Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File:                     OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier:          208+8BeejRVZizaA2kIU4XaSxVAPFyrjV3PWuk5ggGI=
Subject key identifier:   3A:3A:DC:58:86:74:0B:49:9B:34:8B:38:3D:62:67:42:FE:C0:8C:44
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer:       /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial:       01962E9991963301B6D2FC117C193D82D2A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number:          1451
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
                          2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: FVqff+PvTdmtgeQ6gi4kbe7YB+BxXD6EiicHBGXCWTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:91:96:33:01:b6:d2:fc:11:7c:19:3d:82:d2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=3a3adc5886740b499b348b383d626742fec08c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ea:f9:5a:08:86:02:be:7d:6b:30:14:b7:b8:
                    8a:7e:c0:a7:19:f2:4e:26:d8:2c:9e:4b:c8:b0:eb:
                    a3:bb:27:3b:97:86:a9:15:98:78:9b:83:3a:8a:6d:
                    35:ec:27:e6:e4:27:f5:51:d1:e6:ed:08:a6:1e:db:
                    0a:4b:9f:ca:35:eb:a6:ca:b9:fd:3b:ac:88:33:f6:
                    ff:50:bf:99:f4:06:7a:b7:3e:78:21:d4:de:b4:2a:
                    4c:4e:a1:1e:8f:f4:d5:a8:cc:32:32:c6:0e:a2:45:
                    bc:0e:0c:93:13:f7:08:a4:da:94:78:54:40:34:b4:
                    0d:80:60:1e:fa:f0:1c:3f:42:e1:0c:79:13:b0:f9:
                    be:60:fc:da:fb:69:7c:fc:12:4e:17:1f:7e:85:ea:
                    88:85:b7:a7:cd:dd:03:fb:3f:23:86:b2:22:32:50:
                    cc:f4:55:b4:58:b6:ad:3c:3f:ea:a3:d0:bf:14:19:
                    d4:f0:17:bf:65:b1:38:80:0c:e0:2b:12:0b:24:d3:
                    06:77:ac:21:d7:73:05:c7:39:19:ab:b6:44:24:43:
                    b5:e9:31:f6:6d:1e:18:1a:81:fb:59:56:09:94:c3:
                    69:7e:a1:3c:a5:a7:ab:8c:d9:e2:7d:e5:70:ca:53:
                    77:ed:62:03:ed:75:2b:b4:8f:ff:0c:44:02:fb:15:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3A:DC:58:86:74:0B:49:9B:34:8B:38:3D:62:67:42:FE:C0:8C:44
            X509v3 Authority Key Identifier:
                keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:75:48:fc:57:a4:42:fa:14:30:94:bc:4a:4c:d5:a6:a4:48:
         21:aa:ea:7d:8c:da:21:5e:c5:15:54:10:10:b3:e1:d1:53:5e:
         ed:34:f5:48:d9:3e:2b:4b:15:9a:31:f7:29:8f:29:5c:f6:b1:
         7c:a0:d3:68:b2:a0:8b:f6:22:02:77:ad:58:94:93:2d:48:1f:
         13:cb:84:f1:cc:a8:8d:7e:43:0c:6d:b3:93:20:f7:1a:37:93:
         71:a3:4a:8f:98:05:21:cd:2d:f0:c1:6d:ef:c9:23:d1:24:62:
         60:a9:0f:ea:f3:40:cb:c9:6c:bd:55:7b:72:5b:97:fb:04:ae:
         c8:20:6e:04:e8:b4:2d:23:25:d9:58:57:c3:9b:ab:d2:c4:30:
         83:f3:50:cb:67:bd:48:d6:11:88:9a:ae:bb:6d:c7:7f:d1:7f:
         0c:83:65:5c:05:d4:ea:e1:54:55:6e:e6:46:f0:97:27:30:e6:
         06:bd:d6:09:6b:ce:4c:66:c6:7e:e5:97:3f:9e:26:29:8b:ab:
         66:cf:5c:8e:a1:01:89:22:94:5e:a3:62:33:ad:51:01:1d:6e:
         5b:04:31:c7:db:b4:bd:5c:70:1a:96:31:96:8a:b7:f2:26:cc:
         d7:40:ee:fb:15:ea:f6:3b:7a:19:d1:24:0f:48:90:bc:41:2d:
         fd:b5:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----