Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File:                     OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier:          E6d6hfcxvoCEBISzOjQ5Mn9zG9bvrqw5mpmyUbJG3+s=
Subject key identifier:   E4:4E:4C:14:5D:97:7E:79:C8:27:F9:37:67:B8:E8:33:24:E7:66:61
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer:       /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial:       01962FAB5CA322CC32775C2C83BCF66A4BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number:          06A3
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 1ZMKCjtoyUotW5zL6d-I3qOaSBE.roa (hash: 5gJp0s5iC22SH9q8M0EDrUjpQSDzsUFawVisJiKFG6A=)
                          2: 2DDfXUiH85YC1X3PgfdtyKVgjPw.roa (hash: IX38bNkkduAXN8SBzl133Uzin5uXQV9chMH9hhrcGco=)
                          3: 5O5OsM3NhBX9ufi05PLP13l29To.roa (hash: 3SSp0jqDRZlrWNGbYWPuIP2g5yvlTpjsrbIVea72fZ0=)
                          4: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: ROT1EOHaoGM+1O9+IzAV/d7ePKlyLflOpcJrsrPhF8I=)
                          5: XAC3MTIDy2Wt50Hn1LPVCPZj6e0.roa (hash: Dwx9RqPqD8/O5XTxZSeNq9SNO+JNCNDt1UlVOS13grg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5c:a3:22:cc:32:77:5c:2c:83:bc:f6:6a:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=e44e4c145d977e79c827f93767b8e83324e76661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:98:89:1d:45:42:d4:51:0f:b2:5a:e3:ab:
                    19:2a:23:ed:5d:71:8b:1c:e5:b5:15:a3:2d:e4:e6:
                    54:97:2a:dc:e8:d9:b2:98:1a:a9:b2:92:73:c5:df:
                    c3:ba:23:c7:e6:27:1d:d4:00:6e:a6:8a:0d:d8:f9:
                    10:ed:26:95:20:d1:a9:05:19:e9:41:0d:46:e1:a6:
                    f2:4d:cf:85:cf:13:4d:17:5b:41:d6:be:6a:08:c0:
                    df:cf:a5:22:1f:b1:8b:9e:97:b2:59:dc:5e:d1:15:
                    55:d5:12:ac:fc:50:ea:89:83:34:b1:0a:34:c8:f5:
                    4c:04:20:9d:cf:42:cc:9f:ac:89:ef:1c:7d:4a:c4:
                    e2:2d:f9:d9:ca:84:6d:15:72:81:48:76:fa:cd:57:
                    a8:08:82:38:25:99:00:0e:ef:04:b3:e4:79:f3:0d:
                    6b:61:d3:ce:e7:1a:27:37:3a:e8:f3:65:fc:2e:29:
                    e6:ac:38:b2:48:b8:59:97:c1:18:0a:9b:74:63:2d:
                    69:17:57:df:ae:ac:6c:06:62:39:2d:c0:47:13:e3:
                    de:ed:42:54:c5:48:5d:41:35:8a:2b:45:7d:0b:a9:
                    4b:32:7c:9c:0a:2b:d1:ce:1e:e9:ea:57:b9:f5:46:
                    92:04:23:f7:e2:35:0b:5b:bc:39:a5:7f:5c:89:6b:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4E:4C:14:5D:97:7E:79:C8:27:F9:37:67:B8:E8:33:24:E7:66:61
            X509v3 Authority Key Identifier:
                keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b1:43:96:55:5d:7f:04:5c:a7:5d:5b:13:01:d6:b5:6a:ae:
         6f:54:3f:82:06:c5:ad:d8:8a:d9:13:94:28:39:75:59:97:b2:
         89:25:8b:92:f7:43:35:ab:d2:62:73:97:3d:07:24:9b:de:6e:
         b8:55:08:52:78:02:be:b4:3d:3a:07:e3:97:df:6a:f0:14:5c:
         58:31:cc:85:79:f8:79:84:8f:f2:5e:d5:78:81:a0:91:cc:12:
         7b:d9:39:26:04:b7:78:5c:76:29:c1:2b:55:6b:3b:9d:05:90:
         a2:84:8e:8f:4e:05:84:2b:84:2a:f6:f3:79:96:96:87:a9:c7:
         2b:a5:9e:27:28:9f:66:d9:63:34:34:5f:00:ca:62:06:74:d0:
         f0:eb:95:e0:90:db:b8:76:5c:11:a5:e0:61:b9:5e:df:a1:84:
         6f:06:33:d0:dc:b1:61:06:1a:59:ce:96:c4:73:c6:0e:96:72:
         2b:57:ff:55:9e:39:15:41:9d:38:29:30:c5:9f:76:ce:82:cc:
         3a:cd:bb:b6:ca:43:94:49:10:7a:77:37:07:4e:01:7d:4e:a7:
         15:db:c9:87:5c:e7:f7:82:6b:8a:24:84:6c:ec:0c:5e:32:9f:
         ba:b2:a1:b8:b3:fd:79:c1:48:49:3f:24:1a:ef:f0:69:99:94:
         77:c2:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----