Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File:                     OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier:          NrLu8uvvysN8H2TIczMCogyIZokmTJz+s1NADINU1kc=
Subject key identifier:   E8:BD:B3:B0:96:94:64:ED:17:66:53:35:19:C2:42:9B:AE:5A:4B:11
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer:       /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial:       01962F067CB0EA11816DC829D14CA386E07C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number:          0B68
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
                          2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: b17DqRMyflekYIqE87NK+W0KqZCG2WVb3zSKLkMuO1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7c:b0:ea:11:81:6d:c8:29:d1:4c:a3:86:e0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=e8bdb3b0969464ed1766533519c2429bae5a4b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:8f:54:2b:ea:6c:39:b5:a4:bd:fb:e7:bd:
                    21:79:e0:9b:9e:e9:d1:ac:b0:10:5b:3d:a0:b9:ee:
                    27:33:11:79:61:ee:28:b7:33:69:e2:d9:53:77:33:
                    c6:72:a7:34:56:0d:24:67:03:54:2e:2a:48:67:75:
                    8b:fb:e8:04:1a:3f:d7:a5:94:a6:2e:e0:a5:7b:03:
                    30:89:c6:d0:10:fa:96:77:73:67:75:14:55:75:4e:
                    b7:7e:08:17:c2:5a:e3:d4:18:46:ba:f1:51:64:4a:
                    e3:a3:85:cf:65:da:68:fa:5d:bb:09:61:18:31:02:
                    dd:3e:bc:b7:5d:7b:0c:5f:14:2c:0b:14:d5:cc:5c:
                    03:f2:65:44:c7:bd:d0:f0:45:e2:a1:d4:8c:53:5c:
                    d8:8e:b7:9f:99:fc:a1:c2:52:63:4e:68:2f:65:a3:
                    a2:50:f1:ad:ab:82:47:df:10:46:25:f2:02:a1:02:
                    33:f1:9d:75:27:43:54:a3:e8:c4:e1:8a:b7:c4:79:
                    83:ff:4c:a6:9b:5f:07:ff:8e:ba:06:7e:6e:42:bf:
                    18:80:92:05:8f:f6:b9:51:39:c6:f7:1a:9c:fe:02:
                    2e:fa:54:b6:d6:3e:8e:dc:06:f5:b7:17:dd:4e:fe:
                    1d:a5:33:2e:de:84:49:c7:87:1a:f4:80:b0:1b:8f:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:B3:B0:96:94:64:ED:17:66:53:35:19:C2:42:9B:AE:5A:4B:11
            X509v3 Authority Key Identifier:
                keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:1a:f4:18:45:ae:8d:ce:6d:44:b9:54:33:95:b2:26:57:02:
         fe:2a:35:30:c8:78:89:a4:14:b0:50:34:47:5e:42:b3:4d:45:
         18:13:48:13:84:55:d3:34:9d:fb:70:bc:c8:86:a0:bf:d2:b9:
         b9:e8:5b:7e:f7:6d:40:25:19:32:98:49:00:5b:cf:c5:53:93:
         de:25:dc:60:b2:6c:1f:2c:26:40:0a:a3:b2:b1:c1:7a:59:17:
         a6:bd:94:f8:bb:11:12:55:48:fa:3e:aa:85:63:6e:a0:04:80:
         77:99:7c:4b:a7:bb:23:7e:c2:aa:4f:a3:4b:4a:6c:8f:85:fa:
         f9:7a:54:06:9f:14:00:39:89:a7:c2:6f:6d:68:21:7d:d3:36:
         f8:9a:e7:98:3d:c5:12:79:48:6d:1f:d4:64:d2:5e:08:b9:2f:
         75:4f:d7:a3:17:39:2d:73:aa:0e:43:48:7c:a6:d4:e7:77:6a:
         76:85:3f:64:d1:ed:a9:37:6b:a5:df:53:96:b3:53:36:b9:a9:
         60:96:6c:13:9f:c4:bd:1b:00:4b:ea:5f:59:82:ab:03:b3:f7:
         73:2b:44:0d:ee:15:70:fd:fb:32:8b:30:4b:55:40:ef:53:90:
         2b:c1:32:0e:76:f9:f1:44:ec:79:ec:83:5c:41:a9:03:a4:d3:
         e7:5a:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----