Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File:                     0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier:          XfOYvLANZY2QL4/x9qYXEqsmI6lEWHr4i8vi/pbtDU4=
Subject key identifier:   8A:A1:21:85:CA:B8:92:E8:DD:EA:49:AA:70:60:0F:B5:BD:40:E4:CC
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer:       /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial:       01962F06DC8D66606FDFD59914D4AD93363F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number:          0340
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: cV9fEsnpsFsmuFx9+l7dQqSHp9eBvMqh5Sgjue0dKQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:8d:66:60:6f:df:d5:99:14:d4:ad:93:36:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=8aa12185cab892e8ddea49aa70600fb5bd40e4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:37:60:2b:87:9c:52:3a:28:2b:5f:a6:6d:
                    3e:24:fe:a2:a9:d7:b0:1f:37:26:5e:c5:6e:3d:ec:
                    08:94:c2:1c:6b:e8:a4:cc:c1:6b:17:ca:5a:02:ab:
                    85:b1:9d:0e:cd:45:f4:4a:5b:5f:49:e6:7f:12:a2:
                    21:02:97:d2:07:61:06:87:dd:db:02:5a:2b:a5:8e:
                    e8:27:96:59:ca:26:fe:63:7b:a7:20:8b:00:d2:bb:
                    25:91:a9:ef:f7:7e:f1:41:22:fe:e6:0c:ef:e8:91:
                    9f:39:29:bb:38:14:36:48:24:4a:70:17:96:e1:18:
                    62:27:57:12:56:ee:cf:5b:78:2f:db:9a:f0:7d:20:
                    1e:38:49:19:e2:dc:eb:c0:9e:c9:66:a6:06:4f:0d:
                    6a:b3:12:d2:a8:dc:94:15:a9:78:35:22:10:b5:43:
                    a8:73:45:38:12:85:13:f9:9c:32:5b:f1:ab:ce:21:
                    a1:eb:9d:62:b2:39:90:6c:5a:a4:25:3c:42:70:d6:
                    30:3f:0f:cd:de:02:a0:4b:8c:37:1e:89:72:a0:fe:
                    d1:e1:af:c3:db:e3:2b:b1:b0:08:99:1a:73:5f:e4:
                    02:fc:d7:82:df:b4:9f:38:1d:56:ff:60:60:8e:8b:
                    cb:31:d5:37:49:b5:aa:e9:fd:31:ed:18:74:bb:c6:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A1:21:85:CA:B8:92:E8:DD:EA:49:AA:70:60:0F:B5:BD:40:E4:CC
            X509v3 Authority Key Identifier:
                keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:41:4c:dc:12:7f:2d:4c:31:57:09:40:45:eb:43:52:c0:a7:
         fe:32:07:8c:91:6b:9a:fd:0f:27:c4:13:ec:51:c1:8f:a9:c0:
         5b:73:7c:fd:43:70:e1:f6:fb:6d:e5:54:10:ed:73:fe:e6:28:
         47:44:ca:fa:45:6d:a4:1f:22:61:db:cf:c8:5b:1a:ea:8c:a6:
         af:af:b7:94:7d:4c:8a:01:63:8d:c8:ea:50:fa:b9:e4:ed:93:
         14:fa:7f:a1:d8:bc:c6:24:b3:9b:b7:29:1a:58:1d:09:e9:f3:
         9e:fb:2b:8b:e1:34:64:41:be:07:17:41:36:3e:8a:7d:67:b2:
         97:4a:d1:b7:1f:b4:48:2f:4e:47:08:94:11:13:a2:fa:b0:64:
         f7:da:4a:3c:10:a0:12:0e:89:36:6c:75:6a:50:e6:97:fb:e3:
         b5:2c:af:89:7d:a1:81:95:db:54:4c:2d:25:c6:29:ee:96:c5:
         51:de:3b:8b:47:29:f9:b8:ce:d3:49:d5:58:28:aa:45:c9:89:
         f0:cd:61:01:64:4c:30:44:47:19:94:cc:bc:19:59:ee:d4:bc:
         9a:1c:63:c0:66:69:f8:5f:c5:8a:06:fe:47:59:06:59:4a:f9:
         09:3b:0c:ef:2c:e3:f9:27:8c:4a:2d:3a:46:11:15:00:f8:34:
         3a:fa:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----