Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
File:                     DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft (raw, json)
Hash identifier:          jnhjJ0216mKzPLkhXKd/ZGdJJBKm1tBBdAzCl0RbZKg=
Subject key identifier:   B2:9C:C2:56:38:E3:4B:65:98:AC:FA:2F:94:2C:6B:DC:FB:A6:BD:37
Authority key identifier: 0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
Certificate issuer:       /CN=0e85fd3c9f9558b218022ff409fc554faee79090
Certificate serial:       01962F3D6FCD4B8323F63A6A4C25185DB248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl (hash: vuUDA0uXfayi1P5mPJQ1rdC7f29F3QJFVrEYRZ2KPAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6f:cd:4b:83:23:f6:3a:6a:4c:25:18:5d:b2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e85fd3c9f9558b218022ff409fc554faee79090
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=b29cc25638e34b6598acfa2f942c6bdcfba6bd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:c6:27:80:9f:78:03:fa:23:64:3b:d9:8a:
                    17:81:17:81:da:07:bf:33:89:30:b6:75:83:44:6f:
                    51:28:de:5a:21:ac:15:b5:2c:7b:33:d4:06:89:04:
                    47:59:d5:69:d0:f5:33:73:fc:25:63:26:bc:b3:6b:
                    84:2e:60:8b:77:8f:05:3e:4d:6a:dc:fe:5d:c2:6a:
                    e0:d8:db:65:17:0f:db:3c:8f:8f:cd:fb:05:2b:ce:
                    16:4e:00:3e:fa:17:27:d8:27:3a:dc:0d:23:bc:84:
                    17:85:39:c2:81:f2:7e:2e:57:7a:00:50:ec:c2:19:
                    35:ea:26:94:bb:eb:f7:98:21:04:c6:32:c1:b4:19:
                    bf:9a:ad:c2:55:a9:96:cd:49:0d:9f:24:f2:6c:d8:
                    e6:7b:11:0d:e8:37:f3:63:75:77:76:09:d0:ad:f3:
                    b4:10:46:70:10:35:e3:6b:0f:c3:ef:1b:89:90:99:
                    97:bb:0a:f3:98:7d:9a:27:59:18:61:b6:87:8c:55:
                    57:6c:97:b6:cb:24:d1:63:f4:06:c2:7f:1f:2c:64:
                    27:7a:ee:58:81:99:ed:0b:c9:fc:67:8f:e5:55:4e:
                    42:49:64:2c:e2:5d:c7:9d:33:cc:29:6f:50:27:b6:
                    1d:a6:8a:14:9b:87:3b:1b:58:6e:a6:1f:2a:3b:15:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9C:C2:56:38:E3:4B:65:98:AC:FA:2F:94:2C:6B:DC:FB:A6:BD:37
            X509v3 Authority Key Identifier:
                keyid:0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:14:8e:79:00:c1:70:d1:43:f6:f6:cd:75:02:d1:6e:f7:eb:
         1a:87:67:07:68:f3:d0:6e:55:76:3a:02:44:68:b7:ec:76:86:
         f6:59:95:26:d1:c5:20:2b:18:30:b1:41:08:9e:01:50:26:f1:
         9e:10:b7:ca:be:98:69:99:a4:cf:e2:db:9b:50:f6:a8:8e:5c:
         db:57:4b:c7:36:40:01:c7:c1:26:e9:93:f4:5f:e9:95:e1:8b:
         75:0d:ef:b5:e6:9d:63:0a:32:a4:55:27:a9:a3:71:99:36:9f:
         14:e7:b1:0f:8b:bf:e4:27:00:96:78:e3:ee:1c:78:ca:a6:c9:
         39:16:ef:ef:1a:d3:3f:57:43:75:cc:27:ce:00:23:a6:e2:23:
         89:31:ab:16:9d:1f:e5:e4:fb:15:92:dc:0d:0c:73:16:4d:91:
         d0:6b:eb:b9:91:c2:3e:8f:56:7e:f7:49:72:c9:40:f0:68:4a:
         c8:72:e6:2d:ab:9e:52:f7:d3:4c:63:a9:47:f0:1f:65:a9:11:
         b3:ac:19:5b:bb:3a:db:4b:6c:34:d5:38:fe:e5:48:37:38:89:
         25:d6:96:47:27:51:d5:9c:bb:25:14:67:8c:e4:04:7e:e8:ff:
         44:e2:36:8f:05:53:77:d3:e6:84:ef:86:f7:b6:75:b2:9b:cf:
         2d:76:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----