Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File:                     OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier:          cJZJAJtRt6L5Ax4XHo/C8LRZ2agOBb38zUsJMgi/8Fs=
Subject key identifier:   F7:F8:35:6E:FD:8E:D6:61:15:0B:2A:5F:AE:4B:BA:1B:14:58:F0:CC
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer:       /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial:       01962E98FE8B8644CEC8821F74B7D87ED010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number:          0566
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: A52HcjjVvjURrnqIKzVJffIr5pg.roa (hash: 0khgPx2sOeKgtKjIWQMCspv9EOJEwLPaIfkqJUfbIZI=)
                          2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: 5Tjq10SRVhDJwBl1zZ5C/QHOvNBaKjftzfDef5e5z6E=)
                          3: hbbnLuZpD5go-VUHqMX6cwP0VYE.roa (hash: nw4SsVKZtCMAF0Lk44Bca7n8JsrQ2D2s1YmNiP6JfI0=)
                          4: m07MDAfpyBy-79ZtRPrjp1nHgUM.roa (hash: nt5wNRLp/3eGdwl0jwqVp6q4VVV8Q+vzoY7sROczSbU=)
                          5: teZ2j_hniWXjQJK5Wyibz3szGe4.roa (hash: AAisqmOnDvymL41tgHnrdsHw2NsaGEhx42Vrfhr3Fe8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fe:8b:86:44:ce:c8:82:1f:74:b7:d8:7e:d0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=f7f8356efd8ed661150b2a5fae4bba1b1458f0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:04:90:23:d4:9d:5a:05:b2:5e:8c:6e:af:a2:
                    ee:7d:23:bd:34:37:bb:c0:ea:4c:8c:cb:f2:14:22:
                    0d:e0:76:c4:af:b6:f5:82:14:12:b7:8b:ad:0e:02:
                    d3:bc:5a:20:65:1e:5a:a9:84:76:74:1f:8d:85:c4:
                    08:9c:95:38:8d:3c:98:5f:fe:9b:fe:63:6e:7e:ea:
                    70:81:f2:81:ab:48:f6:fc:ff:6e:bd:aa:a9:6c:eb:
                    ee:0c:32:e9:25:d6:85:8e:98:50:36:5c:9f:6b:51:
                    94:18:ad:ff:d1:dd:ff:d8:56:13:46:e6:ee:20:25:
                    bc:98:97:04:e4:c5:a3:3c:a8:c6:99:1a:e1:54:b8:
                    46:15:9c:86:c8:82:04:8d:91:17:32:3c:3e:6b:6e:
                    0c:4d:37:b6:98:95:55:29:63:3e:7e:aa:61:6d:36:
                    62:33:6b:58:98:38:ad:37:5b:ac:40:1d:89:25:f3:
                    81:8a:2e:c2:c6:b5:a6:43:4b:1d:a8:94:d5:3c:2d:
                    36:60:cb:c1:1b:ac:81:ae:ff:e2:c1:8b:30:d3:9d:
                    25:e3:b0:90:71:b9:54:72:76:4e:be:09:5a:8f:a3:
                    a6:5c:0d:b9:58:ad:ad:ec:28:4c:a7:6e:1b:a0:f8:
                    4f:11:39:97:6a:a9:05:0d:fb:2a:b8:f2:b3:e9:6d:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:35:6E:FD:8E:D6:61:15:0B:2A:5F:AE:4B:BA:1B:14:58:F0:CC
            X509v3 Authority Key Identifier:
                keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:09:6d:3a:2e:c4:49:bd:20:8e:b7:4c:49:ab:c9:95:01:3e:
         2d:ae:d5:f5:94:97:9f:e8:be:e6:5c:d6:ac:dc:cf:fc:b0:ba:
         82:3e:e7:e1:84:cb:1f:d4:08:a4:c5:5c:26:5c:94:1e:6c:75:
         5d:2a:09:77:c3:42:b9:66:64:da:e8:6c:23:d2:38:c1:e2:19:
         7a:28:c3:f0:47:7f:d2:f8:9d:97:bd:6b:b2:ac:8c:a0:0d:45:
         a8:27:7b:ef:7f:e4:69:cd:94:d7:1c:3e:7c:b0:05:75:67:76:
         12:74:af:5c:f5:c2:a6:4f:04:ed:09:bf:80:3f:37:dc:09:56:
         bf:58:82:33:c2:80:8c:5f:aa:de:dd:6d:40:a8:95:5d:67:16:
         8f:bc:37:20:58:57:2e:b4:1f:56:39:03:5c:0a:45:c9:d2:75:
         32:99:50:d6:6d:cd:f2:b2:c2:55:12:1b:4c:96:cb:88:bc:0d:
         36:e7:4f:61:21:9c:bb:bc:4c:6b:84:98:af:25:6f:b3:be:af:
         80:87:bd:28:25:c5:4b:c3:d3:b1:70:92:69:52:38:80:19:e5:
         8e:f6:2d:9b:58:83:87:07:f7:b6:a1:84:bb:a1:8b:05:0a:50:
         65:fa:4c:ee:bd:ee:40:7d:ad:00:79:1a:d3:a1:b8:48:94:3e:
         59:c2:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----