Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
File:                     oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft (raw, json)
Hash identifier:          uCldF4vA0OD8Jx1ssl71PROrxyQ3F4VHfVhw1awuKts=
Subject key identifier:   E0:DA:FB:71:55:8B:82:B8:AE:41:37:E4:FE:91:27:37:2D:B1:6A:EC
Authority key identifier: A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
Certificate issuer:       /CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Certificate serial:       01962E98B4854890BCAE5313262C319DEC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
Manifest number:          10BA
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl (hash: INfERN4Mn0/Eqyq9B89dbq+vEuQ7yPEeznO7UmjwGbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b4:85:48:90:bc:ae:53:13:26:2c:31:9d:ec:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=e0dafb71558b82b8ae4137e4fe9127372db16aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:21:56:0f:51:70:90:03:45:2b:71:45:b2:
                    2c:dc:ab:a2:e5:1a:11:05:1c:4d:96:9b:0a:4e:dd:
                    2c:c7:05:15:1d:6b:0c:2e:62:7e:a5:90:a0:bb:ec:
                    6c:77:89:82:0f:c4:e9:a0:c8:38:86:2d:ae:c8:49:
                    7b:ae:dd:23:34:9a:69:fe:58:44:c8:c4:ad:f5:a7:
                    e7:9f:cb:c3:48:ee:a3:47:d3:5d:fe:45:89:25:ed:
                    21:8c:8c:fa:44:7d:a7:fc:ae:56:dc:bb:fa:6f:76:
                    28:50:cc:98:1b:b7:b7:ec:76:4c:3d:4f:ca:54:51:
                    23:12:b2:ff:61:59:65:32:97:cf:5b:76:d8:e5:11:
                    51:87:38:97:a2:62:5c:58:52:c0:24:db:d7:d1:cb:
                    b0:25:86:3d:4d:41:6d:3b:80:5e:06:cb:f2:f5:ca:
                    6b:80:74:f4:ac:b3:f0:44:23:6f:74:53:6b:00:30:
                    83:8d:c6:00:b6:c7:29:2e:1c:ca:69:3a:78:48:92:
                    a3:de:9d:f2:38:7f:7a:01:77:f9:b8:99:bf:19:c7:
                    e1:4b:52:dd:d4:49:db:96:40:15:e5:77:19:8b:21:
                    00:26:d0:0f:db:fe:91:38:c0:7b:51:9c:dd:08:79:
                    c5:bf:27:48:bf:f6:db:f3:08:85:8a:76:09:68:9f:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DA:FB:71:55:8B:82:B8:AE:41:37:E4:FE:91:27:37:2D:B1:6A:EC
            X509v3 Authority Key Identifier:
                keyid:A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:31:8a:94:a6:61:55:c1:06:46:1b:a7:b2:42:56:ae:cb:90:
         bc:d9:4b:5c:5b:0f:d0:e5:f0:e6:cb:bb:e2:1b:6b:a2:27:f7:
         f2:86:89:a2:0c:07:1e:60:90:42:bc:8b:b7:78:65:d7:ae:9c:
         7f:e6:89:8e:ec:41:0c:4e:6a:78:31:d3:bc:79:fd:a6:09:e2:
         59:cd:63:70:54:2c:4d:a5:c0:c9:50:9d:48:f9:38:37:5f:d4:
         25:c2:65:d0:f7:26:5b:0f:f6:ec:31:8e:70:64:2d:dc:df:85:
         8b:a4:36:6c:4a:73:07:0a:2e:26:0d:37:65:6f:a6:1f:a1:42:
         b1:81:00:8c:64:f7:4a:d6:b8:7c:0b:33:40:74:77:5b:2d:ce:
         c9:8b:d0:f0:44:6b:45:64:98:9a:89:5b:3d:08:ea:70:07:9d:
         22:d1:cd:23:f1:f8:27:c7:c8:0e:30:d7:8e:0e:b4:6e:bd:8a:
         b8:c7:ec:7b:0c:52:a4:0e:25:c6:09:96:36:71:8e:e4:f6:78:
         c4:87:ff:4d:42:db:57:c5:ca:c1:65:be:50:c7:2e:90:1e:fa:
         9f:42:b0:a9:8d:76:31:98:22:5f:ec:5e:73:e7:cb:ce:ca:1b:
         7f:53:a2:16:c0:29:c4:f3:7d:08:0c:27:5e:4f:9b:20:d6:7d:
         6d:a2:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----