Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
File:                     0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json)
Hash identifier:          TAgkKDtoBp2GUdPs+DR3Wv+FYvPdUTKUHq5XGULLdFE=
Subject key identifier:   78:4C:E1:E8:92:ED:34:1C:E3:7A:3A:DB:87:91:2F:1E:DF:3C:6C:AC
Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
Certificate issuer:       /CN=d02ea90148d4e688c9492d9467159cd10575591b
Certificate serial:       01962E98E01A974D03E78F2C19D4233D50D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
Manifest number:          0619
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: hFHLnBN7iZ6BQW51r2AnKJpJoKoQriMMgApeug8+Ops=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e0:1a:97:4d:03:e7:8f:2c:19:d4:23:3d:50:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=784ce1e892ed341ce37a3adb87912f1edf3c6cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a5:9c:89:dd:54:70:58:6e:72:d6:e2:1e:a4:
                    8d:14:25:43:bf:06:3d:23:fe:78:80:8c:c9:a5:a9:
                    06:6b:ff:ba:f2:98:cc:21:b9:44:5b:bb:87:d1:67:
                    93:06:15:57:e3:99:1e:ba:d5:32:2f:e7:41:75:53:
                    10:47:ae:c2:f0:91:c7:aa:5e:e4:5e:79:55:7b:ff:
                    71:33:c3:c4:bf:cf:53:83:59:cc:f8:ec:77:ae:68:
                    17:64:52:e5:0b:8d:08:63:36:7c:97:5d:7b:a4:91:
                    71:06:4e:93:91:20:4c:4e:70:ea:35:69:d8:76:6e:
                    72:b5:67:41:dc:a8:fc:de:dc:d8:72:05:ff:f2:3b:
                    2e:28:0e:2f:ba:dd:3c:6e:8c:88:51:9f:1d:84:1f:
                    0f:30:e0:04:b8:03:98:34:ba:74:7b:9e:f5:3c:ec:
                    9a:e2:6f:58:22:8f:4c:09:a9:e1:09:f8:a0:9d:92:
                    4f:4f:bf:cf:dc:76:ce:87:30:64:48:c9:3b:00:65:
                    da:46:09:e4:5d:3b:1c:66:39:5a:93:d8:6a:04:e1:
                    0a:2b:84:f2:10:b8:ee:4f:01:c1:9e:f7:5c:3e:85:
                    27:8c:9b:84:92:99:5a:ee:60:6a:40:92:e3:3f:0a:
                    f1:c0:97:cb:aa:cf:b3:57:ea:32:4b:66:6a:64:23:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4C:E1:E8:92:ED:34:1C:E3:7A:3A:DB:87:91:2F:1E:DF:3C:6C:AC
            X509v3 Authority Key Identifier:
                keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:74:72:84:5a:11:f8:d4:9f:8c:2b:dc:8e:c0:91:5c:0b:
         d4:a2:52:f8:3f:97:ff:4e:10:e4:b8:b2:70:bc:d3:24:cf:ce:
         a8:ab:a7:1d:f2:f2:5f:4f:0c:70:0a:ae:5f:b3:65:9b:91:b5:
         1e:08:d3:c3:fe:7d:18:bb:b1:f1:e4:1b:a4:13:57:a6:69:f8:
         ed:63:04:cb:98:90:ae:7e:8b:70:35:5e:ef:7a:d1:6f:ce:8b:
         03:2c:b2:05:45:19:57:a2:3d:47:a1:f4:a2:ee:41:a8:d6:4c:
         52:1b:e5:af:1a:ba:69:5f:d5:09:29:5d:4d:71:54:60:52:b8:
         90:3a:b0:45:be:e5:e5:8a:ec:27:30:29:e4:39:6a:da:1c:aa:
         18:05:11:f0:43:02:9c:ec:d2:08:88:a8:d1:8b:c2:8b:87:75:
         0b:fc:6f:c3:0b:52:86:ec:3e:5f:88:bf:9a:6b:ad:b4:30:e3:
         85:f3:5e:5d:aa:0f:ec:41:fa:21:0c:7f:de:a2:7a:21:cb:76:
         cb:fc:ba:b3:43:61:fb:22:ce:12:8f:f5:47:5b:4b:f2:81:83:
         d3:50:b1:ef:17:7d:0d:72:eb:c1:3b:69:cc:88:39:37:f4:18:
         c8:5c:eb:e1:8c:83:d5:ad:88:3d:f3:e3:6b:d5:fa:97:7d:f6:
         be:dc:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----