Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File:                     O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier:          +2LQF5/2RG1YZyV5cESbjPsZ4L3sR+LQ3Q6ZV/4kvmo=
Subject key identifier:   16:F4:87:8B:DE:74:53:3F:1D:A3:36:F0:0B:51:E9:FE:4D:A7:F2:12
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer:       /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial:       01962F7471B67C5E8A56B871DE58865F0CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number:          08B0
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
                          2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: nfkN64XEJMyJiOnryHsVlk7DiW2TkSi+x3DGsnmxfbM=)
                          3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:71:b6:7c:5e:8a:56:b8:71:de:58:86:5f:0c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=16f4878bde74533f1da336f00b51e9fe4da7f212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:f4:97:ac:8a:ea:ed:c6:a3:dc:d8:7f:9c:
                    97:ac:fb:1f:a9:5d:d7:46:b9:e8:54:04:95:fb:c1:
                    79:cd:59:da:fe:0f:90:d4:3d:ad:9f:cb:c6:3e:ff:
                    7b:35:d8:18:34:12:c8:32:7b:ed:28:eb:a5:04:d9:
                    82:3c:5a:d5:ee:c6:46:54:79:ad:fe:ca:bc:64:3b:
                    85:df:3d:52:24:65:43:96:c8:c5:67:40:2d:5a:9d:
                    d5:72:45:e6:56:3f:72:0a:0c:15:a4:ff:21:c6:ee:
                    e4:6c:d6:57:1a:76:57:fd:4c:eb:06:e1:30:53:1d:
                    d7:ad:40:33:7c:cd:9b:c6:f2:10:2f:51:54:39:32:
                    da:f0:27:85:33:91:3c:c4:00:43:53:16:9b:a0:94:
                    02:9b:bf:9a:ab:05:46:c6:75:12:18:8e:1a:e1:7a:
                    11:a3:b1:3c:26:f5:f0:b6:c5:ae:28:75:26:cf:6f:
                    4f:c8:86:b0:df:21:d3:50:20:a9:64:f4:5a:89:0b:
                    73:1c:f0:dd:a2:de:fb:e4:cd:f4:cd:e8:48:74:eb:
                    b2:29:3e:61:9f:48:6a:7d:ae:bb:5f:69:53:16:92:
                    4e:1f:e5:00:67:e4:78:eb:5f:ad:db:f5:0e:40:d2:
                    8d:0f:cb:af:56:5c:41:1b:62:26:01:61:d1:f2:fb:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:87:8B:DE:74:53:3F:1D:A3:36:F0:0B:51:E9:FE:4D:A7:F2:12
            X509v3 Authority Key Identifier:
                keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:67:52:e3:b6:7b:56:50:a6:06:0d:1a:8a:b2:c1:36:93:
         18:14:66:3b:fc:b7:60:de:cc:fa:d0:40:bf:70:bd:3d:9f:ff:
         26:28:7d:cb:c8:f2:8d:97:36:fb:b5:43:41:2e:c6:5f:e6:5c:
         40:e5:45:13:a1:08:1a:d5:96:46:48:98:5a:57:a5:8a:db:ab:
         88:4f:4d:a7:fb:97:8d:a6:94:59:56:4e:f5:5d:b4:a9:c5:6e:
         19:a1:2e:f6:d7:b1:a6:d0:93:a1:5f:69:11:00:20:42:66:23:
         4f:de:30:ab:56:f8:05:fd:eb:1d:6f:10:de:5b:88:07:1b:b7:
         d0:cb:92:b1:02:48:ad:4b:66:6c:03:a4:b8:e6:d9:46:3a:bb:
         e0:24:a0:7b:20:f4:26:70:eb:5a:77:53:6c:72:22:83:69:0f:
         2d:4c:9b:52:58:bc:2b:d6:50:69:c4:50:c5:ef:6a:d1:db:d9:
         b5:bf:65:f8:f0:ee:79:4f:c5:3c:9c:c3:65:0b:22:d4:40:9a:
         2d:89:47:23:66:c7:83:4f:76:ff:e1:ae:20:7a:94:c0:41:0f:
         cd:af:09:68:74:02:a4:c9:27:63:5e:60:02:45:75:6e:b3:58:
         70:7d:e7:4d:d1:c5:b7:71:1f:0e:48:75:64:53:4b:96:48:97:
         38:24:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----