Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File:                     OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier:          fL3xfA3TllrRQj+Pov/hvqslpX8Mrc8GG2YkNAsHBow=
Subject key identifier:   31:17:93:7D:E0:6E:86:C9:D0:48:1C:A9:61:E9:FE:6E:26:27:85:0D
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer:       /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial:       01962FAB103E5298F9705A935DEFFB136004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number:          0BDE
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: /deOcCEYRrKKQfWvE6IHTjMqWNga2wCdhdGuz09vgdg=)
                          2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:10:3e:52:98:f9:70:5a:93:5d:ef:fb:13:60:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=3117937de06e86c9d0481ca961e9fe6e2627850d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:e0:82:d3:3b:f8:fd:4d:47:e1:c5:14:ae:
                    0e:dc:c8:ad:d9:bb:eb:b5:f6:b9:00:a1:76:4d:fa:
                    85:ab:3d:a2:1e:b0:6d:b3:53:a5:82:99:c1:8e:71:
                    f3:b2:27:dc:7a:b9:b8:b4:ef:2a:30:00:01:52:75:
                    28:f7:75:ea:ae:25:47:69:d2:24:14:ac:fb:96:9b:
                    b0:df:d4:05:43:08:07:12:71:58:b0:4d:17:ab:c9:
                    08:04:35:c4:28:05:4a:ed:62:36:10:c7:4c:38:5c:
                    30:26:c8:bb:56:39:30:b5:51:92:b0:9d:bc:76:1b:
                    62:c5:6d:4e:ec:de:6d:e2:1b:6b:eb:10:78:3c:ce:
                    18:97:8e:24:68:7a:da:df:52:70:9e:95:f2:38:20:
                    ad:52:7e:0f:0e:c8:6b:8c:22:39:4c:b7:aa:50:b9:
                    18:21:84:a9:c6:49:64:d7:47:d6:f9:77:d5:48:ed:
                    1d:48:d7:12:ba:12:a9:56:08:94:46:7a:96:71:3c:
                    c2:11:3e:27:96:f6:61:b5:ab:db:ec:5a:2d:d8:f1:
                    9b:d0:f7:34:96:d2:5c:db:a0:04:10:5d:47:1a:f5:
                    61:df:4a:43:dd:2f:f7:96:39:6d:60:e7:16:d5:17:
                    bb:70:28:28:94:7a:63:e3:aa:5f:8d:8a:c7:b2:e7:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:17:93:7D:E0:6E:86:C9:D0:48:1C:A9:61:E9:FE:6E:26:27:85:0D
            X509v3 Authority Key Identifier:
                keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:49:98:a2:d8:6e:53:cf:30:12:24:a9:c4:32:3b:7b:27:
         f9:11:34:f5:b6:a1:af:b7:0c:ef:17:f8:91:59:e4:c5:83:f1:
         b6:25:7e:8d:ee:18:ec:97:61:e5:82:3e:a6:b5:bf:34:65:39:
         6f:20:6a:62:8e:aa:5a:0e:df:7f:f1:fd:a4:18:f5:2c:eb:f0:
         0b:85:a9:06:df:52:7d:14:33:70:5c:36:21:97:40:75:a0:73:
         93:c4:63:30:58:b0:a5:ff:9f:62:a6:cc:44:60:00:e8:ab:c8:
         65:a3:ab:f7:d5:4c:e1:a1:17:e1:5a:a5:7f:64:9b:d2:51:66:
         4e:53:ff:6e:e9:f3:e7:b9:80:3a:b7:bc:82:08:46:7f:96:a3:
         9b:e8:f0:da:6b:af:05:b2:1a:28:cc:1e:3b:03:3d:7a:23:cc:
         05:01:1f:f9:72:a5:ba:e4:e7:1d:60:a2:6f:eb:9b:27:88:5f:
         b5:9c:e3:7c:e0:6d:54:5d:b4:6e:c7:61:cb:07:f2:a3:3d:b0:
         81:eb:5f:ca:56:3d:77:3a:05:04:42:e5:f8:5f:f0:58:c3:e7:
         e2:cc:05:7d:9b:f3:40:af:9a:2f:88:50:1d:f7:f9:81:d7:cb:
         c1:68:56:27:1e:d3:6b:cd:2f:8a:35:51:eb:6f:34:ed:37:d4:
         b9:16:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----