Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File:                     OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier:          OQQzmpOLpxvxhLGTAXnBGo79jlVLJMo/ABkxMwJ9lnk=
Subject key identifier:   5A:E2:FD:A7:32:67:4C:C7:D1:A8:9F:45:EB:EF:BA:23:DA:8C:E6:C5
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer:       /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial:       01962E99B93645C74990E63132BCDB40435F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number:          11F0
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: xiqQZCR1ldkcFc+inVb3bLlj6F8jREL+haltys/F/8g=)
                          2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b9:36:45:c7:49:90:e6:31:32:bc:db:40:43:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=5ae2fda732674cc7d1a89f45ebefba23da8ce6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:07:4a:ae:02:6f:df:90:96:ac:6b:bb:85:
                    b8:01:b3:0e:1e:27:5f:9a:1c:7f:c0:10:76:77:3b:
                    9f:2a:d0:f4:37:61:2b:59:f5:9d:22:be:fd:8b:63:
                    c2:07:0d:1b:89:f1:e0:05:88:eb:1a:ca:7e:ff:b2:
                    8d:42:7c:9b:b5:4c:cb:07:ae:6a:d2:2f:d3:96:41:
                    b7:f7:fe:8e:9e:59:bf:23:e0:61:82:1c:8f:e9:1a:
                    b3:3d:5a:a1:10:6f:0a:2c:98:27:20:1d:e8:b2:b6:
                    de:ab:cf:99:38:51:e6:11:86:cc:23:22:eb:56:b6:
                    f2:93:25:42:11:42:a9:18:06:ec:6a:d4:75:d6:49:
                    ee:da:33:ea:43:d3:b7:b0:37:ab:84:d4:0c:75:1d:
                    8c:ce:5a:49:db:1d:34:d0:95:b7:86:87:91:d5:96:
                    9c:e8:02:59:5c:28:d7:73:a6:8a:bc:e9:56:03:fc:
                    13:f9:9f:2c:88:e9:84:be:6d:c8:ab:e9:0d:32:e3:
                    09:3c:41:27:6a:95:c4:e9:e7:b5:7e:4d:94:8c:67:
                    0a:95:ca:f8:0b:16:62:81:a6:5c:d7:f6:8d:e2:c3:
                    e5:8b:61:a6:ff:eb:e0:62:89:84:f5:4a:89:5d:83:
                    7c:f0:34:5e:35:ab:5b:00:3b:d4:7c:27:34:c5:2f:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E2:FD:A7:32:67:4C:C7:D1:A8:9F:45:EB:EF:BA:23:DA:8C:E6:C5
            X509v3 Authority Key Identifier:
                keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b2:00:27:44:c1:26:a8:2c:94:dd:4c:07:04:73:b8:5d:0a:
         3f:90:d0:d0:69:50:b1:e9:a6:1d:a2:2c:c7:57:f6:4b:17:a5:
         15:d4:44:dc:26:af:12:3b:10:53:20:e3:e6:08:b8:86:22:f4:
         f0:42:03:53:bb:cd:2e:8a:41:c4:3b:de:95:53:b4:1f:36:6a:
         e4:d0:1b:32:b4:e8:0f:2f:d8:6a:f3:07:5d:47:8b:45:8b:e4:
         14:a9:f4:28:e4:85:85:6c:e6:93:05:c7:45:c8:85:a3:1f:83:
         a7:bf:88:e1:9e:25:d5:a1:bd:5b:e3:45:9a:b3:06:b1:89:f8:
         41:91:af:21:db:79:13:d0:cf:fb:e4:c1:b5:1b:55:47:fa:ce:
         d3:a8:af:40:95:61:1d:f8:50:3c:8b:57:20:cc:80:c7:2d:05:
         4a:dd:ba:8f:40:09:29:94:69:05:9c:36:20:e9:3c:e7:b1:ec:
         f8:b3:c8:df:78:85:45:6b:3d:c9:f6:a5:55:50:72:be:44:be:
         59:2f:47:80:ca:44:45:3f:5d:48:64:76:a2:13:89:9c:af:e8:
         37:9c:ef:27:c9:33:70:79:a5:9e:e3:73:d0:a6:b8:3a:03:f6:
         5c:13:9c:ca:4b:b6:4b:5d:50:cc:b7:a1:51:74:7e:94:3c:d3:
         3b:d2:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----