Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
File:                     OQlq7uS6fDS4EkCtSRrEba90wx0.mft (raw, json)
Hash identifier:          J+5nbiCj3xHs6xeGYkNDY74M8GiBb2Z1ld8SKnFtu5g=
Subject key identifier:   66:EB:F1:B0:FD:45:EF:9C:C2:EE:42:CA:9B:5A:14:B7:5E:0A:E0:48
Authority key identifier: 39:09:6A:EE:E4:BA:7C:34:B8:12:40:AD:49:1A:C4:6D:AF:74:C3:1D
Certificate issuer:       /CN=39096aeee4ba7c34b81240ad491ac46daf74c31d
Certificate serial:       01962F3D9FEB5D81A29C1CA91A38FA831DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: OQlq7uS6fDS4EkCtSRrEba90wx0.crl (hash: LBMzXJ8XTqDoDKnpGhmad3lpu7rYY3Jk7uELa7TGsv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:eb:5d:81:a2:9c:1c:a9:1a:38:fa:83:1d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39096aeee4ba7c34b81240ad491ac46daf74c31d
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=66ebf1b0fd45ef9cc2ee42ca9b5a14b75e0ae048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:66:12:62:d9:47:c2:9b:ec:47:70:46:d1:
                    16:6e:f0:b4:16:a4:3e:89:d7:93:a8:83:1d:b8:4b:
                    1a:b7:7a:df:bb:58:81:0b:31:36:84:15:4c:ca:37:
                    42:fd:9b:d4:c4:b1:1e:63:9c:21:1c:d8:f5:26:13:
                    ec:af:60:51:c9:89:dc:17:fc:08:d2:20:51:90:a1:
                    cb:78:f2:71:53:30:0c:43:a8:a8:e2:6c:8f:d0:84:
                    9d:81:a8:e9:85:3c:7c:49:04:21:a5:4b:ea:e7:7b:
                    a0:56:dc:41:0f:67:67:5d:6a:8e:af:34:e8:53:4d:
                    10:8d:b6:22:e4:09:57:44:fb:68:d3:e6:bd:a9:7e:
                    7e:6d:36:30:b2:5a:8b:89:3e:9e:f3:ce:5b:f8:38:
                    85:2b:99:1d:af:9a:8e:31:a3:53:83:95:d0:3b:44:
                    81:67:5e:a9:08:2b:e4:00:41:a2:18:98:a9:6e:fb:
                    60:d8:15:be:46:ff:34:66:89:09:82:1c:77:ef:e5:
                    32:3f:aa:38:1a:46:28:c0:15:c6:54:0e:f4:ea:7b:
                    fc:a5:2f:ea:5f:23:86:74:1b:e3:a6:6a:c4:ba:48:
                    99:6e:51:e1:53:a9:18:ea:09:21:ed:86:15:1f:3f:
                    8e:a2:88:b0:4e:25:cd:c2:39:c2:1a:2f:20:72:ce:
                    35:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:F1:B0:FD:45:EF:9C:C2:EE:42:CA:9B:5A:14:B7:5E:0A:E0:48
            X509v3 Authority Key Identifier:
                keyid:39:09:6A:EE:E4:BA:7C:34:B8:12:40:AD:49:1A:C4:6D:AF:74:C3:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1a:d0:99:18:b2:ec:bd:15:27:4c:a3:e8:25:3f:f5:56:e1:
         99:a5:61:1b:80:bd:b7:58:d9:f9:0f:02:33:96:cb:89:b5:c6:
         ee:4b:3b:08:a0:21:8d:a1:9d:a6:4b:1e:78:b4:fb:b2:bd:2d:
         29:8e:b6:97:54:f0:28:7f:86:64:ba:1b:96:71:8e:49:f4:8e:
         50:4c:ed:d4:c1:5b:aa:31:ff:35:5f:36:0e:b5:b6:3d:95:2b:
         df:39:4a:5f:be:24:ec:4d:7c:65:de:35:8f:91:a5:19:e6:65:
         b9:0d:0e:c4:a0:35:a0:34:cf:9a:8b:8a:6d:c7:f3:5f:12:fd:
         68:a0:fd:19:40:c7:11:1e:ed:55:f7:cc:25:33:f5:b4:9e:4d:
         76:d5:b8:42:bf:a4:e8:3d:4a:bf:35:e0:55:a7:ba:f5:1f:3a:
         05:2e:ad:93:4e:06:cb:da:23:2c:8b:a5:64:0f:f2:3e:c3:95:
         e0:79:63:ba:21:db:a3:2a:a3:72:a8:b8:ca:3b:a8:87:cf:a2:
         d2:bb:de:91:42:81:46:84:cd:8f:cb:95:d3:b6:e8:23:ac:8c:
         10:b8:46:97:70:8e:fc:eb:94:bd:df:cc:45:da:f4:bb:57:23:
         c8:b2:8a:36:b2:2f:83:4f:6f:61:cb:1a:a6:58:cc:6e:78:6c:
         ef:6c:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----