Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5fd023-92ea-4a63-b7d0-e5cba2137308/1/o6jK9iF86xDdjBRvlrnXc-3YiGQ.mft
File:                     o6jK9iF86xDdjBRvlrnXc-3YiGQ.mft (raw, json)
Hash identifier:          5imx4VewABfWO50GVc0C34VVvRcM+n4z1QyDn+yg46A=
Subject key identifier:   AD:05:1B:9A:EF:10:87:F9:9E:2A:DE:A8:9A:1C:AE:66:98:2A:C0:F9
Authority key identifier: A3:A8:CA:F6:21:7C:EB:10:DD:8C:14:6F:96:B9:D7:73:ED:D8:88:64
Certificate issuer:       /CN=a3a8caf6217ceb10dd8c146f96b9d773edd88864
Certificate serial:       01962E61E1EE6589D5CD78D176A13537EEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6jK9iF86xDdjBRvlrnXc-3YiGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5fd023-92ea-4a63-b7d0-e5cba2137308/1/o6jK9iF86xDdjBRvlrnXc-3YiGQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: o6jK9iF86xDdjBRvlrnXc-3YiGQ.crl (hash: GWmuAGT25D9CwK/b4S9QLcoGZltvdr7ZNjn5hKMurF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:ee:65:89:d5:cd:78:d1:76:a1:35:37:ee:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a8caf6217ceb10dd8c146f96b9d773edd88864
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=ad051b9aef1087f99e2adea89a1cae66982ac0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:14:2a:6f:5c:bc:c1:fe:4b:00:fb:0f:52:
                    d2:71:35:d0:09:bf:a6:cb:fd:5e:fe:07:f6:3b:da:
                    e3:65:10:e9:04:7b:ee:b0:ae:7b:5d:c5:e1:7d:22:
                    be:02:de:6e:ff:6b:e8:84:d9:0b:ff:00:01:6c:a8:
                    a5:e9:ac:b9:c0:65:40:1d:a2:bf:21:d4:60:e7:7b:
                    65:f1:7c:de:b9:08:c1:17:c6:7b:0b:55:fe:5b:8a:
                    b7:7a:52:be:3e:90:cf:7b:86:e8:5a:9d:b1:65:c7:
                    ab:a4:2e:85:41:4d:76:09:89:f9:40:a7:98:32:52:
                    0d:d2:b1:75:b0:93:1a:8f:cb:7a:06:e2:ff:62:9a:
                    30:b3:0f:51:e9:8f:69:b3:b1:4e:ad:51:1d:0d:60:
                    f5:33:24:ec:07:01:8b:0a:12:32:31:4d:54:25:e1:
                    94:56:61:cd:16:d0:50:f2:46:88:eb:25:78:13:05:
                    f5:65:2f:40:e1:c1:bd:b7:0b:b9:a5:fa:b5:22:04:
                    10:03:d1:5d:df:03:41:e1:f3:0e:13:54:cc:d8:28:
                    a4:b2:31:a9:ef:b2:6c:45:45:f7:61:cf:81:e5:c6:
                    05:42:fe:7b:2c:15:3a:f3:e7:6e:c8:b9:a3:15:56:
                    20:9f:c1:aa:4e:e5:e5:e5:7a:e6:70:2e:34:28:0d:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:05:1B:9A:EF:10:87:F9:9E:2A:DE:A8:9A:1C:AE:66:98:2A:C0:F9
            X509v3 Authority Key Identifier:
                keyid:A3:A8:CA:F6:21:7C:EB:10:DD:8C:14:6F:96:B9:D7:73:ED:D8:88:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6jK9iF86xDdjBRvlrnXc-3YiGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5fd023-92ea-4a63-b7d0-e5cba2137308/1/o6jK9iF86xDdjBRvlrnXc-3YiGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5fd023-92ea-4a63-b7d0-e5cba2137308/1/o6jK9iF86xDdjBRvlrnXc-3YiGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:11:a1:cb:8e:15:63:17:ea:fd:6b:9d:6a:f3:c4:42:c6:ca:
         9b:e7:24:e9:56:dc:7c:89:7b:ca:05:f6:79:de:c3:51:4b:d4:
         a7:25:e7:ad:09:86:fc:03:c0:e6:72:83:01:23:f0:83:ec:21:
         96:d7:8b:36:d6:35:09:1a:a6:d0:46:0f:8b:29:30:a7:c3:bf:
         7c:3e:27:f0:a9:ef:cd:19:d8:01:fb:6b:e9:eb:fe:cb:bb:87:
         f0:8f:21:fb:73:c2:5a:40:d2:dd:f0:73:1c:b3:e5:13:8c:a8:
         95:7b:53:11:dc:d6:27:b8:1f:b1:85:b3:32:65:3a:fc:40:07:
         1f:02:7c:ea:e0:ac:ec:d9:ef:18:56:70:f5:30:e7:56:43:63:
         9b:64:9a:fc:3d:5b:ec:70:2b:52:b3:f1:88:5e:e7:c3:f3:e2:
         3b:92:ca:94:6e:55:a2:c7:ca:93:63:58:6b:b3:2c:77:9d:f5:
         1d:ae:91:dc:13:c3:62:9d:87:ab:a2:8b:29:f7:f0:cf:46:5f:
         90:f4:f9:26:44:33:39:e5:0f:ab:8b:f0:55:66:98:a2:a9:23:
         b8:07:ac:0f:ff:3d:40:0f:e2:25:4e:71:24:f1:79:2f:4a:72:
         25:98:90:8c:a0:38:71:9c:7f:cd:41:ef:ef:41:26:01:9b:db:
         36:2a:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----