Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File:                     Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier:          /MEmOH4ZQgxBaCXlTS6Ddqi4zajr1DiZO2hH8fuZNMA=
Subject key identifier:   DA:88:E3:7C:6B:1C:F7:96:3F:02:9D:2A:69:C6:C9:01:D1:49:6F:20
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer:       /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial:       01962E2B38A790A204B8C0BFC496BFA553FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number:          0356
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: rWEJMND05tpuDIHXLZoc9zcfNStMAnQ8tlddFAsD6/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:38:a7:90:a2:04:b8:c0:bf:c4:96:bf:a5:53:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=da88e37c6b1cf7963f029d2a69c6c901d1496f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:a5:0a:f9:20:48:07:f5:f3:5b:71:e0:49:
                    3a:c8:4d:df:15:07:ff:58:0e:85:25:9d:00:b4:aa:
                    e2:cf:cf:f3:35:85:f1:72:a1:7f:14:8a:db:f9:e3:
                    f5:e3:19:f0:fa:10:a5:1e:87:3c:d5:1f:7b:79:ac:
                    9c:b9:43:73:30:3b:5c:2e:e8:7a:60:3a:cc:34:2e:
                    d5:c7:f8:ff:fc:a9:fa:1a:06:f3:6d:8c:62:5a:80:
                    25:6a:ef:0e:30:db:25:08:42:46:ce:ce:20:d5:cb:
                    0e:31:b9:8c:95:f1:b6:3d:48:fb:c7:49:72:b7:a3:
                    63:24:e7:3e:b4:46:be:17:b9:8c:63:99:f8:91:6c:
                    49:b2:ce:9e:a7:97:c7:44:a6:4c:55:9d:9c:e1:18:
                    c8:51:9c:55:d3:bf:a2:c0:d5:fc:08:d2:ea:5b:bc:
                    96:2f:0c:fa:ec:cb:44:96:11:cd:68:58:fb:11:90:
                    83:66:8c:8e:03:cb:eb:d5:41:dd:9a:7f:85:cd:95:
                    9c:2c:2b:29:c4:a0:d7:ce:5c:79:13:8d:7b:60:f5:
                    5b:ce:51:d8:f9:89:96:33:43:55:bc:90:66:c0:e3:
                    61:b2:47:aa:be:3e:4b:18:20:80:28:fc:e8:cd:d8:
                    19:00:78:0c:33:af:d5:9a:75:6f:ad:80:18:57:94:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:88:E3:7C:6B:1C:F7:96:3F:02:9D:2A:69:C6:C9:01:D1:49:6F:20
            X509v3 Authority Key Identifier:
                keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:34:7c:d7:1e:4c:51:56:79:3e:99:9a:f5:c1:fc:a9:fc:46:
         59:2a:f4:39:d8:98:74:03:db:b3:a1:c8:09:86:d8:ff:83:33:
         4c:b2:28:b7:e9:b5:5a:9b:56:b7:62:e7:4a:9b:d1:65:c3:d1:
         94:23:e5:ba:66:bd:c3:de:8d:08:8f:7b:e3:c2:32:0d:d5:04:
         b6:86:54:d7:68:a3:28:9c:f6:e4:95:30:14:a7:af:c3:33:c1:
         37:63:ef:af:67:65:ed:52:0a:cf:11:8b:c7:6d:0e:ff:ca:5e:
         a4:df:f1:63:83:99:68:87:87:20:59:c3:6b:6b:71:4f:a3:df:
         6e:54:de:30:10:9a:b9:de:b3:b1:24:35:5c:fb:bf:ba:49:4e:
         22:5a:18:ab:d0:de:3d:ad:36:44:f8:45:30:1e:57:fd:15:96:
         31:f2:d4:54:67:37:18:4a:cc:f7:d9:30:b2:1f:a9:66:ef:aa:
         a7:8a:83:7a:2f:b3:5c:f6:3e:fc:de:82:7e:9a:f6:d5:0a:40:
         4f:7c:9d:ff:5e:d2:dc:75:10:3e:46:ca:ba:0d:dc:2a:4e:2c:
         41:b3:64:bc:b1:f5:cc:80:ac:00:97:c3:74:8d:58:13:c8:b9:
         59:80:eb:5f:bc:c6:3e:bb:74:64:7c:92:de:a4:a2:75:62:5d:
         84:e1:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----