Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File:                     p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier:          UAb8pJIR9XMIwvlGj4a9of8ehNK6OyZAPZmU5rHiRBE=
Subject key identifier:   C6:8A:61:9C:91:BD:84:69:B5:91:3F:06:93:CD:43:13:F0:6C:26:E2
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer:       /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial:       01962F06C618BB369CDBDE68AFAA6E450456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: MsVDY1YdnC4210n23XpjG7k/43Ih5Xw6CItSCpVzKik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:18:bb:36:9c:db:de:68:af:aa:6e:45:04:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=c68a619c91bd8469b5913f0693cd4313f06c26e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:ef:59:5c:37:e0:e3:c9:21:aa:3a:ea:15:
                    58:03:f7:6a:60:94:17:fe:4f:4d:4e:17:a8:5a:d0:
                    c2:35:03:65:d7:6e:ba:46:52:46:fe:94:3e:76:89:
                    d3:c1:9b:cd:a4:94:d9:9e:76:57:c8:4f:28:12:f0:
                    76:72:95:f0:06:a2:cb:06:1f:01:2a:eb:10:c8:b1:
                    e2:57:72:c0:43:9e:b5:c4:12:da:3b:3d:81:ca:53:
                    56:9e:e4:94:b3:55:ec:20:a7:f6:0c:1c:2d:02:45:
                    d7:8f:9e:d0:43:b0:1a:b5:c1:93:68:89:b1:b7:6e:
                    78:70:b7:51:bc:a7:34:d0:ed:84:7d:7e:68:5b:51:
                    90:0a:88:bb:22:f6:6c:30:b4:a4:76:65:06:69:41:
                    72:f3:aa:8e:f0:34:79:a6:3d:bc:2d:b1:46:34:d1:
                    7a:28:52:d8:24:fd:19:4c:74:16:f2:c2:78:1a:67:
                    0c:a7:f9:6a:b1:75:af:93:54:a3:c6:32:f5:db:b6:
                    5f:36:f9:d0:9c:ed:25:94:62:9d:10:a6:d0:a7:d8:
                    18:1d:35:ef:6f:a6:5c:c2:85:87:68:46:ba:d8:fa:
                    4a:9f:d4:3f:94:94:18:1c:e5:96:a5:1d:43:a2:4e:
                    73:b5:e6:98:46:47:a3:57:87:40:30:a5:cc:d8:30:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:61:9C:91:BD:84:69:B5:91:3F:06:93:CD:43:13:F0:6C:26:E2
            X509v3 Authority Key Identifier:
                keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:c9:b6:8a:f8:9f:ca:31:c2:0b:1e:2b:6b:46:c3:e0:4e:
         d1:c5:8b:73:d7:f0:d7:7b:d0:2d:ac:04:a0:b6:fa:a1:60:25:
         62:26:cd:91:a0:6f:c9:32:46:34:19:81:50:73:e9:0b:74:79:
         65:20:c7:71:37:ab:6d:9d:18:a0:30:4a:3b:d1:e8:c6:62:e1:
         5c:b5:c4:ce:57:58:fe:1c:b4:0f:d7:56:f8:6a:72:c4:a8:1a:
         a4:e4:d8:7b:38:38:23:25:20:62:72:6c:0a:a9:bf:eb:5f:a4:
         3f:e6:45:cc:d5:c6:bd:9b:0b:0a:f0:cc:9e:2c:dd:90:84:ce:
         f6:45:ca:8a:d7:b6:19:7d:41:3e:9a:bc:42:dc:85:99:dd:4f:
         0f:4e:81:65:7e:b9:5b:72:e9:59:74:90:64:c4:86:b0:17:c5:
         91:58:0c:0c:39:86:43:a2:e5:d1:06:c0:3a:a2:7b:df:bb:1a:
         3e:ce:53:b4:7d:7f:d0:6f:f4:4c:9b:b9:1c:d0:c9:30:5a:66:
         1e:4b:3e:9d:97:d3:06:21:2b:09:fe:a3:59:15:13:a7:03:fc:
         1e:5f:28:85:ff:95:ff:b9:32:f9:39:00:52:dd:68:2d:39:d2:
         95:26:b5:cc:8b:32:f6:99:15:5f:56:95:e9:12:d8:71:b1:99:
         34:1f:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----