Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File:                     D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier:          Nhgb33hUCEG1s/QD57DBX1h+r0Vmuaf1aidh+Kq79/I=
Subject key identifier:   9D:8C:38:28:5B:9F:81:D3:93:D3:3D:02:B6:90:C8:38:9D:3E:65:A1
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer:       /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial:       01962E995F0707DFAD934DBCA0733F9EBDC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number:          078B
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: oPEwdBx/adkXBb4BV5kWr+16p161GJsO4DqM6mw84mc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5f:07:07:df:ad:93:4d:bc:a0:73:3f:9e:bd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=9d8c38285b9f81d393d33d02b690c8389d3e65a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:99:df:f5:74:c9:7a:53:a0:ce:a5:83:04:
                    14:e0:2a:3a:62:d3:83:99:22:bb:73:86:39:4c:5e:
                    04:fd:f7:09:b7:2a:18:1a:9a:7d:c8:76:a0:24:86:
                    58:e8:d7:29:1d:52:c0:11:c7:0c:56:65:47:27:58:
                    9d:ee:6c:c4:8c:3d:7b:aa:9c:61:a7:88:99:98:80:
                    a7:e2:f8:6e:a0:d4:8b:c1:8c:37:8a:4b:5f:65:b0:
                    7a:44:6d:84:f0:df:ae:1b:5d:6f:09:63:29:65:8b:
                    5c:60:ca:25:83:58:81:4a:68:4a:b1:27:bf:fb:a8:
                    f9:af:f0:d8:bf:97:d9:5e:df:df:d6:59:f1:8e:aa:
                    fc:fe:28:9b:4b:84:e3:5f:79:e2:28:aa:dc:6c:b4:
                    9e:04:05:9d:ca:59:61:ff:ed:a7:fe:11:f0:18:8a:
                    e9:06:c9:62:46:f6:8d:41:8c:2f:56:9a:5f:b2:c1:
                    8c:35:5f:c5:b7:92:b8:cb:30:49:8d:ab:71:3f:2f:
                    7b:72:f1:58:8b:46:d6:6f:b5:d4:f1:da:b5:69:a7:
                    ae:94:70:9c:b4:23:45:78:c9:a8:53:26:48:db:5d:
                    d2:53:96:34:40:f6:30:11:8c:ee:32:5a:49:03:a1:
                    d1:c1:73:c9:fa:5c:0b:23:46:ce:2a:90:97:77:ce:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8C:38:28:5B:9F:81:D3:93:D3:3D:02:B6:90:C8:38:9D:3E:65:A1
            X509v3 Authority Key Identifier:
                keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:66:d5:0a:03:bb:69:5c:b4:16:cd:ed:c4:1e:f9:e5:f9:db:
         64:88:ef:fe:41:bb:9c:04:d7:b1:d8:48:26:ac:d0:0f:fb:d6:
         92:c4:bf:c5:00:bc:86:d5:2c:e6:e2:d1:fd:cf:9f:39:aa:ab:
         c7:e6:45:b5:c7:0b:ab:cd:b5:a3:c7:0f:76:39:db:95:de:b3:
         01:43:1f:8d:2b:c0:c1:3b:f8:df:10:30:39:8e:e9:0b:05:ff:
         12:f7:fc:aa:d7:15:f2:53:24:7e:a2:f4:ee:f2:be:db:26:a0:
         6f:3e:6b:d3:b3:62:c2:a3:f0:65:7b:ad:00:12:d4:c3:a6:b4:
         b7:e8:a5:1b:2b:b6:4d:30:02:9d:85:f0:21:c9:88:41:43:1a:
         38:4a:37:a8:27:51:5b:63:79:af:67:c6:27:c6:e6:25:95:fe:
         a3:c5:8d:89:68:a6:69:4e:96:1e:ca:f9:46:9d:d3:d1:65:e7:
         e8:7e:11:f9:81:4c:fb:b6:e4:9d:73:6e:cc:e2:41:e3:33:8c:
         40:d6:97:0f:35:f9:62:7e:10:4a:79:b7:7b:2c:23:f1:4e:96:
         10:f7:51:78:42:c7:bf:5f:8f:56:14:e2:20:4f:3a:f7:a1:5e:
         41:56:1b:92:f5:ba:a9:19:a2:97:f5:b3:ce:41:ed:18:2f:e0:
         de:57:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----