Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
File:                     DmuhOkKdJETI5sfYf-vxnVD-dQo.mft (raw, json)
Hash identifier:          GUr4KQ8gZiOLz68ASKBgfvWTt9cmyrNW5pZWEynBMlw=
Subject key identifier:   4B:9A:23:00:E0:CE:BF:B8:17:72:82:98:20:D6:B0:23:2B:CF:03:95
Authority key identifier: 0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
Certificate issuer:       /CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Certificate serial:       01962E98F6DDC58C78867AFBD54690D306E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: DmuhOkKdJETI5sfYf-vxnVD-dQo.crl (hash: 9gXybkMMTXNQICdV1ye4cnWtWoo4VfHzO5GWgrxEHR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f6:dd:c5:8c:78:86:7a:fb:d5:46:90:d3:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=4b9a2300e0cebfb81772829820d6b0232bcf0395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:3f:14:0d:23:07:0c:55:a7:a7:7a:8b:01:
                    78:82:a1:de:8a:1c:b5:c2:5e:44:02:c3:75:11:96:
                    d9:9c:01:14:30:5e:8b:20:8c:11:70:84:77:2a:bb:
                    5c:e8:ca:8a:5c:d8:ce:cf:b3:dc:c5:10:39:3f:33:
                    10:3b:1d:02:a2:43:1d:d1:ae:01:a9:a4:dd:7f:90:
                    47:ce:e3:70:43:21:44:21:2f:bc:09:72:35:af:1e:
                    75:77:e4:fe:76:f3:cc:10:04:ae:67:9c:00:20:b2:
                    ce:b7:a9:85:1b:dc:50:79:bf:95:1a:95:4c:52:bd:
                    82:85:73:78:01:7d:f7:a0:18:cc:f2:c1:ac:9a:0e:
                    4f:83:c2:31:a9:bc:5a:1b:32:52:59:75:0e:6b:ed:
                    99:51:80:da:2b:19:8d:39:77:b0:e5:49:d8:9f:f6:
                    8f:83:6a:bc:5c:a3:52:ed:54:fc:0b:9b:a6:23:da:
                    98:ad:77:cb:07:53:17:98:a4:cc:32:7f:68:26:5f:
                    49:df:bc:f4:81:4f:04:d9:fb:45:9c:80:6d:33:f3:
                    fc:9a:16:65:9c:bf:14:e1:c5:e9:1a:76:4b:a7:e7:
                    3a:df:0f:c7:b8:8f:56:26:dd:86:12:a0:76:ce:0e:
                    09:16:e3:0f:68:01:02:d7:9a:e7:f9:52:83:fd:f5:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9A:23:00:E0:CE:BF:B8:17:72:82:98:20:D6:B0:23:2B:CF:03:95
            X509v3 Authority Key Identifier:
                keyid:0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c1:86:26:ab:ba:19:86:87:a3:06:8a:06:4c:8e:d0:ef:01:
         43:29:3b:2d:5e:01:f2:d5:c4:71:7f:00:c2:4a:52:c9:cd:20:
         31:9c:87:f9:3f:20:c1:de:4c:c2:2e:8b:c3:02:5c:e6:ea:64:
         13:fc:d5:38:f6:41:31:4c:90:96:04:25:11:14:2e:5a:6a:f0:
         10:4f:0b:64:48:fd:b9:72:6a:70:72:f1:7e:fc:2d:6a:8d:56:
         de:b4:38:35:5b:5b:26:cf:5e:e6:5e:0a:9d:67:af:65:47:c3:
         41:91:b9:6b:16:d7:b7:10:f6:f7:15:2d:57:e3:3b:b5:9e:82:
         6f:03:8c:78:eb:60:67:88:f7:d6:e3:9a:b5:f4:75:f9:25:70:
         b7:19:d9:94:f6:c3:d5:2b:85:98:bf:a2:f5:cd:f3:d6:d1:0b:
         1f:ab:72:25:9f:e4:4f:14:93:24:9a:43:1c:df:d4:09:ec:82:
         2d:3f:fd:0a:e0:07:01:76:57:23:0d:87:79:bb:cc:9e:90:99:
         2e:71:64:62:85:24:8d:f2:a3:fe:51:ac:67:06:18:11:68:8c:
         6c:e5:cc:6e:ae:6a:97:a5:5e:fb:97:2c:c8:5a:f6:77:96:a8:
         61:f7:72:af:25:ec:c0:f5:1c:0d:0d:60:ad:c4:02:9e:78:01:
         6e:40:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----