Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File:                     oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier:          zqykf7qrnlY4fxpO3DW3Nu6KWlAsI7YAnbOlbl5N+7w=
Subject key identifier:   4A:EF:20:05:E8:C4:FF:E3:DB:40:F9:B6:C1:B0:89:55:44:1C:D7:07
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer:       /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial:       01962F0703913DCD0B0DE779E4CAE1B9A320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number:          06F6
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: 7vT3YVUrIBR3SM+VKTb1JK3ioQKMXaaFRgyR6AHaMIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:03:91:3d:cd:0b:0d:e7:79:e4:ca:e1:b9:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=4aef2005e8c4ffe3db40f9b6c1b08955441cd707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:f2:7c:06:7e:48:01:03:29:5f:7d:1f:36:
                    36:13:f5:cd:29:65:88:45:08:39:7b:ec:ca:a9:e8:
                    e3:0b:8d:28:5a:f3:b0:85:b0:fa:f4:c2:c7:9d:1e:
                    70:05:2f:ec:cc:81:f7:f9:09:a8:14:28:17:2b:c2:
                    f5:f8:ff:26:c9:6f:7c:3a:fd:79:15:73:64:86:0e:
                    77:ea:e0:ee:06:ed:d1:ca:7d:4e:ac:5c:5f:49:8c:
                    9b:3d:03:eb:54:2e:96:2d:b2:61:72:8e:42:d1:66:
                    bc:ae:14:9e:a1:f8:82:7a:d4:55:28:c7:34:90:d1:
                    67:bf:c6:07:55:d0:27:6a:9f:f7:e7:11:90:d6:06:
                    33:76:df:71:5c:db:b5:73:d0:52:de:e0:29:34:41:
                    1e:f9:71:8d:61:c2:cd:f9:54:0f:48:9f:b0:da:a0:
                    2c:e5:4f:9c:d9:ba:0a:79:22:e7:cb:e1:0f:ce:dd:
                    00:57:da:ae:aa:f6:11:4a:10:98:6a:dd:27:74:49:
                    10:43:a9:da:d2:9c:28:a1:32:01:0f:c0:d8:09:18:
                    62:99:df:f4:34:d1:c8:49:db:9d:ed:af:47:23:9a:
                    7a:b0:04:0a:b3:3b:a5:bc:01:8d:1b:bc:84:fa:5d:
                    db:2d:6f:be:f3:82:48:6b:ed:77:bb:84:3a:d9:a9:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EF:20:05:E8:C4:FF:E3:DB:40:F9:B6:C1:B0:89:55:44:1C:D7:07
            X509v3 Authority Key Identifier:
                keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b2:e9:49:c1:cd:42:e3:5f:21:63:64:8a:fe:0d:95:16:ee:
         f5:92:8c:7d:d8:10:a6:c6:0f:4e:e8:13:f5:1d:2d:92:04:1b:
         ea:66:bf:4a:db:fb:a4:e6:33:85:a5:cf:a2:53:8b:12:1b:55:
         cc:2d:9c:61:91:f0:56:34:52:d7:02:5f:74:c6:ce:d9:16:97:
         39:77:94:f0:d1:af:2d:c3:82:96:55:da:43:2d:83:8b:14:c4:
         f5:88:fa:93:46:85:e7:6e:09:28:f2:24:23:3f:7b:9e:26:ab:
         cc:5b:23:18:c4:54:d3:47:d3:e5:76:5d:c7:4d:50:70:6a:68:
         15:87:61:ad:1a:9a:69:c9:05:c9:eb:f4:db:f7:70:ed:4e:e4:
         89:33:47:ea:7c:ab:f8:d8:02:51:d6:57:74:a1:aa:1e:db:e9:
         fd:d6:40:00:47:c1:46:ce:18:d5:98:60:78:db:ed:df:f3:ff:
         c0:1c:a2:5b:78:c2:9d:01:e3:41:a0:6a:e8:9f:d7:89:00:d6:
         83:99:0b:9f:94:4d:79:a1:a5:fe:4a:3b:e7:a7:fc:15:f3:a6:
         f2:d0:9f:0c:52:61:cc:c0:57:84:c3:5a:13:cf:cd:21:43:ab:
         2f:dc:3f:81:82:45:a4:6f:5d:e8:3c:f8:ab:60:d8:46:ff:1a:
         bf:84:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----