Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File:                     O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier:          g1frpM55gKTXK/Hm6R7JSka3coXpKKrT65dbUPUvbtI=
Subject key identifier:   91:3B:69:BD:72:99:36:0A:CC:16:42:8B:6F:B6:71:05:C3:9D:A4:AE
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer:       /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial:       01962FAB7DABF281E9D1537909C693D07636
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number:          0CB0
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: +kK/Rn84vYNhgh70cBK/riTdbaQrP3jhnGMDt1Hvf7g=)
                          2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7d:ab:f2:81:e9:d1:53:79:09:c6:93:d0:76:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=913b69bd7299360acc16428b6fb67105c39da4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:72:63:bb:73:3c:32:87:02:3a:57:d3:fd:d6:
                    3b:60:8d:af:66:9a:98:35:42:c3:4a:25:56:3e:78:
                    f4:e1:df:49:02:2e:34:28:ac:76:74:ad:8b:5b:d7:
                    04:a3:1c:c0:03:89:b2:01:e1:27:83:11:fb:13:ca:
                    e1:91:1a:a1:12:ef:aa:c8:45:07:71:46:70:0c:97:
                    81:24:fe:7b:11:5d:75:6a:5b:70:a8:1d:eb:9f:49:
                    d5:88:40:79:19:12:7d:b1:9c:07:be:4e:ee:0d:cb:
                    18:23:f3:a2:a1:57:f9:44:4d:f2:b5:0d:a1:ed:38:
                    20:30:b2:80:3d:40:b0:5c:f5:f8:04:dd:95:0e:b2:
                    5f:f8:7e:54:9d:a6:e6:1e:b3:0d:50:d0:ee:b0:ad:
                    a5:34:d5:91:09:cd:ae:b2:f3:24:22:cf:58:7b:38:
                    d1:e7:8c:30:43:8f:33:70:15:1c:c1:fd:0f:41:92:
                    96:ae:93:64:cc:6f:07:e7:a0:6b:94:95:1c:2e:a4:
                    45:38:86:b1:75:22:f2:9e:0b:ee:e3:56:91:6a:9a:
                    9f:00:99:68:e3:f6:0a:4e:6b:05:ee:c4:13:4f:e0:
                    d8:ce:9e:c5:07:0a:d5:1e:b7:e1:1d:38:63:01:c2:
                    95:ca:b7:c4:a2:55:d7:8e:e4:2c:4a:7e:5c:5d:f2:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3B:69:BD:72:99:36:0A:CC:16:42:8B:6F:B6:71:05:C3:9D:A4:AE
            X509v3 Authority Key Identifier:
                keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:22:13:73:8c:e2:d6:51:a5:be:ca:10:1a:86:56:84:32:d2:
         ac:47:a3:72:22:13:22:45:33:6f:ea:2e:31:a1:7d:40:e1:36:
         dc:8a:a5:0d:8b:f4:5a:87:80:05:04:39:56:5b:4c:7c:87:45:
         36:2d:8f:0e:96:b6:02:e5:07:c6:05:4f:7a:1f:50:3b:2c:ba:
         8d:51:12:ef:98:79:75:8e:d8:6b:a0:9b:10:2e:ed:0e:3c:df:
         1a:fd:6a:d9:21:48:3f:59:5d:f3:df:02:20:45:2a:1e:39:a4:
         b7:7c:b6:4f:ac:60:b9:b9:3c:97:73:c3:4f:07:cc:a7:ad:37:
         71:ee:63:a7:12:a5:fa:6c:58:fc:a5:cd:e5:1f:fa:d6:d5:46:
         e3:72:ad:e9:26:fe:e9:85:ef:0b:d5:a4:17:71:e7:d0:49:67:
         4e:58:e0:ba:4b:fe:0a:89:d4:d4:0b:a3:0c:c7:e7:83:04:42:
         0f:14:a8:d7:be:a8:ec:1b:ac:ee:39:de:b5:6a:6d:e5:64:83:
         a4:f6:3a:72:d5:31:6f:4d:b5:19:58:07:40:d5:d8:f2:27:2a:
         07:14:c5:da:68:a4:bd:9e:e1:58:a3:04:10:ed:15:69:cc:ab:
         09:14:34:93:23:47:29:f6:5a:83:3e:6b:88:f1:a5:51:2b:0e:
         67:ad:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----