Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File:                     OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier:          Ay3NGszLUx+uEylVONF76/6gtEC6EzsP8ScLelpJI+w=
Subject key identifier:   5D:C2:36:51:83:74:41:B6:46:EA:19:E9:81:CD:BD:84:D9:0E:B3:42
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer:       /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial:       01962DF3B060F23EC1DE44E08FDB9246D460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number:          0168
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: w9hOfI7IVd6JT3aGy/gy7GtJY+4bz72+C0TFbfPS+QE=)
                          2: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
                          3: ojtOox8Wt7SMQ6_zO5wsZAGpkD4.roa (hash: peaSBJk7FlakYQEu3Xb5IumLjSrReNSbyW/hip0rUPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b0:60:f2:3e:c1:de:44:e0:8f:db:92:46:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=5dc23651837441b646ea19e981cdbd84d90eb342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:f5:e1:f1:67:b4:8e:2b:09:ac:b7:95:3a:
                    90:47:73:04:a5:c9:06:a1:ef:35:3e:6f:39:0a:2d:
                    3c:e4:c4:97:ab:bd:c3:7b:7a:7c:e4:6f:6e:0e:1b:
                    5c:1e:74:22:68:8c:ec:00:6a:67:9e:25:5b:57:4e:
                    8a:15:c3:8c:43:19:92:fe:0d:09:b9:73:77:5e:2f:
                    f4:d3:e5:6f:af:b9:8b:8a:51:61:c5:d0:0d:c6:64:
                    5b:bc:8a:10:c2:74:51:0b:cf:79:47:1a:83:8d:03:
                    78:bf:fb:90:36:99:88:c6:20:9e:1d:5b:74:67:73:
                    ce:20:7d:c2:5a:27:c5:54:3e:f9:06:8c:ff:ef:f7:
                    80:84:56:e2:78:0b:ea:d7:14:3c:9b:4a:96:fc:c7:
                    96:d2:88:17:4f:3a:88:ad:37:5e:95:0f:18:6d:70:
                    37:74:ad:1e:1c:6a:95:02:a7:f9:d7:39:5b:bb:8d:
                    6c:4f:05:41:cb:61:eb:cd:6f:3b:ab:9e:ca:c1:16:
                    90:42:c0:01:aa:5b:35:48:b9:f3:1d:3e:49:46:d3:
                    3c:e9:08:eb:34:31:ec:e7:a5:f0:71:be:95:07:f5:
                    73:7a:28:07:3c:1f:72:c3:fb:e1:3d:32:56:15:f0:
                    eb:d8:ea:0d:fe:b4:1d:6d:66:f1:2e:19:9e:e5:92:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C2:36:51:83:74:41:B6:46:EA:19:E9:81:CD:BD:84:D9:0E:B3:42
            X509v3 Authority Key Identifier:
                keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:85:60:13:07:27:27:1a:36:13:c6:92:35:d8:9a:cb:2f:
         a1:9e:b2:53:73:18:ce:23:34:cc:aa:42:19:69:c7:b7:2d:aa:
         b7:93:8f:d1:56:06:68:27:58:55:cc:70:b0:2d:81:72:f8:5f:
         87:dd:bf:97:03:f6:f4:43:3c:6b:63:c5:bd:51:1e:d4:2d:e2:
         fc:44:51:98:6c:12:e9:ab:88:45:de:a9:df:a3:d6:64:6e:7c:
         3b:06:3b:09:b1:40:f3:e4:cf:d0:2b:90:21:d7:ef:d3:cc:77:
         50:70:1c:39:f4:6e:89:24:42:79:29:17:e0:c2:d1:ff:23:7f:
         77:78:46:b9:f2:14:bc:e4:0f:9f:fe:7f:6d:ca:b2:00:c7:ab:
         c9:a9:0a:b9:e7:b1:84:dd:a1:69:db:2c:f4:fb:d5:2d:e7:b2:
         fa:77:7a:17:38:fc:c5:97:d7:e3:90:8e:b8:e7:c2:0f:2b:92:
         1b:d4:b2:8c:b2:2d:44:91:1e:fa:bc:9d:00:00:30:89:10:da:
         6f:61:3e:40:fb:17:50:dc:fe:e1:4f:c4:27:00:9a:cd:ee:4e:
         2e:06:a1:47:2f:f4:a7:50:66:d8:7e:43:5f:53:34:cc:bf:ef:
         96:82:31:52:54:03:1f:71:0f:19:88:be:f2:4c:64:03:88:89:
         d5:bb:08:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----