Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
File:                     O33D0CKCjk9bNr3vehiwuwz7rgk.mft (raw, json)
Hash identifier:          lxOj/dxDixN3873LRaOv7fO9Ha5tQKagjGOiLXA4zWI=
Subject key identifier:   4A:3E:CD:91:ED:47:1F:AE:37:26:2F:50:06:D7:48:2D:C3:D8:63:FE
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Certificate issuer:       /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial:       01962ECF95523A77BF5B219FAE88E279E67F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
Manifest number:          0CFE
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: O33D0CKCjk9bNr3vehiwuwz7rgk.crl (hash: UdUhfw9z2ewfalK0Tsj1IMGbajvu1O5p+IijN1Yvd/4=)
                          2: qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa (hash: 3oUc3w7eQj0W70nllC5MQS//X4mPSXNpxrBOqqqOaLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:95:52:3a:77:bf:5b:21:9f:ae:88:e2:79:e6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=4a3ecd91ed471fae37262f5006d7482dc3d863fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:a3:74:65:8a:a5:20:08:29:58:61:07:2d:
                    06:be:57:e7:ff:d0:b9:72:89:60:8e:23:07:3b:c1:
                    7d:03:fe:f2:dc:d2:71:0e:52:af:cb:49:a4:74:17:
                    23:fe:73:9f:68:d0:a1:bd:55:87:48:f1:01:b5:26:
                    2d:ae:58:40:c0:24:f7:08:39:a1:31:54:5f:a2:55:
                    32:8c:46:35:5e:82:8b:76:13:f1:14:2c:36:8f:d9:
                    a0:10:94:59:94:23:47:66:bd:81:65:c2:ab:eb:3e:
                    ce:c0:1d:f5:27:a5:1a:0f:ae:b9:ec:45:47:f5:05:
                    e3:01:e7:9d:16:0e:62:e6:70:a7:e3:2d:1b:47:cf:
                    91:6d:07:a6:34:2a:7a:4b:87:2b:6e:f7:cc:1c:bf:
                    9a:c4:74:a7:93:86:66:08:63:2d:9d:84:44:a0:77:
                    3a:9d:52:de:e2:d5:23:bd:84:e0:73:8b:00:a4:2f:
                    b0:5d:b0:7c:90:a4:51:01:65:be:c4:b1:86:5c:71:
                    b2:77:70:8f:12:c7:16:2b:1a:97:1a:f7:a8:76:77:
                    f5:47:60:06:9a:72:a4:d0:b7:6a:5c:f7:13:48:70:
                    50:18:23:90:01:5d:a9:6f:d4:bf:ef:92:40:0e:27:
                    13:74:03:ef:79:3e:25:96:34:65:38:d0:9a:dc:a0:
                    96:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3E:CD:91:ED:47:1F:AE:37:26:2F:50:06:D7:48:2D:C3:D8:63:FE
            X509v3 Authority Key Identifier:
                keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:6c:54:6c:0e:08:7b:8a:91:34:68:7c:ca:5f:d3:d9:b0:
         1a:be:9d:fd:f8:6c:71:67:18:79:57:06:c7:a4:68:5d:42:53:
         dc:06:20:51:45:f9:bc:c5:0e:1b:b9:ed:3b:c9:c7:3f:6a:41:
         4c:68:4c:f3:94:f0:f1:4e:52:72:8d:4d:57:d4:e8:33:3e:49:
         60:ef:7b:7c:d3:ba:9a:8d:e3:09:9d:da:2f:dd:49:c7:72:a0:
         8b:d4:1b:6b:73:a4:6e:fd:9c:b9:b4:a3:86:c2:ef:65:14:8f:
         17:f4:df:ad:4a:d6:5e:ca:cd:7e:b2:50:f4:b2:7d:17:8b:21:
         67:93:f0:ff:8f:75:e4:97:b1:c0:a3:5b:41:21:89:b9:be:da:
         29:64:a3:02:73:41:37:43:cc:13:48:41:6c:d7:fa:84:da:88:
         7f:25:a4:7b:ae:82:e0:0d:eb:9f:57:00:50:7d:e7:93:18:3d:
         d0:63:23:31:87:bc:6c:56:4d:67:b2:d6:df:e6:5e:d5:2f:64:
         32:f6:4c:d6:24:c3:42:14:2c:b2:ab:dc:2b:38:cc:ee:4b:16:
         a9:43:5f:d2:3c:ad:f9:46:1e:bf:95:03:31:45:3a:f8:d9:bd:
         1f:ee:3b:5f:76:b5:8f:61:3a:de:45:34:45:09:32:c8:bf:d9:
         90:ef:a1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----