Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File:                     OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier:          9igJXqKeqhg10I/MVmKXIxdQm3tBhLnt04SOrmq/4oo=
Subject key identifier:   B1:04:70:F0:2B:66:3C:C2:6A:AE:83:EA:0B:CA:56:C8:36:94:1E:2E
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer:       /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial:       01962DF4448FE4AF51EC8FDBDD147315B644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number:          0B9F
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: q9vqJ8vR7MMTUacf/q7ooEAwJTwRlPEx+DVczeB+QcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:44:8f:e4:af:51:ec:8f:db:dd:14:73:15:b6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=b10470f02b663cc26aae83ea0bca56c836941e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:d6:d0:43:ef:08:75:f8:c0:96:75:08:d9:
                    ca:e8:05:a5:3c:0c:89:cf:a6:f5:35:02:95:2c:69:
                    b2:7b:b0:1f:03:c0:6c:70:88:f3:99:a6:9b:37:32:
                    f8:6a:26:30:fe:36:1d:9d:cf:ba:f1:53:4f:77:4b:
                    c6:4c:c9:ec:1f:5a:3b:1f:7c:a8:12:fd:ba:32:2c:
                    03:2b:6d:ec:99:9d:b9:fb:5b:f4:57:f1:86:42:50:
                    79:db:94:1c:06:92:8e:8f:d1:1a:6a:77:89:79:f7:
                    62:a0:1b:5d:76:e8:71:8d:7b:b3:4f:58:3b:e8:92:
                    63:ee:b4:b9:68:98:79:45:28:bd:79:3d:ed:e7:cd:
                    f7:07:bb:08:2a:c6:ad:5f:c3:05:75:8a:76:f1:ce:
                    c0:66:aa:cc:c8:32:9b:e3:94:a2:5d:34:a1:ca:ae:
                    82:e2:11:d5:5f:f1:e6:59:70:e4:c8:0b:01:fa:42:
                    34:c7:0d:8e:9e:c9:34:0c:b5:08:b1:1a:0c:0a:72:
                    f2:08:42:6f:de:80:11:3f:48:ae:ab:5a:a8:6e:08:
                    2f:9c:b8:73:58:fa:fe:37:d1:ce:06:53:ee:86:52:
                    1f:cc:ea:ab:6c:32:03:98:69:56:d2:1d:9e:ac:3b:
                    03:78:06:48:57:25:14:e7:c8:ae:54:56:27:3a:a7:
                    91:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:04:70:F0:2B:66:3C:C2:6A:AE:83:EA:0B:CA:56:C8:36:94:1E:2E
            X509v3 Authority Key Identifier:
                keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:13:03:e9:87:5e:c9:32:99:c4:86:c5:13:01:d4:c7:10:2d:
         4b:b4:db:7b:fc:50:1b:44:eb:1d:84:f1:74:5b:d9:20:eb:fe:
         95:4f:0d:1e:1a:c0:ec:8b:82:19:1c:0b:a6:8b:be:15:f9:64:
         22:0b:16:da:fa:55:dc:4c:e9:80:2c:92:bb:c3:0d:4e:42:76:
         4f:10:5b:b7:bb:f0:22:b7:be:7b:1f:5c:8e:02:0c:cc:73:b6:
         48:c8:6a:82:ca:6e:b5:3d:43:f7:0e:d6:4e:62:13:f3:ac:43:
         9a:91:81:1d:59:ca:dc:68:90:be:fb:26:62:e2:bf:69:eb:41:
         0f:3a:e1:c1:6f:60:d7:db:3e:c5:c2:a9:b1:63:05:d6:d5:d9:
         c9:54:86:a8:01:b3:04:3f:41:96:c9:d0:f4:0b:21:54:1a:00:
         35:31:f0:b0:f2:1f:63:3a:45:d3:f5:68:cd:21:34:fa:49:6b:
         0b:94:4c:b5:fc:07:80:92:e9:b4:f2:fb:ce:93:d2:ab:38:9e:
         d7:43:59:80:22:02:71:fd:36:4a:5c:69:ba:ba:3f:10:44:a5:
         2f:a4:1c:8a:ef:05:88:09:77:94:29:38:d1:c0:e9:47:19:67:
         cb:e2:a6:b2:96:2a:85:48:07:1a:0f:27:73:a9:d7:f4:f8:2c:
         d5:8e:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----