Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File:                     Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier:          NfRF7Q7qkajtDePyL8u7mLkbW4Fio02433QGAiM6QTk=
Subject key identifier:   B1:82:D5:03:5D:CD:1F:93:99:BD:60:00:A7:0C:6B:FC:05:AE:62:4F
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer:       /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial:       01962E990E4C5CCD0942A6B91442FF3AC62D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: VHt36+k7jK7n51by/9KQDBRWnWRBS7ganI+l/23Xdh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0e:4c:5c:cd:09:42:a6:b9:14:42:ff:3a:c6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=b182d5035dcd1f9399bd6000a70c6bfc05ae624f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:78:fa:83:9e:34:b5:91:59:e6:b7:44:92:
                    66:cd:f6:6e:88:e4:0d:40:4e:a0:30:9f:1a:28:c7:
                    cb:78:50:9e:23:22:6e:a9:c4:94:a8:35:e5:e1:bb:
                    81:b8:ff:ed:04:88:3b:17:2b:2d:44:08:c8:41:3e:
                    56:54:9c:c5:8e:8e:ce:6f:1d:5a:99:10:2e:5b:3a:
                    b7:cb:03:bb:fb:f7:08:19:f0:c5:08:30:a0:d3:61:
                    b9:d2:35:1d:f1:8d:a0:1b:ac:56:03:63:2b:8b:c9:
                    dd:61:1d:cd:f1:b9:07:57:f8:16:c5:af:06:71:21:
                    e8:7e:e3:30:bc:94:88:25:22:26:20:89:7d:48:1e:
                    2b:d5:af:b9:e1:a0:ef:51:3d:ec:2e:f5:2f:b9:b7:
                    9a:b3:74:78:e0:d8:08:64:37:47:2e:af:39:1b:d5:
                    c6:9e:97:1b:e6:a4:66:6f:b8:09:32:59:c6:df:c8:
                    53:b7:cc:c2:55:bf:ba:62:02:3e:60:4c:27:a8:6e:
                    5f:35:9c:ce:2b:7c:98:b8:79:3e:76:41:2a:b4:7c:
                    7e:3f:1a:4b:89:49:d1:39:ac:1a:5d:97:ab:c8:d5:
                    d4:82:16:7e:cb:45:24:7a:d4:a3:fd:f3:85:9e:ac:
                    05:a2:81:15:3e:02:aa:0f:08:30:69:a0:dc:a5:62:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:82:D5:03:5D:CD:1F:93:99:BD:60:00:A7:0C:6B:FC:05:AE:62:4F
            X509v3 Authority Key Identifier:
                keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:d9:0d:5c:5e:f3:e4:c0:a8:26:f9:62:5f:ec:6d:45:2c:
         1e:d6:24:68:7b:15:9c:d1:18:b4:7c:c4:d1:60:bf:8f:c3:c2:
         41:7f:55:e2:4b:e9:77:93:0c:e1:55:8b:a4:84:10:e9:35:e2:
         ad:0e:34:91:aa:77:c7:bb:3e:83:9f:b1:61:8f:48:58:cd:96:
         b8:51:23:55:0a:96:fa:9f:c9:95:14:58:4a:80:1d:c5:31:9a:
         12:7a:d7:08:09:a0:b1:2a:12:7d:e1:d8:2c:17:49:9a:4b:f5:
         aa:26:0f:a5:fe:18:21:ee:40:82:da:1e:66:5f:96:6d:d6:fe:
         d5:62:db:f4:6d:a8:dc:e0:79:07:9e:d9:ce:aa:0b:0d:45:85:
         8a:a6:16:98:e7:09:7b:2a:61:05:36:07:bc:6f:53:63:eb:fd:
         be:bd:bd:25:74:45:d6:1e:61:0d:10:1b:73:94:00:04:12:67:
         96:40:a3:8f:bd:2e:8b:a8:05:a4:ea:91:f4:93:fe:28:16:a6:
         97:cc:e4:11:5b:59:64:fa:44:ea:49:e2:2c:9b:e9:b3:5d:25:
         33:a3:cb:56:84:9d:10:69:2e:94:d3:36:2e:03:de:31:d6:c3:
         71:8f:ed:28:83:ad:4d:10:6d:fc:83:f6:23:1e:8c:b8:fa:82:
         2b:03:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----