Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File:                     O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier:          0xc6tOS3Sjd+iOYN2JL47FYysbd6iWxw5DO1+C3x6vI=
Subject key identifier:   A3:5F:60:5C:12:B9:78:F4:83:7D:E5:40:EC:2D:73:B4:E9:EB:99:03
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer:       /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial:       01962F3DC06517E5DA3B4DAE8A69EB54098A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number:          116E
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: 0eLxl0QHL3YjLH21Vygdk6L37nCQOZdo6Hg3+t8pM6U=)
                          2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c0:65:17:e5:da:3b:4d:ae:8a:69:eb:54:09:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=a35f605c12b978f4837de540ec2d73b4e9eb9903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d0:31:78:10:32:31:84:3c:50:0d:e4:4c:f2:
                    41:e0:97:c8:00:a0:23:26:7e:05:76:aa:af:77:ae:
                    ca:57:23:27:ab:fc:3a:ec:c7:be:33:31:3e:9e:a1:
                    d4:ed:d0:a7:46:da:7f:77:c6:d1:2d:4a:c2:b9:2e:
                    2a:42:71:44:24:60:fa:13:24:aa:8e:76:e8:89:cb:
                    ab:e9:4d:0e:85:54:78:54:e7:8a:a2:a7:9d:44:46:
                    36:d2:6b:d5:b6:d1:ee:50:d2:38:d3:c8:e5:01:7a:
                    12:53:4a:9e:fb:e2:a6:49:41:b0:fc:7e:65:e7:7f:
                    ad:5f:6b:d4:56:57:a2:be:ca:9e:79:5b:e8:58:41:
                    69:ba:f7:5c:74:37:5e:10:fa:46:10:58:82:4a:e3:
                    8a:d3:89:1f:aa:44:7f:44:bc:90:27:02:50:0f:62:
                    ca:0b:60:84:c4:b5:5c:4e:94:1c:d2:fc:8a:17:e3:
                    a8:63:3f:b3:a1:93:c4:e4:eb:42:6f:30:fe:b3:9f:
                    19:48:3f:db:e1:9b:90:ec:4d:d0:87:da:8b:23:6d:
                    12:06:76:0e:7f:d4:5a:9b:4c:92:15:1a:e7:de:8f:
                    33:eb:96:70:82:48:b4:3a:3e:b8:4f:3d:4c:f5:37:
                    2b:cd:8a:96:ae:6b:23:b4:88:06:22:57:7b:8c:e8:
                    1b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5F:60:5C:12:B9:78:F4:83:7D:E5:40:EC:2D:73:B4:E9:EB:99:03
            X509v3 Authority Key Identifier:
                keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fd:1b:9c:1a:94:48:85:8f:71:05:b3:46:e0:b0:f2:b5:ae:
         c2:ce:19:11:37:60:e0:e4:6a:0d:a3:66:4c:f9:cc:7f:40:78:
         c3:d4:b8:10:72:6a:c6:99:8a:86:10:34:b5:24:78:14:dd:dc:
         dc:c1:ec:92:29:2e:42:4c:df:92:0f:a6:7f:04:34:00:b9:1d:
         24:8e:a3:37:b5:4f:26:21:e9:fb:92:5d:9d:97:52:bd:86:b2:
         02:cc:98:d1:2c:38:7f:bf:f4:7c:13:c4:1f:1a:83:f7:20:9e:
         17:ab:bd:85:ad:52:13:0a:aa:b3:0c:a0:b3:7d:67:b6:a8:1a:
         52:21:31:8e:f7:47:c5:d0:22:3f:ed:1f:61:6b:8a:c1:fd:19:
         8f:97:18:ec:d4:11:a5:8e:45:52:7e:6c:03:60:fa:71:b5:44:
         01:1e:0f:e1:b2:28:8f:32:b7:a5:39:d5:49:b2:e1:ee:9e:11:
         3f:b2:4b:c3:e6:93:fc:4f:91:97:c6:6b:86:94:76:9c:b8:a5:
         61:27:8e:d4:fa:fb:e5:47:8a:90:b5:7a:af:d7:e5:c5:1d:87:
         6b:69:12:fd:1c:f5:73:ff:ad:97:cb:b7:2c:45:97:14:0b:8e:
         95:06:92:53:34:a2:2b:ad:ad:54:32:3d:d9:d6:4c:c9:23:2d:
         bd:f1:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----