Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File:                     OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier:          pd69Sj8bwVdImwo9yBJaeoSe22Ngo9IS8swBWuP1j2E=
Subject key identifier:   F6:54:3E:DE:31:22:82:B2:8B:D9:A2:C7:7F:91:8D:27:FA:F6:3B:6F
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer:       /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial:       01962E994C7F6B8C8442F5BA8C3233A67A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: AtherJGb64faxkmJ9fagA/WzQvq+S2G//iSJXfgktI0=)
                          2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4c:7f:6b:8c:84:42:f5:ba:8c:32:33:a6:7a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=f6543ede312282b28bd9a2c77f918d27faf63b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:43:61:e4:4d:ed:c9:a1:7f:c8:7a:71:b8:
                    54:9c:1a:89:74:7e:4c:30:72:07:f1:af:84:51:7e:
                    5d:9c:66:37:05:a6:2b:82:2b:ee:e8:ed:df:81:32:
                    7d:cc:1d:5e:87:61:e5:60:ce:88:83:2f:18:5e:aa:
                    ef:fd:5b:13:38:f6:23:81:b1:68:1c:3f:24:d0:29:
                    01:3f:b0:39:5d:9e:ac:fb:48:f7:ab:8f:bc:d3:e4:
                    91:23:df:59:73:3a:5f:96:21:5b:35:5e:ae:9b:db:
                    87:9b:ed:4c:cf:34:3c:43:6c:f1:55:b2:da:e1:bf:
                    9f:ef:32:a1:28:7f:bb:ba:60:c9:34:7f:2f:99:42:
                    26:b0:88:ac:ce:58:66:4e:96:7c:58:65:66:f4:1e:
                    de:e8:ce:87:5c:8d:c0:d5:d0:10:eb:99:5c:4f:b9:
                    ea:01:dc:dc:ec:6c:3e:5b:f2:fc:5c:11:46:c3:04:
                    c2:0d:b6:f5:af:96:fe:5e:06:5b:0f:4a:6a:cb:63:
                    0a:7f:b6:78:11:f1:06:6f:8b:df:e0:7c:3b:97:b9:
                    4d:ec:ab:41:c9:f6:a4:48:7f:e9:c2:1d:09:aa:81:
                    30:de:f8:d4:65:eb:1e:9f:59:6b:d5:3e:8a:77:4b:
                    14:81:8c:b0:72:56:9d:7a:1c:0f:5e:18:c4:fb:ca:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:54:3E:DE:31:22:82:B2:8B:D9:A2:C7:7F:91:8D:27:FA:F6:3B:6F
            X509v3 Authority Key Identifier:
                keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:a8:1e:b7:93:bd:7a:fb:9c:b7:9c:6c:54:c7:5c:45:99:
         8d:98:87:60:fa:c2:1c:cc:ef:e2:ec:38:69:d9:67:c2:1c:88:
         37:a0:57:9a:e7:89:d9:1f:a2:a1:e5:2b:29:7d:5e:5d:c0:39:
         f5:9b:47:94:f9:f0:00:e7:cf:f2:74:fe:b2:18:6c:e5:b4:d0:
         b2:6b:f7:b0:8e:3b:55:18:04:69:32:f3:4e:72:da:52:de:9a:
         cb:94:4c:3d:f0:07:66:07:7a:6b:3c:09:5b:63:ab:09:fb:b3:
         3d:4e:09:9b:5f:93:a6:bd:76:90:27:9c:0a:7c:ed:93:74:40:
         00:b1:e8:fc:06:ea:16:d0:70:6b:28:95:51:59:c7:f1:a9:ec:
         d9:23:75:38:8e:a0:99:6f:b6:d3:74:b3:ca:ce:0c:6e:03:51:
         75:51:ee:f8:14:c9:f8:75:18:b3:74:b7:8d:32:8b:47:71:68:
         16:82:86:28:d2:d3:70:3e:03:2a:fe:97:f7:75:e3:a7:20:05:
         e3:7d:89:f7:94:4d:56:c9:29:d8:40:29:0b:ce:4a:86:6a:a3:
         20:c5:b1:8e:d0:81:b7:f0:e6:c5:91:b6:a9:64:a1:8f:8a:57:
         a8:c6:32:c8:39:f5:c6:26:60:df:36:d4:a9:1b:3a:78:21:ff:
         c6:bc:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----