Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File:                     xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier:          6Smg7MNWtWLDgzB7gxxCXbpLTjuBRtw6gDmltiaLywk=
Subject key identifier:   10:FA:77:FD:2C:E5:66:AF:49:66:B6:0C:26:6D:D1:8E:11:D7:A7:66
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer:       /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial:       01962F3DA73C79BB907A559DAC99D3D113FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number:          08FC
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: PY6vQ9DTPbJQ/F6VRHxyDZ505TMUodzpeiEelgjgaHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a7:3c:79:bb:90:7a:55:9d:ac:99:d3:d1:13:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=10fa77fd2ce566af4966b60c266dd18e11d7a766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:26:5e:ba:92:10:5a:4e:57:01:41:7d:b6:
                    99:8f:31:9e:7a:04:f9:6a:8e:a1:11:72:b4:ec:d4:
                    f9:03:96:a8:66:60:4e:af:13:8d:01:62:ad:04:8d:
                    a0:c7:fb:3d:2b:1a:72:d3:a4:21:7c:e6:7e:6c:64:
                    3a:31:8c:7f:5d:fb:cc:01:c3:9c:d7:7e:d8:eb:52:
                    be:ab:6d:d6:79:65:11:7b:41:a7:f5:2f:51:78:cc:
                    99:4e:ce:a4:39:f4:50:ed:51:3f:85:f3:2f:d2:be:
                    f9:24:c3:2a:ca:fd:0b:07:3a:fa:a2:c5:75:a2:40:
                    81:95:5c:71:1d:7f:87:2c:68:7f:30:6b:5b:02:3f:
                    df:b0:d2:b2:36:67:e8:a5:bd:1a:98:e1:8a:a1:09:
                    be:9c:0e:6f:47:ab:53:32:c6:c4:c2:aa:32:ac:e1:
                    1d:6e:4f:35:8c:79:98:2b:b6:78:95:bc:7e:ae:57:
                    83:04:89:c0:fe:1e:f7:ae:e6:88:ab:aa:93:e0:b7:
                    cb:55:61:e3:78:e3:a7:46:c5:f9:7f:84:04:43:20:
                    91:1b:fc:4d:09:7c:c2:38:43:66:bb:24:d3:ec:9e:
                    f1:4d:c8:a3:b5:ac:18:66:d3:d6:95:8e:57:46:da:
                    a6:80:a2:90:f9:83:6f:d4:3c:87:2d:7e:8a:91:09:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FA:77:FD:2C:E5:66:AF:49:66:B6:0C:26:6D:D1:8E:11:D7:A7:66
            X509v3 Authority Key Identifier:
                keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:44:b3:50:81:f7:8a:61:1d:af:dc:9b:1b:36:27:21:10:1e:
         94:90:ff:f3:c7:66:f2:58:cb:7e:44:07:61:2c:4a:44:b1:13:
         8d:b3:af:53:ea:bc:48:f5:ce:9b:ac:f5:d7:be:45:ec:a0:a8:
         25:8e:21:58:a5:cb:c9:21:81:5f:02:ca:2e:1a:17:49:b5:0d:
         de:fe:0f:bb:49:bb:da:a1:5f:58:31:7f:9d:e5:b0:3e:52:77:
         43:ed:64:14:fb:56:95:9c:b7:81:6e:56:51:8f:51:6d:9b:0d:
         c5:63:18:16:65:fa:17:75:e5:3b:d2:1f:cf:8c:9d:29:67:97:
         c1:1c:e3:08:84:6f:8d:85:9d:db:df:5b:76:f1:29:b0:5e:3b:
         4b:09:36:ed:d5:f3:ad:45:73:7c:f6:ea:57:42:7a:c1:50:d6:
         e3:f8:c8:37:29:50:d5:76:67:6b:64:65:40:30:00:65:9e:69:
         19:57:42:9f:8a:2b:f1:b2:b1:bb:ee:1d:5c:19:31:f7:f6:1d:
         32:95:af:85:34:90:98:e7:2a:38:4e:a9:c1:15:ea:a6:52:62:
         11:83:fe:ca:2b:40:65:b6:39:9a:3b:aa:00:92:6d:41:e0:60:
         6d:2c:7e:73:8d:50:4f:69:aa:91:9f:36:b0:a2:d0:a7:9a:38:
         90:8c:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----