Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File:                     ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier:          91m9E5yxuP1k862QkVOt7KgqdOrFKGDSmCDMfMXV5JY=
Subject key identifier:   EA:63:43:BC:DC:59:92:F8:F0:30:E8:7E:DE:34:13:76:1E:CC:C4:A2
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer:       /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial:       01962F065BACD54C1674F88339D6C5A9281F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: mvQhkrXh9tvN+xVJcQg5WAHCrbOz10zicZ4IYzD6VQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5b:ac:d5:4c:16:74:f8:83:39:d6:c5:a9:28:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=ea6343bcdc5992f8f030e87ede3413761eccc4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:8c:90:75:cb:fb:63:1d:42:c3:3f:70:5d:
                    77:6a:f7:d4:73:37:8f:b9:cb:81:e6:0f:bc:cd:08:
                    9b:70:2c:55:e6:a4:2d:5a:54:a3:19:71:d8:5e:fe:
                    c6:51:92:4d:b3:64:40:16:52:1c:ee:15:38:79:ca:
                    49:50:83:07:7e:02:7a:6d:99:2e:8c:71:dd:46:02:
                    90:d7:7b:50:5b:48:9b:ba:0e:ec:54:a4:17:92:c0:
                    bb:76:17:ab:6f:67:67:b3:cc:f6:43:84:52:6b:ed:
                    5f:0c:bb:04:5b:b7:47:33:bc:5a:bb:8b:ce:c4:17:
                    2c:b6:84:79:36:77:12:88:b6:04:64:9b:23:60:c7:
                    25:55:0d:9c:d5:3e:f9:dd:b2:ec:df:2e:1b:12:9b:
                    f5:53:3d:9c:14:06:d4:c3:86:11:84:d8:2a:87:ef:
                    a6:e3:2b:e6:ee:fc:c7:7c:7f:e9:e8:7c:27:3b:45:
                    b9:0a:a2:38:33:1e:2b:55:f4:78:f5:f4:9c:5b:76:
                    ae:c4:8b:0e:30:56:26:f1:60:0e:a9:9c:f7:bd:fe:
                    fd:00:37:6a:ee:53:20:be:df:87:e1:39:a4:8a:74:
                    99:68:ff:b6:e6:69:e9:fa:3a:5d:da:27:79:1c:ef:
                    25:22:ce:d0:c8:5c:51:80:d7:2a:49:44:a0:5e:7c:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:43:BC:DC:59:92:F8:F0:30:E8:7E:DE:34:13:76:1E:CC:C4:A2
            X509v3 Authority Key Identifier:
                keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:96:57:b9:9b:d2:50:9d:cc:58:85:7f:20:4e:e6:c6:ae:71:
         dd:3d:21:9b:cb:83:e4:d4:37:61:95:d9:01:32:a5:57:78:01:
         fc:a2:4f:d4:32:a8:1c:ac:85:d6:02:09:e3:45:d7:cc:55:97:
         80:f6:fe:38:f5:ce:5d:00:eb:6a:40:d0:6a:96:01:83:8e:00:
         98:db:ae:22:ef:d6:f1:ec:d1:cd:b4:81:8b:b1:9c:12:8a:d1:
         ec:c3:7d:51:c8:1b:70:32:77:0f:43:59:bb:d1:0b:b3:01:c2:
         ee:ac:b2:26:3d:1e:5f:66:75:9c:b6:5d:16:91:d3:93:b4:95:
         9d:93:b3:d9:91:bc:0f:8d:1f:1d:10:7d:71:2d:5b:40:cd:06:
         a1:f4:05:5e:11:4d:62:2e:80:c5:00:1b:3d:f1:a2:0c:3a:65:
         79:60:b9:5f:3d:bd:4d:4f:af:a4:55:e8:c2:39:f7:62:43:cb:
         ef:98:0d:f8:23:f8:3b:7a:eb:9a:5e:62:ee:68:58:8e:29:01:
         b5:63:d1:b9:9e:0c:10:a7:71:ba:c2:19:a9:14:a3:83:52:61:
         34:81:bd:b3:a6:85:f5:ae:38:b5:31:db:41:00:3b:e3:0b:58:
         df:64:39:66:39:92:30:46:a9:dd:52:c1:ac:ac:68:3c:fb:ed:
         05:9d:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----