Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File:                     OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier:          BUzov4zXq3cL3IB/nCs7Nux7CXm3voxKmskh1uxjFE4=
Subject key identifier:   EE:08:CC:B9:6D:88:B0:C7:B4:9E:EF:5F:2F:BB:70:4E:EE:14:2E:F6
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer:       /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial:       01962E98E8AD7AC24F4DF083AAAB7A905F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number:          122F
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=)
                          2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: XAhnYYek4Jmbg79dSVipJLY+g1uooPsmGwa1V2otSRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e8:ad:7a:c2:4f:4d:f0:83:aa:ab:7a:90:5f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=ee08ccb96d88b0c7b49eef5f2fbb704eee142ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:20:b2:88:ee:53:3d:8b:18:b1:50:55:da:
                    a6:80:8a:a9:d7:9a:d3:07:9a:9a:10:70:bc:be:29:
                    54:c0:7f:c2:45:35:e3:97:83:f2:c2:0b:47:95:b1:
                    8a:00:fc:36:e4:6c:59:1d:03:34:c7:68:3f:f5:06:
                    48:b9:2c:33:de:37:87:5a:7b:fe:99:b9:57:c2:94:
                    ef:83:df:85:80:fe:fd:8f:b8:ea:e2:40:09:06:c2:
                    ff:5a:23:95:82:1e:b5:97:fe:3e:c9:01:b2:a1:1f:
                    e4:41:48:51:42:23:aa:54:e4:64:20:2a:1a:66:c7:
                    c4:23:e4:16:f8:63:f9:0e:ff:c2:ee:64:b1:b1:d2:
                    9d:c0:7b:d8:68:0e:4c:0f:40:af:0d:fb:5c:0b:18:
                    b2:ee:c3:06:05:7a:eb:9e:8a:cc:06:bf:d0:cd:07:
                    9a:f5:b2:b5:73:da:45:8a:a4:38:39:98:43:50:5c:
                    9a:7b:cf:7b:46:c2:5e:35:bf:21:d3:d3:11:2a:bb:
                    eb:9e:db:2c:62:55:01:4d:03:4a:08:8d:e5:8e:36:
                    87:db:f8:94:fb:64:00:70:7c:b3:f7:95:ee:e0:bc:
                    25:b8:5f:b3:34:b7:79:77:fa:04:74:b3:09:dd:47:
                    42:a9:b2:2f:76:be:d9:bb:7e:fb:67:33:17:92:54:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:CC:B9:6D:88:B0:C7:B4:9E:EF:5F:2F:BB:70:4E:EE:14:2E:F6
            X509v3 Authority Key Identifier:
                keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:08:07:d0:23:de:4a:6e:c6:7e:c4:15:26:bf:f5:15:b6:
         68:a7:27:33:9c:e0:c1:e1:30:13:04:b6:2a:42:d0:8a:b7:7c:
         c5:fb:7b:d5:64:8b:d5:92:6f:78:18:f6:ef:00:80:77:c9:df:
         0f:46:c8:8e:e6:d1:15:3d:be:41:08:8f:8f:99:03:45:83:aa:
         61:bd:6b:b0:2f:0c:63:9c:c7:aa:bb:fa:8d:f6:a8:47:a5:b8:
         9c:b1:db:08:dc:fc:ae:89:37:c9:2e:e9:8d:bc:b1:4f:11:43:
         46:43:36:a5:29:e9:a0:4e:01:0a:3b:7f:8a:f1:da:e0:2d:31:
         e4:47:0e:56:99:5c:1a:49:a3:c5:79:74:2b:4a:ee:ef:1c:b5:
         01:bf:75:11:dd:00:4d:85:5a:06:17:dd:b7:f8:4e:1b:ec:b4:
         07:d6:e9:98:94:99:ef:65:29:58:2c:f1:57:35:86:6a:e5:3f:
         be:24:65:50:61:6b:90:f9:90:34:8a:d8:50:03:9f:0c:09:64:
         9b:0b:9c:e4:0f:c5:42:24:f2:8a:37:63:cd:9f:f8:00:3d:ff:
         5e:e2:16:6d:ae:93:fc:f0:0e:5b:b1:73:cf:0e:dc:83:56:0c:
         e0:a3:a2:ca:35:e8:be:70:9b:a3:52:f2:90:5c:ce:36:2d:e6:
         1a:3c:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----