Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
File:                     0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft (raw, json)
Hash identifier:          At8GJ9Vj8/mugLQFqmqiGAyopRzRYaNDwA/KWVEwUwI=
Subject key identifier:   89:1E:20:06:92:C0:15:90:29:A9:C6:C1:FF:24:40:D0:58:77:B3:87
Authority key identifier: D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
Certificate issuer:       /CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Certificate serial:       01962E9893F017C49620CA273ECCA6BEAB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl (hash: DL3epk6dvrih1h9vD3gQlTv4RUpJ2VSR8dtvsSgSnhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:f0:17:c4:96:20:ca:27:3e:cc:a6:be:ab:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=891e200692c0159029a9c6c1ff2440d05877b387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:c1:3b:eb:7f:51:07:01:db:93:0f:7d:53:
                    98:91:f0:30:c3:4a:09:c4:b4:1d:4e:49:ec:e1:61:
                    83:a4:02:fc:87:da:c4:7a:c8:88:1a:f2:f5:6d:ca:
                    33:3a:a1:e5:20:a6:ef:61:3d:13:d0:f5:59:11:da:
                    c0:28:9a:04:2d:b3:28:3b:17:8e:d6:b8:3a:68:1f:
                    8d:05:7c:27:cf:0a:7f:2f:94:fd:2b:ed:62:1a:87:
                    dc:b6:54:2e:eb:81:6a:4f:38:e0:4a:04:0d:80:c2:
                    4c:44:4b:95:be:3a:35:a9:6b:d4:e9:a8:58:f2:76:
                    59:2f:52:94:b8:ee:16:ce:a7:c9:d2:db:8e:8e:02:
                    5a:0c:59:98:22:00:9f:cd:47:72:1f:57:42:34:c0:
                    6b:3b:7b:73:8b:57:fc:b0:88:af:3c:e3:54:a4:44:
                    6f:fe:d7:9b:27:d2:f6:52:8a:74:f6:0a:2b:3a:35:
                    9c:51:f3:5b:80:19:b1:bf:be:03:73:3d:c9:88:dd:
                    c5:ce:5e:63:d6:bf:8b:14:7d:41:87:56:b2:44:8c:
                    aa:26:ba:e8:e8:3d:72:61:a4:44:e1:77:d0:21:ab:
                    c6:ca:d5:48:1c:96:8b:db:b1:35:45:38:13:d8:c9:
                    38:29:17:13:32:46:11:e8:b3:d9:cf:b8:b7:50:2e:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1E:20:06:92:C0:15:90:29:A9:C6:C1:FF:24:40:D0:58:77:B3:87
            X509v3 Authority Key Identifier:
                keyid:D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:83:75:47:36:90:77:09:b0:8b:a9:a7:d0:56:45:83:1e:
         43:d5:58:06:9f:20:4b:26:b4:3a:cd:a3:d7:ac:9b:ba:cb:3d:
         cc:6b:6c:ce:01:f6:a5:1b:94:14:95:ab:68:dc:18:27:67:ec:
         10:49:c6:13:e7:53:65:60:1a:8c:da:6e:1e:53:5a:3f:56:c0:
         ac:88:55:e6:e2:67:f3:4c:87:21:f3:1d:59:04:d3:7a:f6:37:
         8c:e2:49:3d:5f:6b:6c:29:89:4a:88:b9:bf:75:d4:9e:b2:e9:
         e1:8a:fb:de:5a:16:d6:39:57:67:2a:2f:15:f1:de:6e:f1:04:
         86:09:ac:45:27:39:47:70:f1:10:90:86:b0:d0:93:f5:76:3d:
         43:70:71:03:d1:5b:a6:4f:ac:b8:6f:82:a2:96:dd:14:6a:3f:
         ff:40:f4:b3:ff:fb:7c:c4:2b:38:91:e1:61:d4:7a:25:05:0d:
         92:0c:46:91:b5:e6:2f:bc:7d:d8:85:c5:89:f4:a3:97:06:bc:
         dd:a6:0b:d9:f1:d6:fb:0a:f5:7d:31:07:21:70:19:c9:72:3e:
         72:07:31:e9:18:a2:9d:26:dc:f1:f3:77:44:4e:79:5a:9d:1c:
         a2:00:83:c4:ff:a9:8d:8b:66:ea:05:55:cf:37:1a:43:24:28:
         a0:8a:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----