Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
File:                     OmqMuD6zZTfKf_csW07WqNKtpMQ.mft (raw, json)
Hash identifier:          cNH/ibkzztIjXDJIuZXFyaGMizYxoxAbnc7cYKiVeNI=
Subject key identifier:   C3:E2:31:0C:BA:5F:DB:E5:75:6B:1D:34:19:9C:16:9A:73:37:C4:BF
Authority key identifier: 3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
Certificate issuer:       /CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Certificate serial:       01962DF40F43DDEAFF6C49AEDC2B178CADE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: OmqMuD6zZTfKf_csW07WqNKtpMQ.crl (hash: jKHrn7k+3mEQaCay9bsstO/eCrWQpSV6NQ2W7Pw4/1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0f:43:dd:ea:ff:6c:49:ae:dc:2b:17:8c:ad:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=c3e2310cba5fdbe5756b1d34199c169a7337c4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:13:01:a2:00:5e:2b:e9:1f:d1:30:a3:73:
                    b3:fb:14:33:8a:f4:c2:3d:37:65:c1:3e:f6:5c:3f:
                    51:e0:78:4e:29:f4:61:7e:c4:d5:1f:68:82:0e:60:
                    0f:14:2a:f0:32:3d:ab:1e:71:5d:b9:07:d8:53:b3:
                    47:a6:5b:00:fa:d6:ed:3e:85:ef:30:b4:c6:8d:fd:
                    1c:ba:7d:dc:b2:68:dc:c6:7c:32:83:e1:28:77:69:
                    c6:ad:f9:6a:54:7f:28:9a:a5:59:d4:8e:ce:aa:d2:
                    20:e9:55:5b:45:47:ab:23:1b:77:6c:37:cf:a8:7a:
                    9f:69:2b:ba:68:00:78:32:86:4d:cc:d7:e0:e4:1a:
                    08:97:83:d0:26:40:49:ab:bf:dd:0e:95:87:cb:03:
                    e5:d9:f0:3d:a1:33:14:95:f9:3a:36:31:b8:33:23:
                    e9:98:48:44:a7:e3:f5:70:f3:68:50:b0:0e:45:1d:
                    86:5f:64:6a:93:f9:0a:ae:f9:3a:b5:54:0d:48:f3:
                    a5:84:de:0e:d8:53:5e:dc:61:61:86:81:e7:4c:2e:
                    55:f5:ca:a9:49:be:91:71:a3:95:ca:bd:f0:bf:d8:
                    75:de:d7:e0:9e:be:26:5e:71:ba:0f:3e:58:bc:66:
                    11:a8:4f:65:b3:c0:48:d8:67:1f:57:4b:69:d2:d8:
                    df:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E2:31:0C:BA:5F:DB:E5:75:6B:1D:34:19:9C:16:9A:73:37:C4:BF
            X509v3 Authority Key Identifier:
                keyid:3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:9d:79:da:45:6a:59:4b:88:64:cc:ca:92:6d:c9:87:e3:
         9e:6c:25:59:25:41:af:39:40:cd:bd:2d:77:16:d3:fe:e4:fc:
         da:cc:cb:a6:73:d8:d9:f1:a2:53:a1:fe:f9:fe:36:31:5e:ff:
         6f:b7:ae:c2:ed:0a:bb:06:f1:bb:2f:5e:27:a9:8d:8c:ce:58:
         8c:d4:64:d7:76:36:03:17:f1:1b:19:a4:ba:ed:0b:89:c7:af:
         00:06:af:83:f8:68:bd:11:c5:01:59:44:c0:be:5c:ad:7d:08:
         41:df:89:5d:95:6f:85:20:9e:5c:ab:c0:0b:2b:ab:d4:94:5c:
         2b:a7:7a:fc:25:65:43:07:50:dc:f0:49:ce:c7:75:20:76:9d:
         34:4e:f5:5d:19:4f:27:f8:9f:cc:33:bb:90:7d:5b:0e:9b:f9:
         6e:f1:25:2a:54:44:7b:73:bd:da:f1:6a:26:1c:36:15:34:62:
         a5:e3:3a:c0:59:1b:86:19:0d:b7:1b:2a:36:ec:49:b7:5f:76:
         82:37:dc:b3:0b:5b:b0:38:b5:65:92:ee:41:04:92:d5:09:c1:
         fd:fc:fd:9a:73:1e:f7:5e:50:82:ae:5d:cf:b9:23:90:8c:94:
         12:70:d4:e7:e4:ba:91:54:90:ce:42:55:1c:50:b3:c8:e0:b3:
         c0:a7:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----