Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File:                     o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier:          hh9Y2ZYzobmXI13ZkqFuOvf6wPduwd7WIi2qE8nUhwA=
Subject key identifier:   7C:36:58:FF:CE:99:A0:AE:E0:F2:BF:A2:D0:22:37:15:0D:27:93:E0
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer:       /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial:       01962E991C5457CBE7C6923E355786A9B441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number:          1068
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: a1Xjq04kMaDt8W3Tx+xnHj01fHEVWi9B7HRqVdaG7rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1c:54:57:cb:e7:c6:92:3e:35:57:86:a9:b4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=7c3658ffce99a0aee0f2bfa2d02237150d2793e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:c5:6e:79:ab:68:14:a6:06:bc:0d:4c:7b:
                    28:84:cc:24:2f:cc:f9:1a:3d:29:0d:3e:79:9a:9f:
                    2b:50:9a:00:5c:d5:94:45:90:06:41:f0:8e:80:a0:
                    93:e5:78:75:db:11:26:2f:fe:a6:e8:62:01:66:aa:
                    94:4c:a6:b0:2b:ea:68:ba:fe:45:e3:6b:92:6f:a0:
                    8a:c9:c0:42:e5:63:19:37:ee:a8:8b:30:50:a9:97:
                    49:ac:9f:14:c0:f7:c2:3b:71:f7:49:96:1c:d4:a4:
                    72:45:84:ec:92:e8:db:57:2b:7a:55:a1:62:7f:be:
                    2e:57:10:b3:3c:1e:01:88:3d:f8:5c:9c:58:af:f9:
                    93:96:f8:fc:6b:99:08:ee:6a:32:4d:10:fc:e0:67:
                    1d:48:14:49:ff:db:37:b8:61:62:03:fe:94:df:b8:
                    b3:5e:7c:4b:93:b2:3e:cd:2d:9c:1d:88:db:0d:bd:
                    2a:ea:e2:06:c8:a4:59:2f:fe:70:99:47:a8:28:96:
                    a2:aa:b2:93:63:bd:9e:63:32:46:2e:7a:b2:3f:26:
                    7d:a3:20:d9:ef:5b:ab:f5:50:3f:b7:c3:69:3e:21:
                    76:ba:f8:72:b5:f2:44:51:c9:95:a6:2e:dc:01:1e:
                    8f:1f:de:e4:5e:9c:a1:db:63:0e:93:66:a6:78:8d:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:36:58:FF:CE:99:A0:AE:E0:F2:BF:A2:D0:22:37:15:0D:27:93:E0
            X509v3 Authority Key Identifier:
                keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8b:76:d5:8f:84:2c:41:23:d5:0b:54:5b:ee:40:1d:ea:62:
         72:5f:b4:3d:22:69:89:42:5c:2f:d0:fa:a7:58:31:b7:6f:c5:
         59:c6:c1:89:b6:14:e4:47:cf:e9:1b:c0:2a:ce:b0:af:81:d8:
         ad:fd:0c:aa:85:37:d7:fc:62:7b:be:5c:cb:d4:f6:98:15:fc:
         f2:b7:70:f9:72:56:d7:d9:62:1d:e5:98:dd:eb:dc:85:18:fa:
         24:46:6a:d6:79:58:d6:72:f4:80:0c:08:0f:a0:1d:c0:6f:e3:
         5f:48:d2:bb:2f:94:6e:31:e6:27:d0:7e:57:6e:b0:23:63:c3:
         24:5d:b8:91:5e:c0:45:c2:ce:ac:c6:b8:20:68:43:73:f1:83:
         2d:ae:3f:5c:c6:df:4f:fa:7c:37:23:d8:7c:72:31:22:71:ed:
         73:af:83:c7:4d:4d:54:10:fc:96:f2:bf:72:09:8d:de:71:1d:
         c7:0c:7d:94:bd:99:5d:77:4f:ca:63:47:2b:79:b9:d1:0d:85:
         b4:d9:b0:75:7d:e4:66:76:b2:0a:22:88:c0:cf:66:7c:4c:f4:
         f9:73:63:09:9f:6b:b8:bd:67:98:12:f6:2f:db:90:c8:e0:d6:
         8a:7d:78:55:b0:39:c5:e3:cf:95:33:3f:aa:70:b8:da:03:0f:
         79:17:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----