Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
File:                     O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json)
Hash identifier:          //+r2QZ7EJNGXCLA4mj0ufOPB2CoH+PZwyluzHR+hqM=
Subject key identifier:   9E:20:7C:A7:51:03:9D:79:9B:D6:59:81:47:2D:51:C1:6B:87:8D:C8
Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Certificate issuer:       /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Certificate serial:       01962E999F7F55DF51CDC7310465D2BAB826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
Manifest number:          0C44
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: hdTj8YZPhlHhx6BPz/zqRzsj3F1s8nkY6bdMxv4hwsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9f:7f:55:df:51:cd:c7:31:04:65:d2:ba:b8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=9e207ca751039d799bd65981472d51c16b878dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:a7:23:69:98:37:4c:27:27:83:60:30:6f:
                    c5:1f:b2:7e:25:5c:ad:bb:21:9e:81:01:f4:03:f9:
                    48:44:fc:ea:e4:bf:0f:97:ad:18:e9:3f:51:1b:9d:
                    c0:f8:1a:1f:ba:6e:7a:a5:c3:45:cf:8c:b8:b4:a7:
                    2f:39:01:0e:2b:98:8f:a8:d6:3b:28:c2:9d:72:ef:
                    ba:e4:b0:55:6a:7a:ab:95:19:26:21:3e:2d:92:bc:
                    d1:44:a3:cb:98:6a:55:f0:2e:8c:6d:3a:73:61:21:
                    19:96:77:58:b0:dc:87:7a:00:ec:e0:a7:e2:ec:a9:
                    59:c2:9b:20:1f:86:bc:2f:38:ad:f5:5e:cd:96:5b:
                    0e:bb:dc:cc:ff:3f:d1:13:63:28:66:51:fc:3b:dd:
                    a7:e6:ec:b7:3d:ec:18:eb:36:88:17:26:c9:d3:c8:
                    88:dc:85:c0:01:39:0c:51:35:8a:10:49:fd:d8:46:
                    c5:bd:3f:e3:20:14:07:f7:c5:b7:31:7a:a2:58:b4:
                    55:b8:55:93:a7:94:7c:d7:cb:aa:c5:37:4e:bd:aa:
                    a9:be:c6:4a:a7:06:86:b1:b4:f4:6b:2c:5e:c9:24:
                    eb:0d:12:9f:a8:f0:bd:a8:b8:a6:a3:a0:aa:09:fd:
                    9b:62:41:56:e1:93:91:f8:1c:de:01:d3:e1:bc:3f:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:20:7C:A7:51:03:9D:79:9B:D6:59:81:47:2D:51:C1:6B:87:8D:C8
            X509v3 Authority Key Identifier:
                keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ef:a3:47:8e:c4:83:cf:7f:7a:39:1f:34:da:c7:75:81:f4:
         9a:9d:d3:75:78:43:fb:ee:a3:7b:ae:f5:f4:f2:94:3d:52:fc:
         87:ce:84:ec:2e:4e:5f:2a:ec:01:5a:6d:a4:39:e3:11:08:cc:
         04:03:5b:36:f8:8f:6f:e7:70:ad:a0:fb:88:0e:a5:23:0b:f2:
         48:c6:3d:5c:56:d7:92:33:90:04:cc:4e:09:f3:0f:7e:9c:a6:
         d6:40:f5:97:7e:da:6d:3e:d2:6e:53:21:5c:82:a4:b1:ae:03:
         e3:ef:30:ac:30:ac:1a:4e:80:1a:b9:27:3f:2a:e9:4d:90:11:
         30:29:8e:b7:24:75:53:6d:bb:e4:6a:3f:39:3e:66:79:d5:1f:
         a8:bd:ba:85:1c:62:89:b9:55:8e:3e:93:98:5b:e5:42:16:d6:
         fe:b8:36:a2:b9:8d:01:5c:8e:77:3e:4f:db:b4:66:35:58:64:
         b5:d2:5e:b5:2f:5e:21:ef:91:f5:84:33:3e:32:43:69:33:e5:
         65:21:ef:d6:bc:d9:5e:03:1d:5f:95:63:69:59:c0:e8:d7:a7:
         ab:85:b3:cd:c7:49:95:fa:b8:c6:80:1e:51:4b:cf:af:29:48:
         07:33:fe:16:7b:42:e0:0b:95:d5:c3:ee:28:ae:5e:c7:07:06:
         49:2c:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----