Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File:                     _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier:          tqQpGh05h2aFRBvdxyCaMmB3r7UDtvXu2g3CxoEdxwo=
Subject key identifier:   1B:98:DC:36:38:69:12:5E:19:EC:6A:A3:37:41:C3:F8:78:C3:F4:CA
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer:       /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial:       01962E98C6B6C76A86EE14DF2FA47A669EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number:          0E64
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: gPr0WyhcO76KfGEwlPg9/eaXNgDGqNeuRomA80fdZ7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c6:b6:c7:6a:86:ee:14:df:2f:a4:7a:66:9e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=1b98dc363869125e19ec6aa33741c3f878c3f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:01:6d:28:aa:26:c7:c5:d5:49:bf:8c:e0:
                    e4:e2:72:15:5e:71:63:1c:ed:f1:d8:26:eb:19:73:
                    71:cf:f2:1a:99:1f:44:03:08:a3:63:20:d4:6e:d3:
                    a1:be:5b:1a:2f:08:28:3c:e6:5d:95:f1:34:85:2e:
                    5f:04:ab:a3:9d:09:28:c3:f4:12:94:4f:64:ab:9c:
                    8b:cc:94:31:1c:68:25:90:f4:f1:9c:aa:de:39:99:
                    bc:7a:1e:ec:cb:71:28:da:65:f8:ad:f3:a3:c3:7e:
                    58:84:6b:96:ac:a6:5a:79:fc:d6:d8:a0:59:fe:51:
                    c4:1f:d9:76:68:8f:cb:62:66:78:13:7e:88:e1:77:
                    ca:e0:93:cf:21:d1:21:b1:21:86:a5:f2:b8:7b:91:
                    19:5d:8a:36:fb:86:d0:13:6b:9d:ec:9e:ab:c8:ba:
                    2b:1e:f6:89:5e:52:06:d9:b0:56:46:92:7c:a1:8e:
                    10:15:60:0a:1d:37:d2:d4:23:9a:1b:aa:d0:f4:09:
                    e2:6d:be:fe:72:b1:16:41:8f:32:7f:c5:74:21:4a:
                    ee:8a:ab:ef:28:4c:ba:d4:73:23:f4:ab:8a:1a:e7:
                    9f:bf:53:31:a9:17:72:26:55:b5:72:27:58:2c:19:
                    cd:c4:14:2d:3a:a5:13:27:e0:e0:77:7a:93:33:16:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:98:DC:36:38:69:12:5E:19:EC:6A:A3:37:41:C3:F8:78:C3:F4:CA
            X509v3 Authority Key Identifier:
                keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:46:fb:09:dc:99:28:c6:76:71:c4:81:ea:58:f0:5a:e0:9f:
         f4:7d:52:7f:fa:42:a1:be:8d:28:75:b4:28:ba:29:ee:ec:5b:
         cb:88:93:c9:7f:ac:d1:ad:4f:57:ee:2a:13:81:48:5e:77:93:
         4a:9d:74:96:b3:e2:44:8b:57:e4:1b:29:4d:29:85:25:76:30:
         ec:e3:5d:d9:3f:2c:bf:77:33:32:26:7a:cf:cc:dd:5e:f5:5a:
         0d:27:40:64:b5:0e:e6:11:86:27:9d:87:5e:ea:57:b9:93:e9:
         a1:30:28:cc:7e:4c:23:28:00:64:5f:77:30:00:06:7c:fa:40:
         04:4f:05:3d:f1:a5:94:db:30:b2:e7:5c:1c:74:5a:52:d6:e4:
         90:69:37:64:a0:94:90:42:62:b1:97:c8:fc:7a:9f:2f:b4:1f:
         33:7c:d7:1d:ee:3c:81:ab:4f:b9:e3:a6:dd:2e:1b:0f:fd:4b:
         6e:75:fb:0d:86:64:eb:98:24:c4:0a:e7:fb:8a:de:9a:ae:35:
         4e:a9:fd:74:fc:1b:94:13:e6:0a:09:4f:22:66:55:0c:77:88:
         cc:89:e1:46:e5:5f:66:d3:b4:64:60:c2:b6:ff:5d:1b:d0:a1:
         d3:b7:5e:59:26:af:63:90:db:d7:61:f0:02:44:d4:0a:de:97:
         f0:8c:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----