Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File:                     DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier:          DAxn8ZZuWabr3T0C1X54FhR8l9wxFufGHCtH8Y593TQ=
Subject key identifier:   0A:B5:16:82:4B:92:4D:A2:D7:23:74:94:F8:F0:0B:82:25:43:6E:FF
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer:       /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial:       01962E990397EC2FB6663034A93A45BE50C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number:          0B8E
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: hnNNFJC/4pTyZl00OB3LnlybfW8Tf1E4PcyLRBnq5Po=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:03:97:ec:2f:b6:66:30:34:a9:3a:45:be:50:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=0ab516824b924da2d7237494f8f00b8225436eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:e5:5d:a4:73:06:8c:72:85:56:26:0e:24:
                    c3:2a:1e:73:20:0b:31:21:60:3e:76:c2:e2:cd:dc:
                    63:e6:55:c4:41:8d:32:ee:4b:1b:f5:f9:64:24:c5:
                    41:2e:12:ac:a4:34:4f:7d:cd:3f:05:f8:73:f8:a3:
                    45:5d:e7:3c:cf:d9:d8:fb:d3:a8:8b:65:6b:f9:f8:
                    1c:31:bc:64:71:2a:46:59:7d:08:57:7c:ef:8d:74:
                    17:ec:6e:cd:19:0e:dc:28:1e:75:26:e6:2a:b0:fb:
                    25:27:b8:b8:ef:68:39:3a:4c:d4:a2:aa:1e:fc:8a:
                    d8:4d:5b:05:ed:78:af:4b:76:47:90:c6:c4:bf:9d:
                    66:d3:ba:af:f3:7d:77:99:51:45:55:ed:77:0e:a3:
                    85:21:fc:e5:bc:0d:19:bd:67:ae:fa:c1:db:a8:2f:
                    6f:d2:2b:1d:58:ab:3f:4f:cd:58:13:75:73:11:1c:
                    ed:ef:7f:4a:5b:94:58:61:d8:0f:ac:49:12:42:6a:
                    63:58:20:97:b3:c1:a6:16:2f:08:89:1a:af:93:63:
                    53:3e:67:73:ce:81:62:5e:33:03:3b:1a:3e:f1:fc:
                    ff:a3:8c:77:3b:b7:a8:9e:14:e8:45:32:53:79:d4:
                    98:39:bd:de:af:18:08:bc:f8:ca:2b:c4:95:d5:04:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B5:16:82:4B:92:4D:A2:D7:23:74:94:F8:F0:0B:82:25:43:6E:FF
            X509v3 Authority Key Identifier:
                keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:80:46:5d:de:8d:98:2d:1b:ad:de:82:3d:6e:94:14:0c:
         d0:d4:32:85:04:a7:a2:a1:84:92:fb:7e:81:f4:21:19:8c:1c:
         47:08:53:54:6e:89:f9:c5:ed:da:f2:6a:14:86:5a:9c:1a:47:
         58:82:9f:e5:4b:41:78:88:90:47:31:d6:da:17:26:72:ab:01:
         1a:2a:e8:8b:db:f9:b7:3d:59:a3:b2:32:06:81:ba:14:35:1e:
         d8:b0:47:bb:6c:07:90:6e:3e:7b:5a:96:2e:45:f3:94:ae:8f:
         87:27:97:84:63:f0:5b:04:3f:40:69:a1:6c:66:a1:51:10:ca:
         eb:93:52:d5:4b:18:3a:01:da:c8:0a:cc:4e:06:fc:8b:f5:0c:
         10:bb:51:e4:dd:56:33:b2:3e:bb:16:31:83:0e:df:4e:4b:70:
         3a:d0:1a:2c:9a:d4:68:31:3f:d2:38:62:5f:00:fa:5c:97:4a:
         08:b7:7c:60:33:db:06:ef:b7:c3:c5:96:88:d9:21:a3:a4:46:
         17:55:b7:be:c6:69:31:f0:b4:2d:59:fc:13:aa:08:e9:84:10:
         f2:17:37:33:47:9e:e1:14:d0:40:57:f2:1e:c9:58:ac:54:94:
         72:5c:70:df:0b:fd:58:da:ca:dc:6f:c7:9b:ea:2b:19:54:51:
         dd:23:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----