Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
File:                     oYhrwvjZOpz8WoN-LydS7knyJHQ.mft (raw, json)
Hash identifier:          W/ZGQ3gdzKzEeC1xo/amtdAW5TyZ1klMvo2ut/HOi8M=
Subject key identifier:   00:2C:B6:8E:F6:DC:43:3A:9D:3C:5D:56:DA:D8:BC:DE:2C:49:D1:54
Authority key identifier: A1:88:6B:C2:F8:D9:3A:9C:FC:5A:83:7E:2F:27:52:EE:49:F2:24:74
Certificate issuer:       /CN=a1886bc2f8d93a9cfc5a837e2f2752ee49f22474
Certificate serial:       01962F06BBCEE2D8E8A6C8DFB105C15F2DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: oYhrwvjZOpz8WoN-LydS7knyJHQ.crl (hash: Gu30k917MHiVW1QwjWl/4cTPwhz8OivvuB+wx11osd4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bb:ce:e2:d8:e8:a6:c8:df:b1:05:c1:5f:2d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1886bc2f8d93a9cfc5a837e2f2752ee49f22474
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=002cb68ef6dc433a9d3c5d56dad8bcde2c49d154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:cd:8e:0a:cb:8c:25:5f:37:bb:4e:29:50:
                    4e:2a:58:30:00:d7:4f:7f:3b:28:76:33:66:4b:3d:
                    e5:99:96:06:f2:67:47:16:d6:cf:59:8f:1f:1e:1c:
                    05:02:ac:df:2b:c2:99:aa:ff:89:70:e0:56:4b:9e:
                    31:a0:f1:48:60:60:c4:de:bb:15:f7:f5:48:8e:3e:
                    57:0e:6d:85:f6:2b:c3:76:74:da:f4:76:cb:8f:3b:
                    76:bb:3f:5f:cd:32:35:de:cb:59:5f:60:c9:f1:e9:
                    9c:7c:c9:77:c7:fd:88:52:f0:49:18:cd:8f:de:22:
                    03:d6:81:7d:26:0c:74:18:42:2f:b2:2e:02:b6:4c:
                    0c:84:41:1e:02:6e:a3:31:8b:dd:82:d6:fb:52:f1:
                    62:8a:f5:7e:8f:71:a6:d8:f1:95:f5:4c:bc:51:0e:
                    e2:04:da:e9:16:cb:46:38:fb:12:81:a0:c8:22:71:
                    f0:44:05:8c:a9:09:40:6f:e6:06:91:9c:2a:a8:6b:
                    cf:bd:74:47:61:06:07:ad:e6:60:f7:48:fc:73:a3:
                    cc:55:62:1f:c0:c2:d7:76:ef:2a:51:7d:d9:3c:4f:
                    29:af:d2:59:2a:77:e4:56:d9:be:3c:26:1b:44:66:
                    53:12:bd:d8:a8:aa:cd:bc:e5:a6:da:14:2d:29:9a:
                    76:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2C:B6:8E:F6:DC:43:3A:9D:3C:5D:56:DA:D8:BC:DE:2C:49:D1:54
            X509v3 Authority Key Identifier:
                keyid:A1:88:6B:C2:F8:D9:3A:9C:FC:5A:83:7E:2F:27:52:EE:49:F2:24:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:59:ff:58:3b:b5:06:ac:74:4c:98:e4:3e:a5:f5:ec:64:11:
         f0:25:ea:57:25:1f:99:c8:6c:91:13:73:48:39:81:f2:54:0b:
         a3:37:30:28:bf:33:89:99:fd:79:c2:dd:c3:15:67:09:40:c0:
         eb:2d:1e:63:bd:38:ca:52:87:42:b5:08:d2:15:d1:0a:6b:f7:
         e6:c2:ca:38:9c:e2:f9:32:db:98:1b:45:a0:14:7e:8b:50:a2:
         0f:f4:48:ee:ed:bd:b3:97:df:83:7c:3d:04:3c:c5:7b:d4:91:
         e2:fe:39:b5:b1:63:0e:4a:75:60:36:09:1e:7b:d0:d1:94:6c:
         61:00:9f:8b:e8:68:05:96:e5:de:3c:ab:b4:7a:0e:22:3f:36:
         13:91:94:c7:7a:b1:aa:bd:c9:78:f4:90:75:8e:b6:85:d5:24:
         74:64:12:3c:5e:d4:9b:7f:0b:0b:a7:2d:d4:60:b0:3c:8d:57:
         fb:af:6b:e7:45:02:3e:e9:12:e3:13:dc:26:25:8e:33:aa:53:
         0f:43:de:88:30:98:55:84:df:be:13:7b:de:40:e7:f3:6f:56:
         3e:27:d3:2e:c5:01:cf:52:bf:c1:10:87:ff:d1:5e:9b:a8:cb:
         91:b1:03:19:59:c2:28:65:55:8c:c2:4d:af:2c:20:6c:a6:16:
         03:34:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----