Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File:                     Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier:          9T8VIk+Rch/DxBtE740eAQFjTlFmpgscCIv0ekw3pgk=
Subject key identifier:   AD:CB:02:D1:21:BC:B6:49:BC:69:2E:F2:B6:B1:69:9C:C3:FA:42:62
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer:       /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial:       01962E992FA32848A437D3B333CF64C640C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number:          1106
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: Ul7QNval1CdlKr0eTL/bEVwj1nAv5ONAp5Z8I94LtlU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2f:a3:28:48:a4:37:d3:b3:33:cf:64:c6:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=adcb02d121bcb649bc692ef2b6b1699cc3fa4262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:a9:2f:1a:09:9d:b1:dd:62:72:32:20:65:
                    c8:30:6f:5b:5e:7e:e5:7e:d0:6a:89:28:54:09:74:
                    e9:a9:86:7d:41:ef:05:66:10:34:6a:e3:ac:e9:2b:
                    20:6c:8a:ed:23:fc:b7:1b:75:ce:d8:08:9a:70:cc:
                    aa:94:fb:fd:a3:25:68:28:82:00:28:36:c0:9c:c6:
                    be:a0:fd:c6:ae:e9:be:d3:0c:11:01:f5:b0:65:22:
                    1b:4e:44:6a:db:52:18:69:2f:72:7a:90:e5:77:50:
                    53:bb:ff:9c:86:af:49:82:ee:38:d7:28:81:1d:84:
                    6d:87:ad:9c:00:14:01:1e:90:5b:bc:ed:ed:46:50:
                    a9:3d:92:e4:99:c7:6f:da:75:87:fc:8c:2f:b9:c0:
                    a8:33:37:75:5c:83:ec:04:7a:74:f2:8c:14:99:3d:
                    0b:ad:c4:fa:3f:1c:66:ce:6c:fb:4f:0a:b7:05:7a:
                    28:22:7d:02:55:1b:66:32:31:c7:44:f7:3f:1e:8e:
                    02:cf:14:c4:63:69:a1:2f:75:37:bc:e0:33:0a:46:
                    95:de:e4:2d:b0:6b:aa:26:d2:01:68:e5:9b:df:5f:
                    2d:ea:18:fe:ae:8a:c7:d3:fe:7a:40:54:c2:6e:a1:
                    12:51:56:4b:30:38:36:c8:8e:44:85:40:1b:cd:eb:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CB:02:D1:21:BC:B6:49:BC:69:2E:F2:B6:B1:69:9C:C3:FA:42:62
            X509v3 Authority Key Identifier:
                keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b9:b6:e4:54:ff:9d:85:d5:22:f6:30:ab:31:e8:5a:7e:da:
         8f:3d:93:be:e9:0f:23:d9:87:07:a5:60:2c:28:a2:97:11:ce:
         81:7c:64:a2:b5:67:99:51:f3:dd:1e:19:9a:ec:e5:88:79:23:
         a1:cb:1c:6a:c7:a5:33:35:62:7b:b4:e6:a2:a1:a4:d5:74:27:
         e7:77:71:e3:32:46:fb:87:64:87:8a:f4:61:5b:dc:83:74:6e:
         b3:8a:d1:f9:67:fe:f5:65:5b:69:dc:f3:d9:f4:3c:87:d8:c2:
         19:be:96:67:09:17:ba:46:a2:d4:88:d3:b4:81:2e:7d:86:92:
         69:26:65:37:4b:0f:1d:d7:47:d4:c8:ec:62:9d:50:f5:04:70:
         7f:da:52:52:57:b7:c2:3f:45:7c:e9:f9:f3:2d:94:ad:59:f5:
         ea:1f:de:41:85:fc:aa:33:83:d0:02:cf:58:6b:dc:c1:d6:d6:
         7d:89:8b:33:9f:b7:ea:8e:6b:01:f8:16:51:ad:36:f2:1f:ea:
         8f:bc:1b:77:a4:98:e7:41:b5:a8:23:62:51:cd:21:ab:a0:6d:
         82:56:f7:98:d1:15:6f:25:e3:4b:44:31:10:c8:cd:24:84:a3:
         9f:18:49:b3:6b:7e:90:4c:f0:b8:2d:c6:a4:7f:3c:d9:a3:98:
         42:3f:b9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----