Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File:                     oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier:          2QJdAON19IuykK1+WYEkkZSjzHWifg7JdywZy0z54Ys=
Subject key identifier:   04:82:66:FC:24:6A:87:C7:3F:43:52:1E:C0:F8:CB:DF:43:1D:2F:0B
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer:       /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial:       01962F7463ACAD8A608348CB921050406551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number:          14DB
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: xZrXHdxzn727gcuXHH17Iad5RrKkXZS6u6vEXTphgJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:63:ac:ad:8a:60:83:48:cb:92:10:50:40:65:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=048266fc246a87c73f43521ec0f8cbdf431d2f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:4a:6c:3e:c6:fd:ea:0b:b0:5c:02:2b:19:
                    fa:4c:aa:72:ec:93:ea:81:4a:a3:8d:c8:f5:4e:78:
                    03:2d:c0:8d:0e:ea:6c:1c:14:f0:4c:24:b1:6f:54:
                    24:e5:5d:ff:f0:a6:d4:66:4c:e4:3b:e3:19:de:03:
                    04:e4:77:3f:80:6c:be:bf:07:11:71:02:05:50:54:
                    d7:18:29:4d:af:ec:b4:cf:73:d5:87:a2:55:b0:ba:
                    c5:cf:0c:2e:7d:49:fa:68:bb:f6:f9:f5:94:6a:59:
                    69:0a:cf:77:78:0a:e1:1f:e2:f1:e9:25:d7:ba:4e:
                    76:09:86:1e:44:b9:e9:1f:d8:0c:13:32:5b:c1:a7:
                    01:86:ff:be:b0:e9:ca:fa:8b:22:b1:7b:9c:5f:89:
                    63:40:76:74:52:32:10:20:36:3f:e7:10:ca:00:1e:
                    35:e8:a2:d9:72:36:3e:96:04:d9:0e:8f:3e:ae:87:
                    f7:24:f8:49:2c:c8:7c:a4:09:eb:0f:36:90:7d:a8:
                    e2:47:a6:62:31:4e:db:f3:69:c0:5c:b0:85:83:79:
                    b4:25:46:7a:0f:35:e4:ac:1d:79:1e:bc:cf:19:7f:
                    ef:ff:de:a9:69:8d:a9:54:10:1d:07:f6:f4:e2:54:
                    26:ec:d3:66:04:f8:05:d2:9b:fe:66:49:af:ad:5d:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:82:66:FC:24:6A:87:C7:3F:43:52:1E:C0:F8:CB:DF:43:1D:2F:0B
            X509v3 Authority Key Identifier:
                keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:74:63:e7:79:b8:06:c1:10:d5:e8:ac:cf:bb:42:cf:ee:73:
         2a:91:95:da:3f:49:42:9d:50:ce:a3:c8:e1:f3:92:cb:ca:4b:
         38:2c:2b:3b:cb:92:a3:2a:65:60:3e:14:10:89:ab:ab:5c:1d:
         60:bf:3b:9c:ad:44:11:0b:1e:78:17:5d:6e:6e:bc:d3:9b:91:
         a7:f7:89:3a:8e:9a:f5:7d:37:8e:23:e2:29:3e:23:66:1b:df:
         44:0f:c6:cd:37:a3:66:52:77:ce:f6:21:d3:0c:f3:16:2f:ef:
         23:7d:f6:7a:c3:b3:62:73:1d:4c:50:b8:b0:4d:12:4b:5c:3a:
         1d:bb:95:ef:6f:d5:f0:cb:6e:73:eb:f3:b5:34:f9:80:e4:ed:
         18:ec:0f:f3:66:8a:67:84:a5:21:7c:9b:32:c7:c4:8e:04:bb:
         08:3b:f2:91:cf:3b:54:74:b5:aa:c6:6a:bd:21:e0:b6:f0:1b:
         3e:02:ff:c2:82:ac:b1:5f:9b:4e:3c:3e:95:cd:97:62:41:83:
         84:fb:1c:17:cf:bf:d9:ed:39:7f:62:37:ec:f2:53:c2:6b:e6:
         f6:c7:25:cc:cf:c7:10:83:d9:3f:c9:6a:22:b5:b2:1e:b8:a9:
         a4:88:c2:ff:f2:45:ea:cc:18:63:3e:55:8f:93:77:f2:1b:57:
         9c:ee:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----