Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File:                     Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier:          YJ4dS/BTa9P2skWpRfIU6W0yZtNQyPDhTrs9wgscfM0=
Subject key identifier:   B6:82:BC:E9:FB:E5:AF:37:86:8F:09:A9:BB:F6:03:36:20:88:47:FE
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer:       /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial:       01962E995C1255D9D9423A081ED1A9462D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number:          1327
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: u0rqdZjb/SeKV1ROSeCladoROXVSFSncUWTnqO8X0no=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:12:55:d9:d9:42:3a:08:1e:d1:a9:46:2d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=b682bce9fbe5af37868f09a9bbf60336208847fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:45:0e:3e:6b:2e:44:ec:f5:1a:b7:b0:8f:
                    ce:2c:20:ce:da:de:5c:36:e5:3f:4b:f2:59:f7:68:
                    61:a6:12:71:2e:62:40:a8:02:79:a9:46:c4:90:62:
                    34:de:c0:93:75:c3:7c:5f:90:31:aa:3f:d8:0a:52:
                    68:bd:20:ca:9b:3a:7e:89:40:ad:92:66:dc:a4:32:
                    e0:dd:18:ec:c5:64:32:47:76:0f:16:94:e1:1f:f2:
                    ff:b3:98:70:72:cc:fa:d3:25:3c:86:7b:80:79:77:
                    4a:de:d5:64:ed:e9:27:fd:70:7b:2d:bb:74:86:70:
                    08:d9:64:25:96:3e:bc:cc:26:52:bd:dc:e3:31:38:
                    92:f6:70:eb:6a:54:21:ee:e5:8e:94:55:31:39:b0:
                    16:28:3c:d8:35:67:5e:e4:d6:c1:60:47:d5:f9:57:
                    a5:c7:48:8a:a4:5f:5a:21:a8:25:2f:27:27:c4:72:
                    2d:31:6d:84:a3:f6:a9:e6:7b:16:2b:13:03:a9:de:
                    6f:bb:23:d2:d6:6e:ea:4e:26:cb:71:af:d8:4f:e8:
                    6d:7f:f1:ad:3f:2e:99:c4:78:21:24:29:da:4c:9a:
                    53:c3:48:4b:74:ad:3f:eb:e7:f1:27:72:99:1f:63:
                    3f:8d:8b:69:05:56:1c:08:a1:a5:e9:e8:da:98:be:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:82:BC:E9:FB:E5:AF:37:86:8F:09:A9:BB:F6:03:36:20:88:47:FE
            X509v3 Authority Key Identifier:
                keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:cb:d9:20:f8:da:9e:7d:fe:5a:8a:7e:1a:df:81:8c:54:
         1f:cb:b3:b8:5e:85:13:3f:03:f1:92:8b:b5:14:f1:f2:e4:bb:
         97:79:9a:04:34:a8:b9:2f:96:33:c4:94:66:de:53:02:7b:b4:
         8a:c6:b8:42:64:bd:d9:03:03:70:f7:9f:10:ad:df:56:ef:4b:
         78:cb:e5:8e:5a:ed:a9:a5:41:6b:2a:b4:6b:c7:1e:67:62:5a:
         fc:0f:f7:55:e7:fc:ac:d2:c4:31:30:9a:a1:fc:18:7e:4d:38:
         e0:72:56:53:1c:82:55:87:a9:4d:31:e3:3e:0f:7c:5c:12:78:
         da:c1:cd:c9:a4:96:12:a1:ce:2a:58:8c:ec:17:03:4a:48:19:
         d8:59:9c:c7:36:49:a6:c0:10:07:3e:99:46:d1:62:3c:db:39:
         a2:40:65:79:e5:0f:08:e4:10:21:a5:c4:a3:fd:8d:cf:13:9a:
         a6:6c:51:1e:d5:af:53:2b:86:43:79:c2:a7:66:0b:ac:0c:dd:
         91:0b:92:96:62:ad:9a:f3:da:0a:fe:30:49:e1:a1:8d:90:2e:
         51:ce:25:8e:8e:ec:d0:4d:76:81:e7:82:14:be:7c:c3:1f:6b:
         87:6c:31:45:fb:83:94:04:16:65:da:a5:93:4a:4c:4e:0a:f8:
         9e:75:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----