Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File:                     OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier:          bgUEVY3/sBoNzILySs3m3Ig6xo9YzexlXwFXqATKn0s=
Subject key identifier:   13:25:30:1E:F3:92:B4:A3:9B:91:04:E6:3B:16:66:E7:C5:31:7F:63
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer:       /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial:       01962F745313E3825B68D74A380C60E85B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number:          046F
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: SHLFdmtToV2akGbYy7x9WB3rzETFZHUHK5KutDcfqYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:53:13:e3:82:5b:68:d7:4a:38:0c:60:e8:5b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=1325301ef392b4a39b9104e63b1666e7c5317f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:32:a2:92:13:06:70:0a:46:7a:1f:2c:de:
                    59:d3:e7:f4:c6:d7:12:9a:17:2d:c9:c3:51:8d:4b:
                    60:66:44:29:85:51:d0:c1:29:f6:9c:31:97:e6:50:
                    dd:64:6a:95:d5:5d:ae:27:e9:bf:1a:b7:ca:e9:59:
                    bc:c5:fc:fa:6e:52:a6:05:77:b2:8e:b2:d4:e9:1e:
                    36:23:ff:2f:fc:89:48:58:a2:a0:17:a0:46:fe:73:
                    22:51:05:c3:67:3b:85:c0:10:4c:94:ba:81:0d:c4:
                    a8:1e:32:af:a6:0f:18:3d:18:91:ed:aa:d7:76:01:
                    1d:85:5a:c5:aa:a7:de:eb:e9:d5:eb:ca:0b:d3:4c:
                    cb:be:f5:ea:5f:92:90:4a:aa:ba:6d:ec:3f:1f:d4:
                    93:7e:4b:26:4a:97:5f:ee:55:9c:da:b0:e2:b1:01:
                    18:2f:dd:3c:5f:ec:0b:15:8e:f0:ca:a8:f9:0b:3f:
                    3a:3a:8d:fd:4c:6b:e1:b2:0e:74:8e:47:c2:15:24:
                    f0:9a:1b:f7:a7:33:a5:be:d5:8a:bc:5f:ae:7c:dc:
                    2f:2b:17:c0:7e:54:24:70:3e:87:6b:fb:2c:5e:75:
                    c7:f9:6e:d8:2e:aa:b7:64:22:13:3e:85:fc:d4:14:
                    d6:f5:88:be:7e:af:82:85:90:e5:60:20:a1:3e:51:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:25:30:1E:F3:92:B4:A3:9B:91:04:E6:3B:16:66:E7:C5:31:7F:63
            X509v3 Authority Key Identifier:
                keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:48:ed:3c:55:75:49:a9:72:d0:54:dc:01:c2:77:e8:ed:67:
         40:dc:5f:e4:d7:bb:32:c5:a3:4b:05:a7:0d:bf:18:76:35:b3:
         a0:97:b2:96:5b:d4:4c:a8:7d:5c:02:19:79:73:61:07:f5:08:
         cc:b7:8f:5c:3f:57:b0:25:22:1e:e6:2d:ac:09:f4:8c:4d:3c:
         4b:46:f9:47:9b:65:39:34:b8:ff:c3:0b:06:b8:9a:13:31:76:
         91:db:7c:98:ac:62:39:71:b0:c2:65:59:ac:9e:6f:b3:fd:95:
         11:41:7a:67:7e:47:41:6a:1f:20:a7:b0:8e:8a:f0:19:b4:20:
         d3:25:57:82:e2:7b:47:a3:a9:fa:70:99:7b:93:93:2b:a2:b0:
         78:eb:7d:12:23:1b:84:45:42:e4:99:53:84:e2:8c:e3:6a:28:
         dc:d7:01:90:47:96:e6:2e:01:54:a7:74:32:ad:23:3a:38:86:
         18:aa:86:25:1c:e3:60:99:3d:41:74:0e:70:15:0c:15:a1:6f:
         b4:90:d8:2b:0b:98:93:b8:04:02:41:9c:c4:3e:8c:5e:56:2d:
         21:f1:d7:a5:69:cf:be:61:95:84:99:c8:14:cf:fd:d8:7f:62:
         4c:a8:6d:c0:66:0a:92:c5:fb:4c:33:04:06:21:13:24:3a:04:
         07:64:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----