Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File:                     o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier:          1vYOSFkUQZKqwVSocthl+rREhaCSQ4InJ9iTuIJlBxM=
Subject key identifier:   D4:BD:DD:F6:B3:90:D1:CD:62:49:CB:A5:E1:CE:B1:94:C1:C9:C5:AA
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer:       /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial:       01962F3DC073CF0CCE02A7381B23DD855B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number:          046E
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: HX6Jlu+1c1DMo/xy5CXgR1YvR2saHCp1Rm+/FbQM6Q0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c0:73:cf:0c:ce:02:a7:38:1b:23:dd:85:5b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=d4bdddf6b390d1cd6249cba5e1ceb194c1c9c5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:f5:8d:d1:97:fb:9a:ea:5a:58:b9:8a:80:
                    a3:6f:9b:67:3f:45:44:8d:eb:79:c8:55:98:d7:9c:
                    af:5b:d3:94:94:66:05:a0:84:48:f2:2e:2b:15:a5:
                    f0:7a:dd:dd:44:44:89:da:77:c6:28:2c:a7:50:96:
                    2e:f7:b3:54:d6:9e:ce:f2:64:c8:d7:75:73:63:39:
                    f9:d7:33:b1:ab:f2:bd:f3:a9:37:96:18:20:62:f3:
                    3b:d9:f1:2e:60:2e:6a:de:ba:86:fb:0a:40:bc:10:
                    e6:2c:32:93:c8:c5:51:32:3c:e5:0a:fd:1e:58:77:
                    4e:8d:38:03:c6:db:e7:00:af:79:d3:a5:5f:c6:c1:
                    28:20:74:0e:8b:e2:e6:06:99:82:c6:6b:1f:0d:c7:
                    17:c0:5d:0f:2e:c9:d8:98:28:6d:71:85:ae:9e:0f:
                    d0:19:57:91:35:3a:ea:93:ed:f8:c5:d6:14:c0:ab:
                    1e:72:e4:15:d6:af:2a:d3:3a:7e:78:40:10:0b:6b:
                    67:a4:14:cd:d2:40:ba:9b:5e:ae:c8:4f:34:89:30:
                    ac:8d:24:8c:8c:d7:00:da:dc:9f:8c:04:01:a2:65:
                    50:d0:a9:b2:75:85:61:c1:2b:e8:04:4d:53:8a:c7:
                    b4:fb:8c:c2:7f:00:cc:db:ca:21:e4:68:e6:08:49:
                    08:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BD:DD:F6:B3:90:D1:CD:62:49:CB:A5:E1:CE:B1:94:C1:C9:C5:AA
            X509v3 Authority Key Identifier:
                keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:bb:23:6a:e1:d1:2c:66:71:5b:60:a2:f5:bb:b2:f5:c4:bf:
         ff:e6:04:13:2e:cf:96:76:d9:c7:ea:58:d6:db:7d:c6:06:ce:
         fb:e9:33:0c:42:78:ea:0e:a2:93:76:2c:e9:81:1a:69:5d:ec:
         2e:78:c7:1f:4c:4a:a4:6e:b8:85:89:5a:a4:e4:d9:67:5c:a8:
         ee:81:94:5e:3f:9f:d4:ee:aa:05:0c:92:6c:33:ab:66:20:a0:
         fe:1c:7c:2a:27:d1:f4:fe:5e:69:14:4d:31:c7:5e:e9:0c:d5:
         d0:ca:af:51:f8:64:24:93:4b:68:07:80:72:f5:bc:39:e2:20:
         7c:39:62:71:27:9f:af:2f:85:4a:36:0a:56:44:30:60:17:d2:
         ae:16:8b:9b:b8:3e:e2:9d:47:34:3d:f4:55:f5:d5:c4:d6:36:
         2f:05:14:0b:c6:27:19:e1:68:7e:ff:be:6b:8f:a9:db:c0:c6:
         ba:47:78:0f:6f:ad:dc:3c:78:bd:a4:0c:65:45:99:f6:18:e2:
         f0:89:fa:3b:ca:45:38:ae:9f:d4:25:35:40:ae:15:e8:b6:3b:
         88:f9:f5:bd:10:d9:24:d5:34:38:6e:bd:1c:23:c3:f7:18:f8:
         46:07:ac:9b:18:e9:37:94:1b:6c:66:26:e3:a1:af:b8:03:92:
         bb:50:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----