Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File:                     0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier:          ehrhkeP3VPIJhguy3cLEZx2BwT1uiXtGoqB2yGqvdG0=
Subject key identifier:   24:42:F8:E4:E8:B2:FA:02:DE:74:49:F9:4D:61:42:0B:E4:05:13:A0
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer:       /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial:       01962F06A0F4D2430F0B9D370DF9F0D55D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number:          0E52
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: J+7R1suSAE/FEiN6zkBOyNPP1vRp2pED6LOQGMxDPvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a0:f4:d2:43:0f:0b:9d:37:0d:f9:f0:d5:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=2442f8e4e8b2fa02de7449f94d61420be40513a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:14:68:35:82:6b:09:73:b9:1d:ca:e1:f7:
                    ac:b7:87:c2:08:0b:39:1d:13:f2:f9:17:05:20:47:
                    ba:a4:56:af:13:5b:de:87:43:a0:3f:d4:b9:32:54:
                    f0:7d:73:b8:a1:80:06:c3:a0:e1:91:11:c1:87:aa:
                    d5:f2:5d:dc:01:90:03:ef:e0:3b:9c:9b:b2:0e:cb:
                    c2:84:a3:45:71:84:87:46:1a:6a:64:e3:19:34:85:
                    9a:e6:30:c6:33:67:7a:e2:d2:f3:54:15:31:30:4b:
                    05:bf:27:d7:00:00:a9:6e:4d:b0:41:ce:5f:a8:f0:
                    24:93:a6:94:63:76:92:d4:26:4f:23:27:75:8b:e1:
                    e8:59:c2:c2:40:04:9b:ca:18:f7:04:19:01:7c:62:
                    f2:b9:48:7e:18:5e:9c:e6:1b:11:23:b9:31:2b:59:
                    23:ef:e1:84:fc:80:91:fb:85:7b:a8:1a:40:2f:5d:
                    c6:1f:32:d3:c6:22:c8:90:4c:e7:21:62:a8:db:f6:
                    d3:b6:69:44:b8:28:57:a7:9d:18:ba:4b:8e:f6:ef:
                    6a:3e:6e:da:2e:c9:3a:d8:2e:ea:b5:71:f8:89:66:
                    7f:5e:05:12:14:59:10:da:d4:93:d3:38:46:64:eb:
                    9a:4d:1e:11:cb:bb:d6:76:41:b8:d8:3d:24:37:b3:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:42:F8:E4:E8:B2:FA:02:DE:74:49:F9:4D:61:42:0B:E4:05:13:A0
            X509v3 Authority Key Identifier:
                keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:50:ab:78:d9:27:52:b4:3d:b0:aa:02:a6:a5:96:92:fb:d5:
         5e:7b:5d:ef:09:ad:24:e1:d7:43:a5:54:3b:39:d7:e8:e7:f5:
         70:84:d4:6f:05:ba:9c:21:79:99:cc:ef:6d:23:24:32:eb:15:
         56:66:f4:cd:25:0a:31:b0:dd:42:40:e3:20:c6:d0:9e:5f:b0:
         3b:f5:1d:a7:cd:b5:54:89:f8:c6:57:be:8a:21:dc:d6:46:cd:
         84:a9:5e:2d:a5:cb:c0:63:0c:47:7e:d0:ba:fc:05:46:d9:3c:
         57:1d:50:ee:2e:89:5b:73:2f:b8:70:07:01:34:1d:34:a4:43:
         95:90:76:dc:d7:0b:7f:2f:a9:a2:29:ce:04:66:80:4f:f5:a9:
         d3:e6:f8:41:85:8c:0d:e6:9e:fb:06:2b:55:f7:83:4c:99:d0:
         90:f0:e4:3f:91:2e:82:cd:9a:84:4c:06:7a:cf:fa:ce:a0:0a:
         de:3b:f1:73:ab:1a:fc:21:44:d2:92:db:ff:77:d1:70:ba:56:
         1b:dd:9e:94:e8:1f:6d:56:f7:68:d2:58:0e:87:45:13:2e:71:
         fa:b6:81:02:b7:7c:1a:25:21:60:23:ec:1d:77:a6:ea:ac:00:
         8a:d4:00:9c:53:10:a8:11:a5:fa:7a:6e:fc:f0:29:06:4f:8a:
         05:4e:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----