Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File:                     O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier:          nyFKJz7scCtTbn+45xy2/Nnq6QzTEiSfrcXcHLiKKyM=
Subject key identifier:   19:8A:26:95:4F:00:6C:40:F1:8E:D5:BF:5E:C6:F6:4B:9D:27:0C:27
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer:       /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial:       01962F0714BF9912B87B549A5815D6D86AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number:          0C95
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: vS4EF7+g1Ve0W3x4TKU2ehdybiyd8pjjGdUVtY4/pgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:14:bf:99:12:b8:7b:54:9a:58:15:d6:d8:6a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=198a26954f006c40f18ed5bf5ec6f64b9d270c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:48:56:04:c9:a6:52:48:f4:0c:fe:5e:de:
                    ac:74:6b:5f:af:cf:14:d9:08:80:11:96:c1:4a:a2:
                    90:ad:1c:fc:6d:5d:15:23:de:64:6c:97:a6:6a:a2:
                    de:85:d6:16:80:0d:62:4b:72:93:b1:44:67:bd:ae:
                    c6:92:88:44:b6:a3:74:7e:3c:19:b4:08:d6:c5:8b:
                    bd:f6:ba:c2:7f:ae:cf:7c:86:94:6d:5c:e4:b7:6a:
                    ef:49:8d:bc:b4:80:50:9d:06:2b:1a:70:34:ca:cd:
                    46:ca:29:8c:7d:c2:82:96:bb:f7:9b:4b:19:8c:47:
                    e6:09:b3:5a:1e:50:60:59:0a:3f:f0:e1:ea:3b:78:
                    6e:be:94:0c:a3:24:1e:1a:1a:be:a7:0a:5b:92:4d:
                    a4:d6:e9:bd:3a:73:a4:2e:6e:38:af:86:0f:27:59:
                    e3:69:0f:76:d9:fb:69:1b:58:ea:57:8a:04:84:db:
                    9f:69:43:81:2f:b3:1a:f7:ca:6d:ed:0b:6e:39:d1:
                    c2:d3:4d:99:90:79:25:f1:5c:da:f8:64:52:1a:a3:
                    75:6f:bb:b6:fb:0b:47:e2:67:76:7c:19:81:47:42:
                    1d:2b:18:7a:74:10:04:d9:ac:00:2a:45:dd:2b:a5:
                    cf:18:84:7c:59:1c:d8:63:6c:25:e7:ee:35:87:b7:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8A:26:95:4F:00:6C:40:F1:8E:D5:BF:5E:C6:F6:4B:9D:27:0C:27
            X509v3 Authority Key Identifier:
                keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:f7:4e:51:3b:34:73:17:88:0d:10:8f:0d:a5:76:10:b8:
         49:d5:ba:2e:31:18:90:9c:51:66:4b:c9:16:ed:b5:73:a6:83:
         ab:84:85:ef:c4:f6:78:84:1a:02:9f:b5:2d:37:ea:c0:6c:ed:
         0c:a6:66:13:c5:09:77:05:a7:90:7f:d4:ed:7f:2d:a1:4f:68:
         bb:3e:0b:a5:89:51:c6:a6:99:b2:53:93:07:cf:56:66:e3:7a:
         58:91:c1:0b:22:15:f9:f8:c0:ae:f2:4a:21:5c:4d:47:9e:c1:
         36:76:a9:d0:0f:b2:65:77:ab:64:62:72:30:f1:12:cc:de:ba:
         b5:7a:e9:0a:9f:81:8d:a2:a2:f2:0c:b6:0d:48:b2:34:30:4a:
         7c:a7:0d:b8:12:3f:d9:cd:96:bf:9d:62:2a:33:70:fb:fd:53:
         90:ef:9e:0a:48:d7:77:90:98:af:60:42:bd:a4:59:2d:8f:4e:
         ae:a0:04:56:3e:60:79:28:65:f7:aa:f0:9d:9b:68:cb:08:a7:
         18:a9:26:52:ab:af:df:bb:e9:32:68:9b:2a:83:31:69:9d:4c:
         14:79:62:1d:55:c4:20:67:20:53:45:a8:4b:e3:75:c0:95:8e:
         08:ba:1b:36:15:57:21:86:37:ee:c4:95:25:0e:f4:4d:5d:9f:
         36:6f:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----