Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File:                     ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier:          iSMWBUaCJQfssA1+ekyLPYrdUZ2PQy1A/HoYFeleogE=
Subject key identifier:   42:A6:7D:A0:E1:04:23:70:75:AF:2A:6D:94:79:8B:65:A1:F7:E5:88
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer:       /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial:       01962DF3D67248DB32B585A7C6656B9E6828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number:          0C65
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: HKEJPfXhj501HcLbj4QWBHwN4p2cGEETGa3wFh2MEmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d6:72:48:db:32:b5:85:a7:c6:65:6b:9e:68:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=42a67da0e104237075af2a6d94798b65a1f7e588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:af:3e:78:f3:1d:7f:f7:55:18:d6:3e:bf:
                    cf:18:c3:87:d2:4d:f9:93:3e:5e:68:37:b2:6f:d4:
                    64:67:b7:cf:70:2d:41:a0:ea:87:4f:a8:8d:f0:42:
                    c5:9e:db:49:be:81:68:3f:b0:84:3c:b1:fb:20:03:
                    8a:6b:6c:da:8b:a5:b5:65:57:c7:f1:ca:8e:c9:79:
                    c3:9b:03:87:d4:51:9d:49:2c:af:c8:71:f8:0e:9d:
                    d1:95:a4:b8:65:d9:58:c0:ba:d8:36:9c:bc:82:0b:
                    24:2f:cb:3f:75:e4:94:2b:20:70:01:1b:18:6d:d5:
                    bc:61:bd:a0:ed:68:a8:5b:4b:5f:be:da:0b:61:a1:
                    3e:25:69:06:e4:3a:6a:de:dc:a2:66:32:9d:f0:03:
                    ee:22:5b:99:5b:e3:ed:da:a2:08:66:6c:2a:44:8d:
                    69:5a:5d:98:4e:5f:c3:03:1d:e3:30:85:f7:c6:e4:
                    eb:d9:86:c5:88:d3:4d:9b:df:e6:43:fd:2a:c7:50:
                    49:dc:25:d5:39:32:3b:e4:71:9d:40:64:29:fe:37:
                    0e:55:96:b4:07:83:bf:8b:53:91:e8:d6:3f:f9:d9:
                    3b:43:13:6a:48:94:d5:3e:36:35:47:56:fe:46:2b:
                    cd:0f:11:7f:f5:a5:0e:84:22:f7:48:48:c8:c4:59:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A6:7D:A0:E1:04:23:70:75:AF:2A:6D:94:79:8B:65:A1:F7:E5:88
            X509v3 Authority Key Identifier:
                keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:28:5c:a0:c7:f8:78:a4:4d:af:df:e6:49:71:8c:c6:a8:
         31:4b:a2:b0:c2:a6:ab:fd:2b:53:13:f8:04:f0:4f:e3:5a:1c:
         5c:fc:bc:75:02:53:64:cd:22:8c:21:8e:17:75:b0:64:dd:85:
         b3:fb:71:79:d7:17:14:8b:49:cd:f0:69:3a:b3:9b:4f:c6:ef:
         8a:90:b2:a9:cf:45:0e:61:47:71:3a:95:18:c7:49:1f:ec:14:
         50:fe:e0:a8:74:88:04:37:b8:e4:04:0f:5d:16:c1:d7:02:60:
         04:17:ad:c0:41:1b:e4:68:8a:f8:aa:dc:91:ed:85:26:c1:07:
         f3:28:68:df:a2:e7:73:36:a4:44:d2:42:0a:7c:d8:1e:64:90:
         fb:00:35:80:d0:dd:e1:ec:79:e3:4c:64:ea:65:08:f2:fb:b3:
         1d:98:ca:9e:fa:19:15:6e:29:ba:4b:2f:71:63:05:1e:c1:b9:
         3e:e5:c3:08:2b:f8:6b:69:19:79:6a:bb:ef:98:d4:df:8f:d3:
         50:8b:0b:2f:14:7f:3b:f9:3c:4a:c1:fd:04:0a:91:0d:2f:6b:
         82:35:3d:00:12:9d:ae:c2:be:96:c0:16:04:b3:6c:d4:30:a2:
         f3:dd:8f:23:ac:05:7b:ac:6d:94:90:a7:96:c1:72:da:b0:e9:
         a7:b1:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----