Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File:                     OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier:          26B58ky+V04bz5yEv0dd8nC33PCqenIwT+NLmRm65qQ=
Subject key identifier:   80:EA:34:59:FE:BD:77:4A:9D:5F:52:C1:9F:E1:EF:AA:C8:99:2B:B6
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer:       /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial:       01962E61C449B13FBED5A6D6D25010B6AA86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number:          0AED
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
                          2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: XKwgEyhW4fznzphNZRnqdcxEZ8WpZ7kDLC/AEHPahR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c4:49:b1:3f:be:d5:a6:d6:d2:50:10:b6:aa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=80ea3459febd774a9d5f52c19fe1efaac8992bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:9d:37:19:b1:d4:6f:86:74:82:7c:cb:83:
                    f1:5a:d7:9b:78:23:ed:2c:30:5a:21:be:fb:f1:7b:
                    84:7d:5f:b5:b0:d8:33:89:ed:50:33:02:74:37:bc:
                    87:ee:c9:d8:d8:23:9c:7c:34:55:dc:8a:94:1a:6a:
                    d4:ee:be:dc:17:58:dc:c9:40:d4:72:6f:95:57:cd:
                    0b:fd:58:3c:49:34:f5:53:41:9d:37:12:05:4c:8e:
                    cb:ee:8f:2c:5a:ce:88:13:8c:f2:4f:47:99:55:9a:
                    19:e0:0a:f6:90:88:2a:14:58:73:82:51:a5:17:93:
                    8a:bf:c3:71:4b:b9:d2:30:be:43:4b:32:46:18:34:
                    85:40:23:17:f8:89:7a:ce:ab:dd:1b:65:4a:1a:ed:
                    de:ff:24:c3:e1:65:1c:53:b6:38:db:56:dc:e9:76:
                    04:7b:82:55:8b:0a:de:23:d5:2a:84:9a:1d:bf:5d:
                    c8:3a:45:f8:43:1f:41:c0:68:ec:7f:6b:03:e4:0a:
                    53:7c:bd:c4:8a:1b:94:9f:9d:98:e0:c1:45:48:74:
                    54:33:65:8b:67:27:89:5e:09:53:c1:4e:93:9a:2b:
                    9e:da:46:99:66:10:9c:6e:7a:ed:14:26:09:fa:5b:
                    c7:cb:b2:69:37:19:ed:c0:b4:b5:61:2b:8a:0c:da:
                    20:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EA:34:59:FE:BD:77:4A:9D:5F:52:C1:9F:E1:EF:AA:C8:99:2B:B6
            X509v3 Authority Key Identifier:
                keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:c3:0f:92:71:0a:1b:c1:6a:40:b4:b1:4c:5c:72:e1:e8:
         bf:9d:57:82:84:a8:c5:93:df:d2:fa:a7:58:40:98:2c:7b:c0:
         fc:cb:21:6e:18:21:1d:b9:f7:97:f7:72:a4:2f:e2:c4:4e:43:
         3c:3c:88:32:62:29:e9:7f:e2:ff:36:51:41:f3:91:a2:bf:02:
         d9:19:0f:96:37:fa:b7:05:3a:88:98:c2:c4:46:da:64:df:a3:
         71:41:f3:ca:8b:28:67:2a:cd:08:3c:69:20:b9:9a:45:b8:10:
         12:05:b7:76:75:b1:d6:dc:b1:6b:07:04:8b:6f:e4:cc:8d:14:
         c0:4f:46:bb:68:76:d9:ef:d2:8c:30:4e:2d:6c:e6:e1:19:89:
         7b:d5:3c:de:eb:fb:8f:c0:04:e4:8f:40:d6:ef:52:42:55:bb:
         b6:18:98:3b:91:7d:17:87:e2:6b:8b:47:08:30:26:71:e4:db:
         23:29:fd:22:0e:dc:8e:f8:f8:60:0f:0f:a2:0e:45:e5:01:62:
         6c:e2:8d:3c:5e:97:36:88:d6:8d:6b:ac:51:bb:9a:33:5d:7e:
         d4:78:42:a1:16:d2:7a:ac:27:d4:8d:76:ac:9c:e5:31:be:a8:
         bf:3d:45:c9:43:ba:01:3b:03:e5:6e:1c:7e:ba:11:b7:78:e7:
         d7:46:56:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----