Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.mft
File:                     oUIVlcmI-yZTZeucofo_F_xXB28.mft (raw, json)
Hash identifier:          GM2tMkjwK+kLy92YMwwMzXz7g9mbGG9jldut6pyA940=
Subject key identifier:   5D:18:46:E6:18:1F:C7:60:60:5F:18:0D:1C:DC:67:4A:B7:85:A3:68
Authority key identifier: A1:42:15:95:C9:88:FB:26:53:65:EB:9C:A1:FA:3F:17:FC:57:07:6F
Certificate issuer:       /CN=a1421595c988fb265365eb9ca1fa3f17fc57076f
Certificate serial:       01962F7450FAD09823226239FF37C8A65840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oUIVlcmI-yZTZeucofo_F_xXB28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: oUIVlcmI-yZTZeucofo_F_xXB28.crl (hash: z6ANVbeTxXRuuQWMD4I1dk+DPW3sas1rMkhfZ63XNR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:fa:d0:98:23:22:62:39:ff:37:c8:a6:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1421595c988fb265365eb9ca1fa3f17fc57076f
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=5d1846e6181fc760605f180d1cdc674ab785a368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:b2:de:10:5c:59:4a:69:22:0c:d0:40:25:
                    06:d3:23:2a:2e:c6:c9:b4:25:02:06:4f:d6:60:67:
                    b5:95:a1:7a:95:4e:a3:ac:c6:90:6f:2a:6d:21:a1:
                    99:8f:fd:67:43:5c:ee:36:8e:b7:9b:10:2f:16:4b:
                    dd:d0:4d:80:c4:25:fc:21:91:93:06:27:db:42:ac:
                    28:64:db:a6:58:1c:3f:df:84:3c:b9:51:b2:49:01:
                    a7:da:dd:71:d2:84:53:8d:51:f5:57:d9:c5:29:b4:
                    92:f5:29:9d:35:0b:6c:06:1b:5d:89:9a:53:db:1c:
                    d5:f2:3c:fd:43:53:48:1a:b4:75:ec:d6:eb:b2:b2:
                    4c:68:5a:cb:1a:59:81:7d:63:d8:56:40:b7:d1:1c:
                    15:46:bd:3f:b7:c1:bf:54:60:3b:9f:56:8b:a0:7b:
                    0b:97:11:70:c5:50:aa:12:61:ea:f3:21:27:e1:9e:
                    52:a8:d8:e5:8e:b6:be:87:52:1f:69:88:7b:70:26:
                    4d:09:08:00:15:ac:ce:0b:e8:a0:61:d9:6e:29:db:
                    38:05:ad:76:4e:7a:a9:10:92:31:0d:01:a6:c3:f9:
                    2e:c3:ce:44:3a:72:4d:3e:b2:6e:cf:3a:20:c4:b9:
                    fc:c0:51:46:a1:71:c2:63:3d:17:2b:0d:62:1f:f0:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:46:E6:18:1F:C7:60:60:5F:18:0D:1C:DC:67:4A:B7:85:A3:68
            X509v3 Authority Key Identifier:
                keyid:A1:42:15:95:C9:88:FB:26:53:65:EB:9C:A1:FA:3F:17:FC:57:07:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUIVlcmI-yZTZeucofo_F_xXB28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c0:1f:f1:b0:8b:0f:66:d6:30:88:b6:c1:3e:da:29:59:77:
         f4:af:36:3b:d4:e7:ef:2a:80:17:19:d9:ec:89:25:9d:97:75:
         59:36:f1:d2:1b:7b:2b:f4:e0:4b:ea:d7:c5:72:82:12:a4:59:
         ab:11:0e:11:89:e0:34:f5:ab:65:c9:51:a8:e1:12:26:81:8e:
         94:88:55:08:7b:3e:2c:b7:95:65:1c:c1:24:0b:89:6d:ed:64:
         6f:53:9e:b6:d8:0c:22:90:b5:5e:0b:e8:6a:54:57:3e:3e:df:
         25:30:8c:f4:d0:8d:c4:76:3a:d7:88:5d:dd:0d:34:cf:d5:bf:
         ce:62:c8:59:46:a4:c5:a8:54:e5:37:2f:27:0f:eb:79:a8:b9:
         9e:64:a3:ab:e7:86:19:50:cb:d1:28:27:25:8d:39:e8:5a:bc:
         54:d6:f7:6a:11:75:0d:8e:d8:99:33:36:fa:01:da:bd:16:e9:
         93:61:36:60:1b:76:c7:97:09:92:15:90:33:d1:fe:34:86:91:
         da:40:b2:15:5f:aa:ee:ea:a3:de:7d:f8:ea:c2:78:4a:2b:25:
         84:5b:40:93:18:6d:f3:1f:bd:a9:9e:3c:f0:2e:23:4f:bc:ac:
         03:54:95:e8:09:58:81:2a:4a:f2:99:97:5c:79:95:0e:b6:db:
         a2:01:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----