Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File:                     OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier:          vxmLPUxVrAI81LvVQHzjBA/LY1JXP4CLhy9Yu3dMN4Q=
Subject key identifier:   98:FC:12:50:F6:13:C5:2F:3C:2C:EC:BA:AC:80:30:9E:E2:0D:00:E2
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer:       /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial:       01962ECF69317830E70F89F66FB2D011FB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number:          02AE
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: eseVwOvH1YHvOPsIV1Sml9SLjHUEOcw7zidCuxlGJz0=)
                          2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:69:31:78:30:e7:0f:89:f6:6f:b2:d0:11:fb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=98fc1250f613c52f3c2cecbaac80309ee20d00e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:34:b1:44:ad:ac:01:02:e7:97:44:31:43:
                    20:e9:3b:c6:88:1a:a7:09:84:fc:5c:c4:b0:fb:4f:
                    ac:0c:d8:a5:04:19:b1:16:18:20:a5:cf:46:2c:4e:
                    e1:0e:34:c2:66:93:78:50:c0:7a:a4:ab:4e:c8:4d:
                    d7:67:46:57:ad:52:37:f3:b9:f5:5f:c4:90:a3:3c:
                    7d:98:c0:d3:02:81:2d:e8:59:67:66:ec:d5:61:2b:
                    f0:3a:2e:e0:19:e1:9e:79:a8:54:b6:f5:f1:24:f1:
                    ad:31:4b:92:e9:5e:e1:58:32:21:4b:de:e6:e9:5f:
                    10:5c:1b:11:d4:d4:3a:ca:02:6d:0d:f9:01:ba:f6:
                    92:e4:11:b7:a2:c0:4c:da:c8:31:e3:d6:e4:43:74:
                    f3:9e:8d:c5:51:31:ea:46:00:0d:be:27:5f:c6:97:
                    ef:32:a7:c9:14:14:e8:72:97:e2:84:e5:d9:36:98:
                    33:cf:b4:f6:ab:5d:b2:b0:ac:3d:e6:15:1a:18:ea:
                    5c:97:5b:d2:8f:b5:2a:47:98:84:87:8f:31:22:15:
                    5f:12:93:3d:7e:27:df:c3:ff:e5:65:2d:8f:21:65:
                    50:c7:f1:d1:86:49:f2:8f:b1:c5:1c:2c:04:56:1b:
                    09:77:81:98:56:64:64:b5:43:ff:76:55:11:01:0a:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FC:12:50:F6:13:C5:2F:3C:2C:EC:BA:AC:80:30:9E:E2:0D:00:E2
            X509v3 Authority Key Identifier:
                keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:4b:ed:d6:24:b0:27:27:3d:a2:01:da:1e:b2:69:22:60:
         30:03:cb:92:c6:4d:86:5e:14:75:7d:41:33:f7:e6:a5:64:e3:
         74:43:33:2b:ba:1a:0f:77:21:2e:89:c1:de:76:00:db:19:51:
         54:8f:ad:26:d1:90:46:67:ce:9e:f5:b1:f8:c2:8d:2c:0f:4a:
         7a:af:2b:1b:f2:90:92:3c:d5:13:c1:5e:99:38:6c:d7:7a:5e:
         db:01:9b:75:22:d0:a1:6d:e8:2f:20:80:f1:09:33:41:8c:b7:
         96:23:13:20:d8:c6:3a:3a:71:4f:49:33:ee:4d:b4:bd:2f:4f:
         42:ba:e1:73:27:21:a5:87:01:22:fe:48:57:20:26:4f:f1:b1:
         bd:95:7a:83:05:7d:e7:c0:c2:f8:33:0e:26:97:54:47:8a:c2:
         30:05:bd:db:44:70:2f:90:f4:63:d1:62:9a:13:dc:c0:ec:af:
         63:1f:f3:8e:d1:34:bf:27:b1:de:f6:e6:ef:29:2e:53:cb:dd:
         ac:82:26:4b:fb:0b:f5:8b:aa:0a:99:5f:4c:35:7e:72:c7:0f:
         39:65:93:a4:38:d3:e2:94:25:e3:ce:a9:6d:0d:da:28:b4:40:
         d1:0e:45:a7:27:a2:78:33:a3:33:89:8a:3c:65:06:c9:fc:97:
         35:bc:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----