Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File:                     0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier:          KPxkIWRRjzM7uZ4m2ao85OMCqno0CyBA8Us5jmgieqA=
Subject key identifier:   88:23:44:73:16:8B:7D:06:B8:4E:9B:8F:F8:4C:45:53:1D:99:A3:C2
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer:       /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial:       01962ECF869D260192B1448DA6BC0A08E0F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number:          13AF
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: C2n8gQrZ0iDqYGSY2htYiPb+6forkaQsht9IpnweCV4=)
                          2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:86:9d:26:01:92:b1:44:8d:a6:bc:0a:08:e0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=88234473168b7d06b84e9b8ff84c45531d99a3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a6:d3:9e:b1:26:f6:75:7f:45:4a:ca:aa:55:
                    9d:e6:02:ed:02:f1:32:98:4b:a3:18:32:79:ad:7d:
                    5c:3a:07:51:b2:46:b9:5c:28:49:40:47:d9:d4:a4:
                    89:d6:fe:43:27:cf:69:fd:50:bd:44:09:8b:e1:e4:
                    14:02:f2:67:f0:ec:a5:4c:0d:ef:87:b6:cf:9c:4c:
                    70:55:c2:91:21:4e:46:56:51:0b:35:b7:57:12:86:
                    17:ab:25:33:dd:94:d0:b5:b6:34:0c:80:fb:33:1a:
                    94:1a:6b:32:62:c7:d1:bf:74:a5:8b:74:e9:04:63:
                    74:c4:d5:74:f9:fe:be:b7:26:60:ed:5b:cd:a3:fd:
                    80:51:28:3c:09:6c:f9:93:57:ea:c3:7b:09:34:a6:
                    7d:3f:40:53:58:c4:62:5f:e6:b3:ff:9f:f8:b6:ac:
                    fe:40:d2:49:95:58:93:b0:d6:f3:1b:a8:45:8a:68:
                    01:01:97:2f:49:07:7b:bb:53:82:1d:e8:9f:11:b3:
                    a5:60:a2:d3:3b:4a:a3:47:ac:ff:16:6c:82:c2:f6:
                    1e:ab:e5:68:dd:4e:6d:3e:a1:73:94:df:f5:fa:7b:
                    5e:94:64:1d:0b:8a:55:20:5c:cb:fb:96:ba:0f:60:
                    0a:b3:aa:64:15:ee:03:d8:c9:29:34:22:7a:6d:4e:
                    75:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:23:44:73:16:8B:7D:06:B8:4E:9B:8F:F8:4C:45:53:1D:99:A3:C2
            X509v3 Authority Key Identifier:
                keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:5d:9b:c8:95:1b:b1:6a:ad:1d:cc:d6:7e:8e:f0:be:2b:
         56:85:74:40:67:b0:87:df:8f:7b:08:a3:10:a9:3a:cf:81:34:
         1b:cc:f6:90:9a:0b:4a:48:42:75:9e:e1:db:06:72:fd:2d:52:
         f5:55:76:6e:d9:45:8a:98:f8:e6:12:53:c7:e7:24:b5:52:6c:
         00:72:3d:f0:af:9e:fb:c9:49:4a:5c:b0:e3:1e:a1:7b:39:8e:
         f6:95:1a:3f:93:12:b2:a4:5d:88:cc:84:6f:4e:c1:17:49:24:
         7d:2c:7e:7c:7c:7b:b7:39:85:f7:96:39:5f:e7:f9:c9:c8:f2:
         3b:04:f3:b7:6e:af:ff:6e:01:64:c6:ab:28:3e:ed:9d:ac:54:
         ff:97:f9:7b:ba:76:bc:2d:ec:8d:9c:95:8c:ed:95:e2:34:c2:
         80:74:a9:32:86:53:15:83:e9:f8:71:66:95:74:27:de:73:89:
         23:50:44:c4:69:77:eb:86:18:0b:21:c8:e7:99:b6:bc:68:b7:
         91:d6:c1:18:f4:00:1c:40:c7:f4:8d:c3:5f:07:d4:ab:6f:a4:
         0a:92:f4:6c:34:6d:a0:26:6b:f0:fe:66:aa:fe:1c:71:4c:87:
         cf:a8:b0:ab:c4:1c:10:2c:b9:eb:12:e3:a8:0b:3d:92:68:ef:
         c5:13:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----