Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File:                     u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier:          JEGhZkg8T+7P4gSlX7iH3sXuvgfRKywOM6qXWEFgldU=
Subject key identifier:   0C:82:E0:9F:5F:2C:EA:DD:CB:03:7A:96:90:C4:77:86:B1:15:A7:1B
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer:       /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial:       01962ECFC1F53E94BFD36AA142EB433B7381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number:          0271
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: JZvykjrY4LyUzfGwCQ/bqoBVQ+BjVrOza+HlB56Tpzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c1:f5:3e:94:bf:d3:6a:a1:42:eb:43:3b:73:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=0c82e09f5f2ceaddcb037a9690c47786b115a71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:16:96:2b:17:8c:25:b7:13:11:ab:b0:30:
                    96:cb:6d:da:50:a5:fc:99:e8:81:68:81:2e:16:8c:
                    e2:de:28:88:9c:c3:63:da:c3:78:5d:55:fa:1b:a0:
                    02:7a:50:5d:e9:0e:23:02:31:42:e2:c5:30:b7:db:
                    a7:01:d2:57:8a:7d:d2:23:07:5c:69:5a:a2:b6:e6:
                    a7:92:dc:68:34:fc:f7:ba:ce:0e:f7:7c:ef:3b:b6:
                    cb:21:b0:06:ef:25:8b:35:b2:c7:5a:50:94:d0:42:
                    da:ab:ca:3c:59:87:dd:f6:bc:28:72:49:b0:19:40:
                    36:37:f0:fc:ea:cb:cb:68:1c:e1:93:27:21:a1:16:
                    ab:80:66:66:3d:bc:f4:84:8a:5a:66:c5:79:47:3b:
                    3e:28:3a:9a:a2:69:a7:cf:1c:0d:80:89:7c:10:d9:
                    42:38:2a:6e:33:9d:b4:53:ad:46:1d:7e:d9:e3:68:
                    65:1d:7c:d9:1c:59:70:ff:0f:76:46:43:85:1c:2e:
                    2d:d3:13:01:c5:f6:c2:5a:5f:c8:ef:d2:61:29:43:
                    ac:f6:87:73:ae:ca:2b:7a:e6:44:9a:86:e3:6b:ff:
                    d1:73:6b:55:69:e6:22:92:a9:19:a3:f8:b5:ce:42:
                    93:2d:dd:c1:4b:cd:92:dc:3b:d3:73:e9:39:57:f6:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:E0:9F:5F:2C:EA:DD:CB:03:7A:96:90:C4:77:86:B1:15:A7:1B
            X509v3 Authority Key Identifier:
                keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2b:a5:f3:56:53:ce:ea:33:8d:e4:a0:d8:8e:43:03:af:60:
         f9:a3:48:00:04:f8:d6:92:0a:d3:ea:fd:c8:ec:d8:7f:ef:67:
         5e:23:8f:e3:c3:e5:a9:ab:6b:27:c4:09:28:70:cf:b5:ef:41:
         67:71:ae:03:dd:95:d6:c3:0c:3b:62:c1:23:fd:e9:06:4e:7c:
         a1:06:96:21:b1:35:85:16:d6:29:48:36:df:ce:b0:1d:82:74:
         f2:ab:d7:41:95:3b:10:fd:18:32:5f:d6:6e:c0:ec:15:a3:09:
         a7:43:62:77:12:0d:0e:95:99:67:ba:f7:e9:40:73:86:94:a9:
         0a:87:33:20:96:20:b2:e7:b0:7b:dc:37:7d:27:c5:06:4c:68:
         73:9b:6e:ef:79:1c:89:c2:e2:87:99:10:08:ba:03:54:1a:db:
         54:66:e7:c9:a9:3d:ac:38:9c:85:cd:26:10:4c:7c:53:68:87:
         30:9f:f3:42:67:46:67:5c:66:b8:4b:96:42:c8:2f:bb:61:11:
         ea:20:1a:c4:d3:d0:17:8f:6d:b9:81:0c:a8:a1:8f:08:c3:a3:
         8d:36:1e:ed:85:27:94:d2:f5:da:8a:b4:95:6a:25:4e:41:c6:
         22:90:5e:b7:d9:83:a0:55:db:cb:e7:0a:8e:13:ed:4b:3e:a2:
         e2:aa:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----