Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
File:                     O5pBDtUm-GwybZG2KApEGhbAxnY.mft (raw, json)
Hash identifier:          EOI7eOpTPU5fFR3GczfXUJGtSRLcwrHF85U5BrFdMrc=
Subject key identifier:   8A:45:88:0F:EF:95:8D:F1:90:68:71:1B:F7:68:82:D3:E9:48:A2:97
Authority key identifier: 3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
Certificate issuer:       /CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Certificate serial:       01962F06DE95FA58511550F16E6BA8771B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
Manifest number:          0654
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: O5pBDtUm-GwybZG2KApEGhbAxnY.crl (hash: p/rcRay4CBMZzOUSM8bopgHyBhq+DHpsFuNFQ3yBr6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:de:95:fa:58:51:15:50:f1:6e:6b:a8:77:1b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9a410ed526f86c326d91b6280a441a16c0c676
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=8a45880fef958df19068711bf76882d3e948a297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e5:70:67:1d:01:4b:53:a5:8c:33:41:ad:6b:
                    55:4c:d6:65:d1:e5:e7:6a:48:58:fe:fb:7e:e0:c8:
                    c7:d2:17:90:31:5f:ad:60:b0:cc:a5:81:5c:a1:d0:
                    e6:44:10:e0:81:b7:1d:e9:5d:9c:cb:04:a8:f4:18:
                    88:85:5a:80:f1:17:fe:91:69:33:af:44:7a:af:1e:
                    c6:08:64:3c:2f:39:86:47:b3:ab:f9:77:06:95:7a:
                    d4:cf:9e:48:0c:0e:d9:31:22:fb:f1:77:60:cb:3c:
                    84:d2:d9:1d:4d:5f:61:83:89:20:09:31:52:00:49:
                    7b:75:f1:13:8e:ea:e8:81:8e:df:c7:e0:80:6f:6f:
                    33:fc:72:94:e1:61:cf:14:d7:56:31:f3:d0:09:8a:
                    17:80:2a:fe:ff:0b:47:e5:bd:97:cc:fb:81:6b:cd:
                    2e:25:0d:34:69:11:07:64:bc:f8:86:7a:5b:52:a6:
                    87:a9:21:9f:d6:80:2c:22:a2:07:e1:f1:db:7d:da:
                    91:a9:c3:3f:0c:8d:ec:dc:a3:85:95:4c:19:cf:14:
                    b5:33:a0:b8:f2:85:26:59:81:db:de:de:68:b7:fb:
                    72:fa:10:23:a6:6f:25:90:ed:01:bf:90:8b:b2:e2:
                    90:55:e9:0f:c6:e1:d2:00:97:74:ca:44:a4:a7:5c:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:45:88:0F:EF:95:8D:F1:90:68:71:1B:F7:68:82:D3:E9:48:A2:97
            X509v3 Authority Key Identifier:
                keyid:3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8c:52:50:0a:bb:1c:15:fd:a1:31:2e:8e:df:02:a8:0c:ed:
         99:02:a7:9c:c7:7b:23:c7:c6:b5:97:9b:82:3d:58:78:9b:76:
         36:28:61:82:09:71:8f:fb:16:d8:39:f4:ea:fa:1e:48:d0:9c:
         89:28:84:75:f9:12:c2:60:28:cd:33:4e:e4:3f:f1:5b:78:0e:
         0a:82:32:1c:e7:05:32:1c:54:d8:95:ea:b9:30:06:6c:d3:c5:
         fc:c4:16:1e:89:aa:0f:3e:cd:72:49:60:10:d3:63:f8:25:f7:
         31:c4:6d:af:bb:d6:39:1c:80:a0:9a:66:80:e4:76:72:88:ea:
         21:97:78:73:cd:16:78:c8:74:9f:83:ad:db:81:f3:82:10:5e:
         d5:70:76:80:58:32:58:58:f2:44:a1:be:5d:82:c0:b4:61:11:
         dd:4a:86:6c:e3:09:9f:74:94:92:7a:a0:91:59:2b:e2:1a:f4:
         38:77:b1:74:d1:0c:f6:8a:74:a9:cc:03:f3:1b:34:63:68:d2:
         7a:bd:cf:39:73:6e:69:8d:38:13:49:31:28:25:8f:ab:27:f3:
         d5:c0:ad:6f:c9:6d:35:53:35:f5:6c:63:63:1f:80:e6:b4:b3:
         9e:b2:e4:60:eb:d1:1f:23:43:97:30:af:41:66:c0:bb:05:c2:
         d6:9e:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----