Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File:                     os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier:          ZP7mbdqrj/SruJ3uBDi7i5XP/anzEQGJIGxDVE/XXlA=
Subject key identifier:   0A:AA:11:0D:CC:FC:E0:91:83:2E:4F:E7:E7:06:E9:5C:1F:14:14:13
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer:       /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial:       01962E9962C5C368A67FB8110682917A6620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number:          0D5B
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: 02vscdNT6te2P0WyGtC4HGvUkKo3CJ0kLhw2Dw3DJoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:62:c5:c3:68:a6:7f:b8:11:06:82:91:7a:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=0aaa110dccfce091832e4fe7e706e95c1f141413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:1b:82:fa:52:3f:11:be:d0:58:66:56:df:
                    35:19:ae:06:d9:9b:d1:06:99:f5:50:7b:3d:b5:7d:
                    bd:5b:b0:e9:41:40:ec:74:ad:46:24:ae:6e:fe:20:
                    ac:be:97:4c:26:95:e6:a1:a9:88:3b:ca:f6:e5:2a:
                    21:47:55:c8:30:d1:5c:58:a8:d4:18:6e:97:2e:f1:
                    c2:53:e6:89:50:a1:d4:d4:a9:59:8a:4c:91:ee:3c:
                    6f:a9:55:1d:29:86:fa:51:1a:69:b1:d4:2a:de:97:
                    18:75:f7:2c:bd:af:21:2f:97:ad:fd:87:ae:e1:59:
                    de:ab:6e:27:7e:2c:aa:02:5f:a7:55:43:f0:a8:f7:
                    e8:52:69:61:f7:3d:2d:fd:96:cb:d6:d5:4c:57:85:
                    49:bc:ff:30:da:00:4f:97:85:61:3d:30:5e:61:b1:
                    6d:e9:5f:c6:a4:1a:fb:91:2c:b7:53:fc:bd:0c:d1:
                    74:76:af:f0:a9:af:d2:c7:bc:2a:c1:bd:ae:e4:06:
                    2e:fb:e5:28:55:63:3b:76:7b:cf:fa:89:74:06:b4:
                    2b:a2:34:0b:7e:e1:f9:66:02:1f:6e:7c:40:3a:37:
                    b3:4b:b9:c4:57:1c:7a:61:81:5b:bd:80:12:d7:d4:
                    4b:fb:74:bc:2e:48:b0:ba:01:1c:5f:f4:9d:ee:d8:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:11:0D:CC:FC:E0:91:83:2E:4F:E7:E7:06:E9:5C:1F:14:14:13
            X509v3 Authority Key Identifier:
                keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e3:20:29:d6:4f:0d:68:f1:6d:7e:74:bd:f9:42:10:b7:26:
         1c:1e:fc:db:01:52:0c:d3:1a:fd:ed:86:7e:e0:69:73:2d:2d:
         20:3f:8b:0c:56:77:c5:a0:92:01:8f:6f:ae:20:87:1a:61:af:
         33:0a:82:3c:92:bf:a1:72:f8:b4:5a:27:3a:84:4c:a3:7d:c2:
         53:16:57:d9:76:bc:41:60:66:e5:71:e7:28:92:99:55:8b:3c:
         87:f1:2d:68:85:a3:6a:75:72:0f:8e:91:b1:df:bf:38:d7:7d:
         4a:a2:4e:32:e7:9f:7e:00:bf:36:08:2c:40:d7:ad:d5:28:ff:
         45:b3:1f:ee:b5:d6:53:a5:13:3e:18:69:26:2d:8c:02:47:dc:
         dc:3b:db:cb:48:87:9f:37:e5:3a:04:0d:c2:21:53:78:7f:f1:
         9e:99:1a:59:ce:71:d8:df:fc:a2:6f:0a:b4:35:22:ad:75:50:
         9b:cf:b9:57:92:48:75:c5:7f:5c:74:76:3a:99:b6:a5:68:db:
         8f:55:0f:1d:a4:a3:c6:be:46:92:b2:4b:d7:4d:bf:17:cf:ff:
         46:68:67:8c:6a:e9:9c:b7:03:21:40:d6:45:fa:2f:3f:44:0c:
         98:34:4d:72:14:7c:85:ad:b7:01:c7:b2:61:05:96:af:4d:08:
         49:da:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----