Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File:                     D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier:          pBoULS6pNNRzxBU/9ot0u7damwJi2nVoW1z+d3AWJaU=
Subject key identifier:   43:2A:A1:6E:ED:E6:3F:37:8E:1B:A9:46:A5:6B:19:8F:3F:D9:B8:BC
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer:       /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial:       01962E9880D3D2688CC5AEE62616D7A4563A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: cSBWagKuRFyJE9hwvU/c6BXeIcpYwtQJ+LFcHPDFsXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:d3:d2:68:8c:c5:ae:e6:26:16:d7:a4:56:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=432aa16eede63f378e1ba946a56b198f3fd9b8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:d2:1a:1f:a4:ab:cc:9d:03:1d:23:a3:8f:
                    59:e7:a6:be:3b:dc:c6:29:c0:d1:30:14:fc:21:2b:
                    88:b8:99:20:3e:53:27:25:a0:da:d5:2c:19:4e:34:
                    9b:06:08:da:b0:dc:4b:2d:76:cd:20:14:6e:50:72:
                    a3:95:26:5d:e4:96:e2:f3:8a:13:9e:b2:fe:3f:a1:
                    e2:f8:3d:79:4e:55:3a:31:db:92:d0:ea:6e:15:12:
                    36:f2:39:98:b2:0a:8a:4e:4b:a4:e0:86:13:03:10:
                    a6:8a:86:65:84:12:5b:04:b0:12:54:2f:78:33:a3:
                    45:4e:a5:fc:e4:2e:1c:87:e4:f5:37:79:56:de:a8:
                    11:8a:a8:79:72:5e:83:d4:cc:11:50:e6:3b:fb:4f:
                    bf:8a:27:8a:a5:94:79:4a:16:ee:11:9a:67:40:a8:
                    37:11:e0:60:49:04:dc:20:3b:e0:73:5b:23:38:02:
                    42:16:c6:9b:23:c0:b0:70:41:25:b3:66:d3:db:a6:
                    6e:bb:51:17:a3:0a:cf:10:93:0c:29:c3:81:f4:35:
                    b2:b8:8b:59:32:af:fe:84:a4:39:d6:8f:67:eb:03:
                    44:8d:6e:fa:31:3f:cf:c9:d2:eb:e0:c7:f3:e3:62:
                    9e:0b:32:c9:11:36:91:07:5e:66:f9:ad:c9:5f:d0:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2A:A1:6E:ED:E6:3F:37:8E:1B:A9:46:A5:6B:19:8F:3F:D9:B8:BC
            X509v3 Authority Key Identifier:
                keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:03:e9:6f:e7:e8:1e:c3:3e:24:c9:a9:92:63:c3:89:82:1f:
         56:b6:e0:f4:3f:70:71:c5:98:d8:2b:a1:5f:cb:71:0a:3d:c5:
         f3:45:58:99:12:20:88:90:c6:50:4f:86:b7:50:1d:35:32:d9:
         98:80:38:0c:04:39:ae:bf:59:7f:da:1a:1a:a3:11:4b:6e:01:
         b5:8d:8c:72:89:33:0e:5f:0c:75:1f:88:90:1f:cc:bb:44:f7:
         bc:39:91:85:b5:1e:75:08:dc:16:e8:16:4a:29:b8:4d:0e:cc:
         20:60:3f:45:c0:70:d7:47:e2:d7:04:d9:94:11:6b:6b:a4:b8:
         56:26:31:31:51:01:0d:46:ac:ce:99:74:8d:77:dc:8d:f9:1d:
         60:1a:74:3b:b0:69:72:75:02:ce:29:47:aa:90:02:2c:80:6d:
         06:99:da:07:50:fe:0a:b1:65:2d:eb:67:ed:de:55:a8:34:20:
         68:c2:7d:e0:1d:92:99:f3:50:95:78:3a:cb:66:3f:b0:0c:4f:
         53:85:c0:8a:fd:d3:b1:0f:38:50:ae:d5:49:84:7e:a6:ce:4c:
         35:43:1a:47:9c:82:06:39:b8:b4:9d:30:59:a7:d2:1d:1d:10:
         6d:90:43:92:09:61:b4:6e:2e:a3:1b:ec:82:e9:9b:aa:e2:fb:
         f7:aa:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----