Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File:                     0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier:          2CnfrIssET+4bo2QEE+W1gMy/sm+FUuDHGbrtCaQPGc=
Subject key identifier:   4C:76:30:9A:C9:07:71:C1:DB:EE:27:BE:9B:98:06:98:7B:A9:BA:3F
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer:       /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial:       01962ECFDD9246831E3AA1377553D808BD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number:          04B6
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: MyNf+zviVYLMPnJEECFMzgKGtFWGiVXF8/A9aqtCO2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dd:92:46:83:1e:3a:a1:37:75:53:d8:08:bd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=4c76309ac90771c1dbee27be9b9806987ba9ba3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:d2:e5:0b:3e:b8:fc:1b:35:a8:ea:ee:31:
                    c8:2a:59:77:78:33:48:db:5f:a0:52:1d:26:78:d5:
                    99:f5:c9:f4:2b:aa:84:06:89:be:b2:05:f7:3f:c2:
                    70:60:82:78:e2:ef:d3:a7:95:5c:d7:48:0f:15:b1:
                    06:82:5d:b6:d0:8b:2a:14:eb:99:b6:79:fa:54:a7:
                    e4:62:95:55:66:4a:9a:5b:84:f8:95:c6:95:af:f9:
                    ad:25:fe:e6:22:88:20:11:a8:26:87:f3:43:db:7c:
                    3e:76:81:da:cb:f9:fd:5a:3d:5b:d4:2b:5b:88:2d:
                    95:7a:bd:5a:b7:7e:ca:db:c6:70:70:ec:17:0c:27:
                    96:62:9c:28:51:18:2e:cf:0e:b1:40:82:6b:64:d5:
                    77:0e:35:bc:de:91:99:af:a4:79:15:b5:67:84:3c:
                    d3:d9:f9:ca:ae:67:44:36:3e:58:b5:9d:02:25:73:
                    fb:e4:38:ed:aa:c8:d2:ab:c4:ca:1a:a5:99:cb:22:
                    40:b7:6b:b1:9c:ea:0e:5e:64:06:33:e0:b6:c7:73:
                    f0:88:c8:ae:cc:4b:0c:e7:89:bf:5b:a1:7c:f7:e3:
                    91:3e:17:80:93:13:4b:3e:03:47:dc:df:76:79:3e:
                    38:45:a7:c8:20:dd:92:96:89:f1:df:86:90:cc:e5:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:76:30:9A:C9:07:71:C1:DB:EE:27:BE:9B:98:06:98:7B:A9:BA:3F
            X509v3 Authority Key Identifier:
                keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:95:bf:50:b1:1a:5f:51:2b:2a:5d:d8:e2:7d:39:92:af:9d:
         07:6e:3d:18:5d:da:fd:f4:cb:fa:95:ac:ca:7a:7b:86:0f:82:
         e6:f2:80:87:8c:6f:d2:69:e9:13:55:26:25:3e:0f:83:25:b0:
         11:31:f4:f2:92:c8:65:b1:f3:a9:5c:f7:3e:ee:8d:00:35:6f:
         96:7c:b5:67:65:70:19:66:ab:d8:3b:e0:5c:cf:8c:dd:17:85:
         3c:61:21:03:bb:27:01:9b:65:21:e3:70:61:af:db:d3:af:4e:
         85:02:13:0c:1c:ca:27:c4:d3:94:91:d3:13:8f:4a:cf:6d:6e:
         81:a7:1d:80:a5:03:0e:05:74:27:f7:3d:ad:a4:2b:ef:1e:36:
         f0:8c:86:cd:2e:5c:39:22:9b:54:2b:4d:b4:1f:0d:4e:ce:0e:
         10:c0:13:53:51:4d:4d:0f:04:82:a0:5b:57:39:68:91:b8:42:
         69:7e:cc:f7:50:79:8b:9a:f1:9c:f2:27:37:bf:22:ca:37:80:
         ca:b3:9c:6c:78:9c:43:61:aa:e5:82:16:1c:9c:40:d3:45:6f:
         3e:34:27:72:88:1b:02:c4:05:b6:87:18:1d:44:f2:87:c4:57:
         35:45:64:b1:9a:d8:02:c2:9c:8c:14:a9:32:83:da:48:05:75:
         ca:14:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----