Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File:                     DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier:          etD+zh4kBI5koESdEOcarebwKUMlflTSpplT2LRDECY=
Subject key identifier:   E4:CB:E0:B2:61:1A:96:C7:17:88:DA:2B:6E:4E:EB:19:78:33:3A:D8
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer:       /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial:       01962E99837AE199F1779F8B8A2B8E41B47E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: +JQwrfhHktpJ28zgYibekmqMcYafWIL0Ny+TipddkXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:83:7a:e1:99:f1:77:9f:8b:8a:2b:8e:41:b4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=e4cbe0b2611a96c71788da2b6e4eeb1978333ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:38:09:30:6d:97:ca:27:fd:1b:3a:d8:31:
                    a6:fd:65:0e:93:ef:5c:9c:52:cb:ba:08:53:c2:d7:
                    ab:89:cd:67:fa:19:e3:84:12:69:43:64:5a:e4:4f:
                    08:f0:5d:51:61:82:b6:ff:a1:de:5a:5f:c8:19:92:
                    dd:6e:be:29:94:b3:99:33:ba:bc:9f:91:e2:9e:f7:
                    05:c0:b5:2b:aa:e5:06:3c:ea:68:66:df:f5:b8:83:
                    cf:c7:ef:73:ec:3d:de:46:68:6c:34:18:e1:a3:c1:
                    95:19:2a:26:56:bb:5e:df:0d:a0:72:c2:cf:be:61:
                    69:40:62:29:7e:9b:84:82:62:6b:4c:48:ef:47:5b:
                    14:0b:f0:be:d1:52:10:72:78:31:d9:c1:d0:2a:b0:
                    67:4f:5d:1d:5b:b7:1c:ca:5d:0a:c4:6a:ab:0a:d4:
                    ed:c7:29:56:5b:14:75:5d:e2:5b:ce:4c:40:b5:2e:
                    ee:5f:4d:68:aa:4e:4f:b1:06:20:92:1e:d7:10:b6:
                    bc:ad:cb:c5:99:0c:80:0c:6f:be:32:08:a6:af:16:
                    08:2f:9b:d1:8f:f8:59:27:89:0e:a8:9d:b8:34:d6:
                    66:1f:79:01:db:cf:2f:17:25:b8:52:80:bf:4b:70:
                    ad:79:77:30:16:1e:7a:59:3a:cf:d6:2c:c0:21:91:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CB:E0:B2:61:1A:96:C7:17:88:DA:2B:6E:4E:EB:19:78:33:3A:D8
            X509v3 Authority Key Identifier:
                keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b1:68:ed:0e:09:5d:42:db:d7:36:e7:9e:22:5e:d7:78:a9:
         9d:ea:dd:96:ea:30:d7:c5:29:6b:14:43:15:39:eb:61:f4:59:
         4a:d0:53:0b:f3:b4:c3:a3:79:c1:ad:13:1a:f6:43:22:01:ee:
         25:10:4b:e6:6f:75:7d:19:51:28:98:88:26:59:ca:5d:e3:f1:
         ca:3e:7f:ed:8b:9c:2e:fa:e6:4a:a3:d9:98:55:a3:d6:ec:d3:
         80:5d:42:89:92:d4:28:44:1d:e0:b6:30:0a:9c:fd:4c:94:76:
         a3:ef:1c:94:ac:ab:c1:5a:1d:22:b0:b1:74:db:5e:a9:ff:58:
         91:69:25:0d:95:ae:42:1b:47:27:1b:41:c0:70:11:5b:ba:5f:
         0a:e9:31:44:80:67:53:20:85:89:86:4d:2b:92:dd:e3:07:85:
         84:fa:17:e9:49:10:27:36:c9:87:58:4a:6f:bc:aa:87:5f:d9:
         b0:da:00:d6:41:07:43:b5:17:6e:b0:a5:54:5e:d5:ff:a3:ab:
         9d:2a:db:09:ef:b6:42:b8:db:7d:0e:4f:af:ff:2a:c8:d0:19:
         3f:d1:c0:fc:ff:a6:53:b0:5f:33:a4:3d:2a:9f:a4:e0:9a:ff:
         e1:2b:77:ae:48:5d:2b:85:54:c2:81:6e:f9:d8:23:91:ea:06:
         e0:34:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----