Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File:                     0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier:          v6euXqcSDaUF+dBnGYNvOkIaPz3pS/hNq7xNU8mEp/A=
Subject key identifier:   56:69:AB:66:8D:DF:4A:B3:4B:33:89:6C:B5:5E:30:F6:5A:DA:1B:E1
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       01962E99B7A6B3D4C4BDCC684D523909CFC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number:          0BFC
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: xB1UDyQasQyDFAexrNcu79i0ctB6yMqY/vCQRAXTCXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b7:a6:b3:d4:c4:bd:cc:68:4d:52:39:09:cf:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=5669ab668ddf4ab34b33896cb55e30f65ada1be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:5e:3c:00:7e:69:c3:33:23:ee:63:7f:09:
                    83:59:16:78:41:5d:92:6f:6e:8d:6e:12:3e:61:90:
                    6c:77:4e:2a:25:84:07:89:13:eb:5b:02:6d:46:40:
                    75:16:cd:80:5d:50:77:59:10:f1:65:24:07:2e:60:
                    19:b4:f5:95:8b:48:66:be:2b:14:d3:d2:75:56:ba:
                    ba:d9:c1:05:77:89:4c:4e:8d:00:1f:c2:76:67:44:
                    bf:aa:aa:99:f5:ba:a0:3a:1f:78:20:41:9b:11:2e:
                    21:07:3b:9e:e0:27:0c:98:b4:2c:9c:36:4c:b4:30:
                    94:de:63:ac:7b:da:a7:c8:1e:36:81:90:b7:0c:50:
                    7e:ea:9d:fd:17:4d:9a:e9:94:9b:7d:86:14:f4:51:
                    5a:75:0e:a4:c4:63:17:e4:2d:7e:70:dd:fa:4b:84:
                    90:1b:39:ea:b8:bd:f8:1c:76:df:ac:ef:ec:a4:2f:
                    2b:de:e1:2a:80:65:97:25:7f:f0:82:a3:9b:30:0d:
                    b1:2f:25:25:b0:e6:d6:c9:64:25:83:79:1a:f3:2b:
                    cd:b5:14:cf:b8:f6:61:72:41:a9:04:36:ca:05:d4:
                    4e:4c:57:8a:16:e3:94:09:78:8e:f3:25:d6:ed:1d:
                    25:aa:75:3a:7f:6e:8f:ca:3d:7d:c0:17:54:42:a6:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:AB:66:8D:DF:4A:B3:4B:33:89:6C:B5:5E:30:F6:5A:DA:1B:E1
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:99:bc:74:fd:67:04:f9:25:6f:bb:d3:01:42:6b:df:d1:6d:
         17:46:52:49:a2:f0:05:21:5d:57:e9:b8:59:87:ce:08:c1:bf:
         b3:76:ca:5a:b2:24:14:56:db:a7:81:54:08:d2:0c:11:da:7e:
         e2:7e:63:15:c9:e8:f3:02:0c:e2:38:2f:02:93:20:fe:a7:7f:
         4e:3a:96:96:89:87:51:36:63:8a:71:f2:a7:d2:67:3b:a7:02:
         38:a1:77:c9:95:5b:61:c1:97:cb:88:0f:47:86:53:30:9b:46:
         6f:12:8f:f8:f4:4f:a0:42:70:b4:d4:86:83:ad:6f:36:67:4f:
         92:86:d0:8a:43:89:a4:17:09:a9:4c:c2:7f:1f:9d:49:80:b2:
         4a:b4:be:de:44:d9:18:da:98:0a:b8:55:cf:cd:d1:a1:61:5b:
         2d:9e:08:a7:dd:6f:83:63:72:50:8b:60:b7:df:73:f8:2a:e3:
         dd:09:07:4a:d6:20:d7:28:76:7f:c6:6a:b7:01:e8:7c:ff:0d:
         0b:b0:e8:95:26:b9:f5:f8:e6:e7:2e:ef:1e:ea:60:7d:00:48:
         4a:57:77:4f:c2:78:31:f2:5c:3f:b9:9d:05:91:01:f1:9c:f9:
         9c:9f:87:c0:c9:c4:a5:88:b3:8b:1b:eb:c7:77:d7:e1:3c:92:
         a4:5e:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----