Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File:                     OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier:          49UnZZ2ZfuNQT2IxO7nUnmXhn9QkgtPQoAK7+Tz4oNM=
Subject key identifier:   CC:49:CF:29:48:74:C3:03:6F:34:92:E3:27:C1:DE:57:19:92:C3:60
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer:       /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial:       01962DF417DEAACF1465082FC2B85922BC7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number:          0136
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: N21isPgRHD2SSN2DKZ78znjoYVF6f8merRJZS8BGAFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:17:de:aa:cf:14:65:08:2f:c2:b8:59:22:bc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=cc49cf294874c3036f3492e327c1de571992c360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:33:32:ff:f4:dd:6f:12:89:6a:98:56:c3:97:
                    e9:a9:36:77:5f:de:de:71:a6:7a:8a:ca:c9:0d:4c:
                    49:32:7b:6e:80:10:00:32:08:ed:82:1c:37:55:d4:
                    03:38:da:c2:bb:e5:1a:fb:96:58:e1:e8:b7:4a:c8:
                    f3:a1:01:4b:10:35:54:ae:91:0d:1a:f5:cb:93:18:
                    2e:8a:63:b8:e4:c8:39:54:97:5f:47:51:42:77:7d:
                    9e:05:b3:74:f3:24:fc:c5:b0:02:9b:be:35:7a:6e:
                    6a:6d:12:f3:6b:a9:3b:96:97:7d:20:b5:5b:94:a8:
                    65:99:8e:a9:fe:3c:bb:cb:b0:9d:2f:4e:99:c6:75:
                    f4:b1:25:8e:b0:42:f9:1b:64:3d:fe:83:dc:72:33:
                    0b:66:cc:f3:83:c7:95:4e:c8:a4:2e:28:2a:ea:81:
                    1a:4c:66:b6:cd:30:8a:65:90:21:60:78:e3:e7:8c:
                    d5:df:97:a0:33:55:1e:a6:14:8f:17:bd:95:7e:70:
                    b6:67:7c:64:30:16:d7:6d:32:72:d3:e2:57:50:e4:
                    7f:e2:47:35:9d:90:d5:40:7a:14:1b:2f:0c:4f:cb:
                    9e:f9:22:11:ac:0f:3a:f1:76:25:97:cc:3c:5d:56:
                    47:ba:33:32:be:1c:36:9c:8d:91:e8:3f:58:b5:dc:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:49:CF:29:48:74:C3:03:6F:34:92:E3:27:C1:DE:57:19:92:C3:60
            X509v3 Authority Key Identifier:
                keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:95:be:fa:36:8e:2a:72:b7:7b:f8:1d:0d:19:f8:e2:d0:
         5d:57:d7:98:6f:6f:49:c6:4b:1e:03:58:7f:ba:49:f8:7c:4f:
         3e:ae:37:15:76:68:5f:58:68:f0:5a:e6:45:42:24:c6:8a:c0:
         e4:5e:65:e7:90:ae:9c:79:8c:43:66:de:0a:a0:70:62:7b:fa:
         d5:6d:f7:76:63:e6:1f:96:d9:32:18:0c:63:b5:42:e3:7a:5c:
         4c:0d:14:10:cf:2e:54:00:8b:3e:8d:62:21:0c:9d:7c:58:95:
         98:4c:3e:f0:f4:cc:ab:30:25:e2:55:1c:de:03:c9:63:02:d6:
         ed:35:44:a2:1d:77:9b:7a:01:73:9a:06:c6:85:00:13:72:fc:
         10:5b:61:65:be:70:94:7a:51:32:df:ed:d8:41:53:3b:1c:12:
         60:1b:be:9f:a5:c3:59:28:61:28:81:fc:6b:f7:80:d5:8a:96:
         84:44:9f:7e:56:7b:17:93:3d:25:84:c9:b6:43:67:f7:aa:d2:
         fa:01:0e:77:23:c0:1a:9a:f9:f8:8a:85:30:cd:bd:fa:04:75:
         7b:02:04:53:dd:d4:d4:a2:d4:3e:f5:df:f9:33:b4:55:7e:9f:
         44:a7:5e:c7:f8:5b:aa:7a:de:6a:89:80:0a:d8:9e:0b:01:a8:
         43:5f:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----