Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
File:                     oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft (raw, json)
Hash identifier:          oblNKkmb8mECaQNTtBZO7mPX5ZqXQQu+2/gqU6xMIXE=
Subject key identifier:   26:63:2C:AE:C3:5F:25:31:84:04:C6:73:77:E1:46:8D:54:4D:C1:BC
Authority key identifier: A3:23:E0:41:DD:45:96:53:33:E2:B1:47:4F:C5:0B:E2:F0:FA:95:0E
Certificate issuer:       /CN=a323e041dd45965333e2b1474fc50be2f0fa950e
Certificate serial:       01962DF397730EE05F249B0083770BBE5C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyPgQd1FllMz4rFHT8UL4vD6lQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
Manifest number:          08FA
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: oyPgQd1FllMz4rFHT8UL4vD6lQ4.crl (hash: zIsWeUT4/Y12JynoJzksXKfHP1P8agBaUd5SeGbb5As=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:97:73:0e:e0:5f:24:9b:00:83:77:0b:be:5c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a323e041dd45965333e2b1474fc50be2f0fa950e
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=26632caec35f25318404c67377e1468d544dc1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:d3:f9:cf:ee:fe:3d:fe:af:38:ce:7b:ac:
                    fd:f8:b5:71:79:c2:9b:c4:f0:70:75:77:34:0b:10:
                    b0:bb:2b:16:a5:4c:37:8e:32:19:da:79:b6:be:86:
                    59:c9:d1:cd:12:f2:b1:cf:40:b4:d5:0b:ea:eb:8b:
                    ec:48:f9:57:06:8b:f7:9d:03:7e:e8:9d:d9:8b:06:
                    fe:35:eb:f8:c6:96:f8:1c:2b:59:28:fc:43:7b:14:
                    96:60:5e:d5:da:16:c7:23:07:b5:2f:55:90:1b:df:
                    2c:9b:35:eb:9c:ba:df:25:e7:06:91:99:7d:36:38:
                    36:d3:d0:d5:43:30:3c:21:f2:7e:67:a0:27:9f:d8:
                    4a:81:16:1a:eb:7e:17:74:77:11:c7:bb:0b:9b:93:
                    8d:22:e0:fe:f4:c5:ea:0c:66:fc:43:68:56:f3:d1:
                    4a:d3:26:15:88:6f:be:ae:0c:64:86:cf:5c:2d:ad:
                    d4:f4:ca:74:45:c6:e8:d1:47:61:b1:06:23:d4:56:
                    0b:84:79:d0:bd:66:63:06:ba:8c:19:f7:32:e5:1e:
                    cc:cb:12:e4:a1:b2:14:59:81:12:c9:cf:bd:78:0f:
                    23:bd:0e:e7:c8:66:0e:42:73:35:d4:1f:e9:32:af:
                    76:08:25:5e:1c:f3:46:2f:1f:95:8d:f9:3b:6d:f6:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:63:2C:AE:C3:5F:25:31:84:04:C6:73:77:E1:46:8D:54:4D:C1:BC
            X509v3 Authority Key Identifier:
                keyid:A3:23:E0:41:DD:45:96:53:33:E2:B1:47:4F:C5:0B:E2:F0:FA:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyPgQd1FllMz4rFHT8UL4vD6lQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:77:87:78:86:da:b0:f5:08:da:4e:79:9c:89:0b:04:aa:e3:
         70:9a:7f:e3:82:33:6d:5d:e6:2f:01:73:cc:5f:ba:91:89:fe:
         36:e3:ee:2f:a6:51:cd:f8:87:7e:32:3a:2b:57:9e:57:0e:d2:
         ec:40:56:3f:ce:1d:f5:54:c4:a4:80:bd:ad:f2:0f:cb:d1:3c:
         e6:ec:c0:4b:1a:81:49:5a:24:a8:47:b1:13:82:3a:cb:a1:37:
         c1:68:f5:f3:8f:f0:e2:6d:74:16:e8:bf:be:ee:b7:5a:45:75:
         8c:81:f4:9a:a7:c7:35:10:2f:11:be:6e:f4:b5:21:b8:ea:bf:
         1d:43:8a:e5:99:6c:d7:f7:e2:cb:64:7d:ee:5b:7d:70:b1:26:
         2a:7a:14:ac:42:f3:b8:f9:15:36:61:28:48:63:4d:8d:7a:fc:
         cc:67:d6:49:66:d1:19:8a:26:83:b2:8f:5a:40:b4:d6:5f:02:
         82:8c:a1:c0:54:d6:2a:bb:25:76:5e:5e:d4:0b:53:54:b4:4c:
         28:68:6c:ac:8e:70:5a:f7:b4:35:c7:58:04:60:93:6c:60:6e:
         f1:06:be:8c:fe:64:d6:e5:f0:b0:e5:36:15:58:45:06:6c:77:
         7c:73:df:08:90:93:fb:32:7f:e2:da:58:1a:34:e9:10:e1:a2:
         54:2e:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----