:f9:e1:f3:7d:8a:6c:e0:94:3d:
         a0:9e:95:f2:fd:6d:cd:da:84:cb:05:5c:f0:57:e0:b7:69:e7:
         b6:38:d5:ee:be:08:2f:a6:31:03:1b:57:13:c9:3e:ad:e2:33:
         ed:f3:c0:8a:dd:21:53:f7:bb:d5:07:94:b2:51:99:ab:07:7b:
         18:0b:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----