Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File:                     x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier:          ocxWHzPz2Pe/9pJkVmBsZ8CzSQ2DYN5Jg0G4Giy+Mjo=
Subject key identifier:   12:48:BD:1C:B9:DC:EF:25:A5:1A:58:49:F0:55:5B:5B:AC:F2:53:7A
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer:       /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial:       01962F06A6F33715CDCF841179A17248520E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number:          13E2
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: GBwNV0haGmIDsoJgoBDLxhc1ly0Mw4vBlSeOeTXjrd0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:f3:37:15:cd:cf:84:11:79:a1:72:48:52:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=1248bd1cb9dcef25a51a5849f0555b5bacf2537a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:a5:23:0f:d3:55:13:70:6d:c9:b5:3a:9c:
                    80:ed:ab:ba:c0:c1:d0:4e:f4:d0:4c:e6:9f:fb:32:
                    a8:af:c5:88:df:3a:65:a6:81:9d:36:74:c1:9c:b2:
                    78:5c:02:67:d2:e4:be:81:49:aa:97:df:52:7a:f3:
                    03:7e:e4:74:32:b8:55:86:e6:85:1f:4f:6d:0e:0f:
                    d2:ff:d4:95:12:a7:3c:99:06:1e:96:3e:f6:77:d4:
                    ed:2c:0c:70:d7:6d:30:e4:b2:be:1f:ae:b5:37:b3:
                    31:ba:4b:47:3b:88:e6:46:43:5e:c9:c4:ae:9a:62:
                    23:ff:82:5a:50:bb:6e:24:2f:65:05:42:0d:88:ae:
                    4d:07:33:6b:7c:11:75:26:b2:42:0b:4c:dd:87:da:
                    fa:53:db:f8:ed:b9:46:63:1e:cd:b5:9d:c2:e0:c0:
                    d6:e4:7c:05:d9:8a:41:ed:fd:b6:49:6f:2d:06:c0:
                    ed:2e:e3:60:31:ee:ea:0d:bc:67:80:14:4f:dd:69:
                    c1:83:09:f3:4c:34:34:1e:46:bc:d8:1e:c2:78:bf:
                    ea:5f:de:ae:53:5a:c7:be:c3:12:53:3f:3e:fe:08:
                    1d:93:c7:f8:d1:2c:67:2a:d4:e7:8c:53:71:15:cb:
                    f7:6c:0c:8a:03:9f:8a:c3:cc:6f:eb:60:c4:03:3c:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:48:BD:1C:B9:DC:EF:25:A5:1A:58:49:F0:55:5B:5B:AC:F2:53:7A
            X509v3 Authority Key Identifier:
                keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:44:07:1c:17:b0:a0:40:ba:23:38:75:da:c7:be:f0:98:
         c7:6d:9d:d5:c9:f4:bd:e6:94:19:97:ab:88:99:b4:21:46:89:
         b0:f1:cc:e3:ed:d0:06:62:15:ca:00:3d:2d:6b:e0:38:9f:ae:
         b9:50:ee:8c:3b:b8:fa:58:85:f2:7c:3d:3f:ed:95:d1:5a:7e:
         d7:32:ec:38:ce:6c:f0:c2:13:07:2b:c6:36:95:a8:c0:7d:a8:
         10:f8:07:2c:82:92:65:40:63:71:9a:ba:e7:72:fe:4c:0c:32:
         0d:bd:da:ce:32:de:b2:77:b1:76:22:6b:5f:3b:1b:f8:f3:1f:
         26:30:f0:16:97:ea:ee:ef:b7:26:48:50:01:6c:b4:63:01:f0:
         28:71:81:e5:89:c8:01:10:df:a3:7b:80:3b:8f:3e:39:a3:91:
         cc:93:27:4e:13:d8:72:a2:0c:ab:79:0e:42:e0:ae:68:bc:86:
         0d:d6:c3:77:60:fd:e5:c5:dc:37:c5:2f:d9:79:26:0a:b4:1e:
         d0:22:32:90:3d:7e:0f:af:cd:a6:00:96:f2:6f:ae:e1:6e:62:
         71:35:83:65:c3:9a:cc:90:8e:08:8f:b3:58:80:3b:a8:98:2d:
         fc:8a:f0:b0:29:d4:14:9d:1e:7e:f3:6f:bf:7b:b1:35:71:ad:
         ab:39:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----