Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File:                     0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier:          Ha8TgL/LbdUxNzZtTD3dQb6QgIPD0LtqjSCwUuMInpk=
Subject key identifier:   E9:E0:AE:4E:75:1B:E0:8E:7E:92:BE:2D:15:00:42:06:DE:61:41:5C
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer:       /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial:       01962F06C0E0178DB8E616EDAC89C56E4608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: C1XyeVcG5Lxnu/zNg0C+l7kWtAjkfdXmdItQOra8it8=)
                          2: irNcQLmJh11TGBELw5uQP7kOVJE.roa (hash: R7pIQc58X7S0CJk6seUtKX1n/5bjuhfl7ShC4vfuTCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c0:e0:17:8d:b8:e6:16:ed:ac:89:c5:6e:46:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=e9e0ae4e751be08e7e92be2d15004206de61415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:d4:e1:05:a9:f1:15:d3:e9:3c:4d:07:81:
                    a3:75:ed:24:c2:f9:2f:bc:8c:41:d7:09:b2:36:c6:
                    48:28:ef:3a:8b:12:fe:fa:89:ec:b9:83:7e:1a:0e:
                    93:87:97:8d:e3:e3:9f:a6:e9:d2:41:1e:09:e5:51:
                    75:e6:24:dd:c9:53:e8:95:a9:a8:35:b3:e7:07:76:
                    d5:ce:e0:85:e0:4f:e2:16:3f:17:9a:06:c0:00:fc:
                    23:7d:9e:6a:41:a8:64:bd:34:b8:f9:89:1a:ff:87:
                    50:8e:7e:ae:8c:54:6b:10:cf:d2:70:45:59:0d:83:
                    6e:aa:fe:d2:c8:4e:69:c2:12:0b:82:61:31:95:5f:
                    41:18:12:58:70:3e:5e:96:02:ce:f7:ea:86:4d:3b:
                    dc:a6:54:bd:5b:16:46:e0:d5:b0:de:c5:0a:20:91:
                    0f:aa:52:44:21:9b:e7:89:66:35:0b:1e:1d:b2:62:
                    24:9b:11:ed:58:b3:ee:48:f2:75:90:c4:a4:c7:f0:
                    f0:9f:3b:a0:e0:92:ad:96:8e:ca:18:59:79:a8:33:
                    17:35:67:f3:45:dd:8f:55:1b:00:44:d6:8d:71:1c:
                    61:d1:25:59:00:aa:08:45:c5:f6:c8:2f:7d:0b:ca:
                    1e:9a:09:c9:7b:91:c1:ce:81:c2:9d:7d:00:90:31:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E0:AE:4E:75:1B:E0:8E:7E:92:BE:2D:15:00:42:06:DE:61:41:5C
            X509v3 Authority Key Identifier:
                keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:87:19:88:19:f0:22:18:bc:48:2c:af:ab:72:62:77:5b:ca:
         d7:a9:de:a8:aa:fd:46:2a:ee:aa:1f:b9:9c:82:95:80:0f:21:
         43:35:5f:29:1e:9e:57:7d:d9:8f:71:4e:2d:b9:c4:19:a9:6d:
         13:e5:d4:e0:09:5c:de:76:c0:96:78:64:c7:29:a8:d2:cb:ee:
         60:0c:5d:b3:2e:c8:57:67:c9:2f:9f:07:d4:d3:f6:21:b4:bf:
         6f:73:a0:4a:6f:d3:8b:12:3e:be:aa:ca:31:97:fa:56:74:e8:
         b0:38:0d:80:81:ba:32:07:0c:47:c7:77:17:19:5b:98:cc:e0:
         25:c0:8a:78:1b:f5:1f:22:c5:88:ec:b5:3e:f2:65:05:60:7c:
         3a:81:1d:7f:51:ee:26:82:5b:1e:00:99:ba:c0:d0:c0:65:0c:
         0d:8d:de:4a:d2:68:24:39:5b:dc:fe:87:0a:7a:29:f1:89:78:
         e1:a3:ec:0a:32:1a:1e:cc:28:e1:9a:57:ae:99:31:dc:5f:1b:
         e9:5e:d9:ba:89:dd:19:cb:38:4a:41:e2:6a:48:16:b9:7d:62:
         95:16:71:be:e8:45:ca:32:97:98:3b:98:ce:3a:57:91:66:d7:
         d7:9e:4f:39:e5:5e:c6:79:ee:27:d7:98:53:1b:c3:d9:51:93:
         84:c3:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----