Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File:                     o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier:          hgw20FAPRzU/9nHbOSLKszkgoBs7XwfmIVyTA+DSo4c=
Subject key identifier:   E9:BA:97:CF:8D:73:E7:3E:0C:15:C2:89:85:61:62:4D:D2:F8:B4:74
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer:       /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial:       01962E9965BE78EE5A07400149EE01826CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number:          0B71
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: UnWsQWZiWFCWPEMXdq4L17ijtsxYEKcvBS19lW0aisM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:65:be:78:ee:5a:07:40:01:49:ee:01:82:6c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=e9ba97cf8d73e73e0c15c2898561624dd2f8b474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:da:8c:7a:1d:12:a6:82:b3:45:37:15:c4:
                    fc:1c:a7:30:cc:0a:37:b0:33:1b:13:21:52:4a:7d:
                    63:db:d0:d7:b4:bd:bd:34:32:44:8f:e7:28:83:5b:
                    81:a2:18:ce:87:df:1b:a3:7a:ef:de:a1:d2:4a:79:
                    d9:fe:70:bb:66:39:b3:57:90:34:7b:5e:26:07:ea:
                    20:d4:fb:07:2c:05:63:6d:bb:6d:77:63:b0:04:e8:
                    80:4a:94:22:2c:79:cb:a1:83:a2:89:11:63:57:8e:
                    d2:26:67:52:b1:fb:28:37:5c:e1:db:30:c1:08:ae:
                    98:83:93:d4:26:61:ad:52:01:b2:b1:1a:a8:65:f3:
                    94:f2:63:96:4c:1d:24:96:ec:76:a7:71:e2:5d:58:
                    21:58:09:4f:9e:1a:12:e4:73:5b:9f:cf:ea:c7:cb:
                    d1:e9:d2:ea:bf:2b:5f:0b:2a:7e:14:84:ff:ef:ff:
                    6a:fc:9a:f4:78:0a:db:3b:50:78:e7:b1:c4:82:1d:
                    d8:74:23:e5:c3:83:9e:ce:b7:36:de:06:f8:31:7f:
                    c8:ed:31:7d:79:5f:f8:e8:b8:19:b2:16:96:b7:50:
                    02:d0:0b:31:8b:5d:65:ce:4a:1d:3e:0e:17:87:d8:
                    00:d9:b8:61:f6:82:69:36:f3:cc:47:32:56:c5:55:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BA:97:CF:8D:73:E7:3E:0C:15:C2:89:85:61:62:4D:D2:F8:B4:74
            X509v3 Authority Key Identifier:
                keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:54:94:76:05:5c:73:8b:de:84:c6:01:cf:e8:8e:7c:66:73:
         88:5b:57:2c:54:20:97:26:47:7c:7a:d9:08:58:dc:12:52:58:
         33:c1:2b:8b:58:a0:24:19:e3:eb:63:7c:63:4f:b6:4c:95:8a:
         8b:f5:d2:ba:be:ac:6a:93:9c:66:53:1b:84:03:51:11:72:11:
         42:93:66:70:28:f6:1a:e3:7d:f3:b4:eb:4e:8d:20:d2:6a:a0:
         f5:23:73:41:a0:d1:d0:54:06:b3:b6:0d:2d:f9:bc:19:f8:dd:
         0f:82:03:30:91:53:16:b4:1c:78:b5:eb:b8:a9:52:da:9b:27:
         7c:3c:b8:9f:d3:c0:42:ab:aa:3b:b2:71:52:e7:a7:e7:e4:64:
         df:90:32:6e:a1:60:87:92:5a:c7:9b:15:e7:6d:94:d4:22:77:
         34:88:4d:9d:18:7f:13:7b:ec:7f:ec:69:0b:74:c2:7f:ca:fc:
         42:9c:0b:6f:29:d1:2d:56:d6:57:16:fc:df:dc:5d:ed:d6:7b:
         8a:03:56:4f:ed:88:7d:e5:48:90:6b:52:8d:cd:18:63:1c:ec:
         89:e5:64:6b:9a:1e:8d:e4:f6:a9:24:1e:e3:39:53:d7:61:be:
         d4:da:da:5d:b3:7b:f1:62:d6:49:b8:04:ba:f4:ff:91:12:31:
         95:3e:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----