Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
File:                     oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json)
Hash identifier:          ZapkZIBKMa/pCmR8EkdP0t/kQpGC3BclImAc7zRcyGo=
Subject key identifier:   DE:CA:7F:C2:11:C8:25:64:AA:5E:AF:11:CB:56:E1:21:04:EB:BA:85
Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
Certificate issuer:       /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Certificate serial:       01962E98B596945A630A42B8F6C560E6BD50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
Manifest number:          0D8E
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: 0pecno8Ll3egy8T5qPzfYV+UAFAAsm8b1toc5jkPH/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b5:96:94:5a:63:0a:42:b8:f6:c5:60:e6:bd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=deca7fc211c82564aa5eaf11cb56e12104ebba85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:4b:7b:64:02:13:7c:10:02:ab:75:f2:b9:
                    d3:57:53:de:19:1c:26:b1:f4:17:b7:86:7d:de:c6:
                    34:a4:ff:46:ae:9c:76:50:ff:51:38:3e:a3:52:2a:
                    bb:74:c1:b7:57:13:e3:7f:1f:36:80:3f:8a:6f:1b:
                    bb:c5:e9:5e:1d:8b:e7:fd:cc:c5:2f:41:e7:71:a6:
                    9f:35:bf:8d:b6:ce:0c:d2:94:b1:62:90:db:f5:f7:
                    95:22:06:c1:db:8b:fe:9d:96:5a:fa:55:a8:33:e5:
                    dc:c8:ad:d7:84:f9:b8:f8:3d:1a:ea:7e:9a:68:75:
                    01:f9:6a:c2:e6:1a:00:fe:02:8c:86:ce:e0:ea:61:
                    4e:44:05:f1:9b:a1:5f:d2:f1:55:11:99:c7:4d:ab:
                    7d:5b:56:88:65:c6:6c:58:61:6d:19:cf:f4:16:57:
                    ea:ab:ce:7d:cc:9a:1f:b1:50:f3:6b:4b:d3:6c:9c:
                    54:d2:da:ad:6c:f0:09:84:1d:8b:aa:4f:76:76:00:
                    4e:f4:05:ba:e4:d3:70:14:43:02:0d:54:18:09:d8:
                    5a:d2:cd:b1:d4:08:2c:e1:83:d6:68:1a:7f:77:2d:
                    20:5f:a8:eb:82:45:76:33:38:51:3a:4a:cf:18:b0:
                    7f:0c:52:3b:05:36:8a:16:fe:6d:bf:a5:9c:d8:fa:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CA:7F:C2:11:C8:25:64:AA:5E:AF:11:CB:56:E1:21:04:EB:BA:85
            X509v3 Authority Key Identifier:
                keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:47:7c:70:7b:ad:aa:37:18:c1:fe:87:d1:42:33:92:37:ba:
         ad:29:3b:4e:9f:62:62:22:5f:a3:67:09:46:4b:5d:4f:9e:59:
         57:9f:a7:fe:fc:f2:69:cb:0c:d7:54:cf:40:28:17:e8:f1:77:
         4e:87:26:f0:0d:94:4d:c0:3f:c2:ba:00:22:2b:61:ed:b1:74:
         2e:25:d4:a5:6c:f5:d8:8c:44:06:93:63:26:ed:e9:97:40:78:
         b9:9c:8a:16:cb:e3:21:b9:ea:68:fc:18:36:a1:8a:a9:32:9f:
         1b:80:a7:bd:9d:23:93:71:3f:4e:f6:11:bc:79:63:66:60:75:
         a6:ed:7e:f5:80:9f:7c:ed:e7:84:41:fd:12:f3:fc:b8:0c:c3:
         07:45:f1:93:59:a1:b9:91:78:b9:80:7f:15:95:19:1d:02:68:
         ed:2c:ab:9e:15:0e:3b:7d:92:f9:8f:c2:c1:03:34:42:d3:95:
         65:d8:46:fa:d4:cc:5a:eb:18:37:42:e1:f8:73:29:de:52:ff:
         ca:a3:85:a2:0b:03:5f:51:7b:e2:b4:5b:9a:da:69:97:c7:5f:
         c4:26:0a:ce:3c:39:84:ae:15:16:cc:83:39:c7:ff:12:b3:f5:
         58:5e:c5:62:51:42:bd:ba:47:e7:50:30:c7:05:97:61:e6:61:
         53:86:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----