Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File:                     mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier:          0FC+UqXDKTsTcNsPJHZWsXBc6oYIyZ4dzlR9hu9s7Tg=
Subject key identifier:   49:5E:82:F4:2D:18:35:3F:77:DC:11:D8:20:51:6C:B2:34:92:BC:06
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer:       /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial:       01962E98EE31605857CC9DAA6A84FB092870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number:          0925
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: mOulBSFkx5ndWCk41EcbT0DcV280GBScAoWvlhz5wDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ee:31:60:58:57:cc:9d:aa:6a:84:fb:09:28:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=495e82f42d18353f77dc11d820516cb23492bc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:49:6d:65:1c:cf:1c:e8:70:f9:67:e2:c1:
                    0a:e1:6d:b2:ac:3f:af:61:51:87:3c:05:2c:0e:d7:
                    d0:94:2b:fa:99:5a:8e:32:5e:1d:a9:f6:1b:a7:2b:
                    0a:1f:c5:5c:c4:43:e5:be:77:f0:7f:43:e2:d5:e4:
                    b6:00:cb:c8:2f:f6:a2:75:83:ab:2b:69:cc:1e:ef:
                    c9:55:5f:a0:ed:f2:8a:01:4e:ce:73:43:c3:8d:30:
                    4d:1f:c1:94:34:78:da:bc:00:19:99:c7:48:0e:d5:
                    73:61:e5:40:68:0a:2b:4e:26:6e:0b:cc:87:99:cc:
                    07:f9:67:b5:3a:54:c8:da:51:05:dc:68:ed:9b:d3:
                    1c:0b:ab:10:35:7f:b1:ce:26:81:e0:06:77:1b:2b:
                    cf:29:2e:61:12:a2:e7:be:db:0d:2e:98:88:17:6f:
                    f5:27:c1:36:24:76:92:cf:c4:ee:73:2d:24:e2:8f:
                    5c:4b:f2:b6:37:6d:18:79:46:74:25:4c:b7:5c:d2:
                    d3:28:c7:ae:55:ec:6e:cc:26:bd:90:27:8e:19:b3:
                    7d:ab:70:12:74:86:0b:c8:7d:0c:81:e9:91:d9:57:
                    58:85:10:94:c1:53:05:7f:22:de:65:f6:f4:94:20:
                    49:dc:07:32:a6:40:99:01:7f:86:4d:51:6d:c5:f2:
                    32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:82:F4:2D:18:35:3F:77:DC:11:D8:20:51:6C:B2:34:92:BC:06
            X509v3 Authority Key Identifier:
                keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:5e:4b:79:29:3c:ca:28:c1:84:0a:31:25:4d:03:eb:c2:
         10:da:b6:aa:9e:d0:ec:2d:04:73:ae:69:a4:04:df:91:6f:c7:
         44:57:79:2c:00:e5:27:b4:70:b5:2a:ed:6e:9f:fe:d1:d1:ce:
         67:80:60:8f:49:d5:fe:0d:9a:51:b5:bb:e3:15:cb:4d:ce:ad:
         ac:cd:bf:34:39:57:4c:94:98:01:36:a8:03:f0:36:8f:e0:d1:
         de:3e:f0:e0:9b:9e:e2:ee:bc:90:5b:60:63:a9:19:8d:eb:fd:
         bd:ad:ad:4e:84:7d:12:04:57:5e:72:0d:71:0b:7e:17:22:9b:
         53:80:9f:8f:bf:83:d1:b9:b9:5f:e5:ec:52:a6:38:1d:19:27:
         44:2e:3e:dc:b2:12:19:55:71:35:44:c3:5a:69:4d:cb:98:2f:
         b8:27:30:ae:36:f6:b9:5d:0d:42:49:1c:5b:88:91:5f:cc:d5:
         b9:27:94:69:47:ba:a1:a3:bd:a9:ef:1f:2d:17:9f:06:db:7f:
         bb:b2:0c:5e:d3:7a:6e:7e:74:38:ef:d5:e2:ae:d2:9d:8a:d8:
         4e:2b:86:9b:b0:f7:f0:ea:8d:b3:61:d7:3f:55:1f:6e:38:01:
         0d:51:30:05:c0:23:85:20:6e:b9:00:5c:a7:e6:bf:24:ee:bc:
         34:78:10:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----