Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File:                     o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier:          5i0+cfBxETES+y0NeyvwHyRiuU4C0JEg7GbXpYCrNQ0=
Subject key identifier:   10:37:DE:27:06:B3:E9:54:80:58:32:04:02:77:DD:2F:37:0C:79:F6
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer:       /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial:       01962E9919EF7DB6CC517FAC62A1982FDE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: DSGlfuxCJqDqNwozrFu0JoYLF5DKcNhSS7XVgoip4dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:19:ef:7d:b6:cc:51:7f:ac:62:a1:98:2f:de:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=1037de2706b3e954805832040277dd2f370c79f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:43:c9:21:3e:7d:00:90:5a:54:d7:e4:cf:
                    c9:37:93:cf:ef:74:47:bf:37:de:3e:0a:e2:4d:d9:
                    50:60:02:de:22:84:ca:14:1e:55:a3:5c:d2:59:71:
                    5b:ce:f1:a1:2c:10:ae:fa:b5:f6:a2:df:63:db:99:
                    f5:04:18:7b:6b:f2:2f:a0:9b:1b:89:6f:41:16:84:
                    8a:18:12:95:bd:bd:0f:2a:95:74:39:e5:1b:d0:7c:
                    98:f2:29:1b:21:da:22:23:b1:9b:32:d6:57:2e:d3:
                    44:df:4a:5e:42:28:82:81:ac:68:fb:5d:75:83:84:
                    2e:76:b5:9a:31:0c:cb:a0:a0:14:d4:e2:61:7b:35:
                    66:e7:48:59:8a:a5:5d:f6:03:e6:f5:9e:42:db:f3:
                    f5:94:29:66:bb:1b:bd:9e:1d:42:ca:6b:af:03:3c:
                    87:ed:37:74:fc:b8:d5:4d:8d:cc:3d:96:b6:07:b7:
                    77:59:de:7c:8e:ac:2f:14:b9:f5:be:72:ff:77:a3:
                    4e:d7:5c:bc:35:1b:11:35:a6:85:f9:dc:66:74:bf:
                    91:fb:c1:09:d0:7b:22:54:73:89:d7:73:bb:8e:09:
                    f4:d2:e0:fb:75:90:de:96:d5:ca:ed:84:de:66:3c:
                    11:1d:7e:46:50:9d:98:f5:e1:e7:bf:8b:8c:2e:98:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:37:DE:27:06:B3:E9:54:80:58:32:04:02:77:DD:2F:37:0C:79:F6
            X509v3 Authority Key Identifier:
                keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:ce:6e:f5:6b:73:fa:c9:73:19:95:7f:fd:3a:09:7a:da:
         6a:95:66:67:40:f5:eb:b3:04:2a:af:aa:6e:30:54:9e:1a:1f:
         52:f2:39:15:b4:f6:60:6c:5e:22:dd:15:94:01:4c:35:3a:16:
         41:67:74:68:c7:3c:ab:38:85:54:53:c2:48:9b:9f:d9:cc:c5:
         d9:32:15:f1:77:98:ff:e5:04:95:c8:0d:4e:55:78:30:95:7d:
         66:2e:a8:4a:38:24:63:55:70:72:68:c7:12:69:38:06:a1:4f:
         e8:ac:40:19:a9:c8:da:6c:16:43:44:09:27:dd:7e:03:10:71:
         a4:02:11:23:c3:64:a4:ff:6a:d0:4e:1b:aa:1c:a2:f6:3a:a2:
         e5:21:d2:06:0c:40:d5:ad:b8:60:a0:8f:1f:6c:78:9b:02:e7:
         5f:3b:e5:62:b9:31:7b:d4:7d:b6:45:bc:5c:0d:f5:db:c1:b6:
         4f:34:e2:00:69:87:25:d7:1f:be:6b:3a:12:dc:94:6a:8c:52:
         5b:d6:d3:e5:55:92:a3:41:73:37:04:63:9f:3c:41:0e:d8:73:
         83:b9:ca:cc:4a:da:27:66:6d:82:2c:a9:02:6a:33:50:d0:6f:
         f9:f4:ff:9b:ef:9e:f6:fe:23:73:a2:33:b9:0a:23:41:60:40:
         2c:3a:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----