Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
File:                     Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft (raw, json)
Hash identifier:          5N3rt4sCIw3YwzbT58mAsqptQZfavwKx1kGqnI9vjLI=
Subject key identifier:   90:EA:77:1D:EA:24:F4:ED:F8:70:D8:86:76:EB:B4:EE:1C:76:3D:AB
Authority key identifier: 0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
Certificate issuer:       /CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Certificate serial:       01962E98810986E53E74DE296B30CEE14242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
Manifest number:          0C55
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl (hash: Tj5R+SCJQuejK/XMMy+WBKSgsG9YSM2O5QNJ/kugj/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:81:09:86:e5:3e:74:de:29:6b:30:ce:e1:42:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=90ea771dea24f4edf870d88676ebb4ee1c763dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:31:67:2d:46:c1:59:9e:06:b6:35:9f:c8:
                    c8:54:86:a1:46:8d:8c:e7:82:94:85:26:5b:86:68:
                    c6:1a:4b:a4:be:dc:35:e3:18:c0:49:bd:e1:39:7f:
                    fe:f4:67:52:d3:32:44:25:e5:5b:32:81:f0:ae:49:
                    00:9c:e5:8e:e5:92:8c:47:e6:5d:88:fd:5a:fb:c6:
                    ca:ff:dc:0e:37:51:0f:e3:2f:fe:17:d2:b1:c5:20:
                    cd:16:b4:78:22:9a:6e:5c:48:2b:89:75:54:52:e0:
                    99:5b:c1:15:70:f3:c3:eb:b2:02:7d:18:22:35:3d:
                    69:a6:7c:7b:4c:26:62:bf:0c:51:8f:b1:c8:f3:98:
                    4f:e0:4a:8a:45:1b:00:e6:c2:54:30:c6:57:90:f3:
                    59:5b:2a:59:96:a1:d3:9d:c3:90:66:54:bf:b9:ee:
                    09:a5:ef:37:c4:e2:81:fe:fe:49:0e:64:cd:17:1d:
                    29:5f:c7:96:ce:0f:77:d1:ba:3b:7e:0c:e8:55:b9:
                    36:77:1c:b9:34:a2:99:2d:f1:18:be:55:41:7a:e0:
                    8c:95:76:88:e2:06:fe:5b:7f:f0:c1:ea:df:c3:1f:
                    b6:94:c9:6b:ae:b8:fe:10:f3:e0:e9:1c:08:f8:16:
                    5a:8b:65:86:dc:b9:88:59:65:07:a0:1e:3d:50:7f:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EA:77:1D:EA:24:F4:ED:F8:70:D8:86:76:EB:B4:EE:1C:76:3D:AB
            X509v3 Authority Key Identifier:
                keyid:0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:81:3a:5e:f7:61:b9:4b:b9:84:c5:7b:f7:a9:1f:5c:52:9e:
         ce:8c:01:37:63:0c:c5:58:c5:94:75:0f:a9:c3:e9:4b:cd:aa:
         d5:75:b6:82:46:d0:58:3c:83:d9:f2:28:f8:8b:fb:41:35:66:
         9f:de:d2:09:02:38:be:2d:a8:0c:aa:13:41:54:48:6c:6d:48:
         e0:b4:ef:6d:de:1a:56:d7:22:8e:9d:6a:dc:64:e9:b5:0f:ad:
         43:5e:a8:ec:08:20:8d:2b:4a:1c:37:e1:5c:fb:17:c8:6d:8b:
         c8:a8:74:f2:a2:16:51:f6:e1:20:ea:62:a6:12:f8:bb:f3:fa:
         39:63:f7:23:3d:8f:1c:56:7a:52:ee:8c:34:a3:f2:22:ee:27:
         ca:1c:c2:cb:a4:3d:4b:7e:78:b1:4b:42:de:b0:cd:bd:f3:4b:
         07:01:86:6a:d6:c9:2a:d8:a4:d4:97:65:88:47:7a:13:e6:3b:
         03:e3:81:79:2f:3b:76:b3:82:c7:5f:0b:10:33:8e:8e:94:b3:
         ac:40:d3:4d:94:12:64:d4:4b:14:3f:34:06:a8:84:70:2a:9f:
         a8:00:d9:14:2a:a3:06:a9:07:1d:69:a4:60:10:33:0e:ef:d6:
         c8:71:fd:13:94:64:b8:2c:46:69:8d:5a:1c:08:a5:9f:c3:6c:
         27:f3:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----