Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
File:                     0mjZoqZF18wv0lOzZwQIBV5W__k.mft (raw, json)
Hash identifier:          H7exRAfZ3IK6X+SdFC9PLQvnRG1PWHC5JJa4MV2fI4Q=
Subject key identifier:   A4:1E:D7:10:56:FF:D2:F3:BE:C7:09:93:60:03:BA:ED:D1:4B:0D:7F
Authority key identifier: D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9
Certificate issuer:       /CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
Certificate serial:       01962E99899FEF3C903D5A75DA9E6E56E6A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft
Manifest number:          0BCC
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: 0mjZoqZF18wv0lOzZwQIBV5W__k.crl (hash: HPXkGJp3trb8U4gHmwQ0zruqKfTcxvX6gtgXNw/eUiw=)
                          2: 1-1Q-JUTaDXQnn29QzjTcxKcU51M.roa (hash: S2RyOo3MnGOBQQfCCR1Slz5mB03LVga93H7HVY19x7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:9f:ef:3c:90:3d:5a:75:da:9e:6e:56:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d268d9a2a645d7cc2fd253b3670408055e56fff9
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=a41ed71056ffd2f3bec709936003baedd14b0d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:ed:11:c4:81:c6:5b:b2:db:c5:73:87:d4:
                    ef:07:32:78:6d:8e:d2:ea:27:40:8b:6c:b8:a4:28:
                    fa:de:26:9c:f3:be:0e:88:4f:33:56:34:8f:2a:0d:
                    2d:57:4c:61:b3:0e:a2:94:39:cd:a5:c1:5c:31:ed:
                    50:96:52:ef:6c:82:0f:15:86:3a:f0:50:b8:70:0f:
                    de:28:29:9c:16:e7:14:c1:a3:93:c0:fe:ac:d1:b6:
                    0d:37:2a:56:51:ed:91:c9:49:89:7c:4d:a8:3b:3f:
                    51:9c:7f:b3:e7:f1:8f:9b:b0:56:8c:d9:82:c0:8a:
                    7d:58:b9:0b:b7:17:4c:4f:80:34:6d:14:d0:9a:7f:
                    71:1c:80:3d:98:d0:fb:32:4a:26:ca:f8:fd:4d:23:
                    38:37:f1:07:c4:05:a3:13:ea:37:ff:c7:50:e5:ac:
                    12:a8:69:75:96:a4:cb:4f:8a:e5:08:6a:e4:9b:62:
                    be:68:3f:be:9d:dd:3e:db:cf:dd:91:8b:4d:6e:76:
                    cc:57:83:8c:0b:f0:91:e2:20:73:8e:7c:8c:83:30:
                    8d:09:91:d5:d4:2d:f2:e5:0f:13:07:94:5d:12:68:
                    47:aa:83:85:c7:ee:69:77:29:d2:5a:62:be:5b:85:
                    46:e2:28:79:18:35:0b:3d:f7:3e:38:b1:2e:fd:41:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1E:D7:10:56:FF:D2:F3:BE:C7:09:93:60:03:BA:ED:D1:4B:0D:7F
            X509v3 Authority Key Identifier:
                keyid:D2:68:D9:A2:A6:45:D7:CC:2F:D2:53:B3:67:04:08:05:5E:56:FF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mjZoqZF18wv0lOzZwQIBV5W__k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/44038b-8031-44e0-91c4-cc5676c7de9f/1/0mjZoqZF18wv0lOzZwQIBV5W__k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:3d:1c:cc:f0:76:fe:68:39:38:dd:bc:38:0b:a3:15:f9:
         a6:4f:3d:9b:c0:13:93:80:c5:19:a9:18:ea:8b:e0:9a:c2:b1:
         d1:0c:1a:d8:1b:ad:74:0a:3a:fe:ad:8a:9a:e3:35:9e:52:78:
         58:70:fb:da:54:81:f5:0f:a9:bc:32:c4:45:79:46:63:e5:4c:
         1b:11:db:c6:ed:4a:be:dd:f9:6d:b5:23:43:c3:0c:5e:22:5d:
         c1:03:74:ca:a2:f1:91:7a:bc:15:16:5c:a6:c4:a4:1c:bb:8b:
         c3:49:a8:dc:11:37:b5:c5:ca:71:3d:6a:37:24:96:7a:cc:f5:
         70:e2:5a:d1:cf:98:21:e0:b9:73:6f:ff:7a:35:e6:e5:ad:b7:
         da:97:91:0e:3b:95:3c:3e:37:89:f5:e9:a1:fe:ce:75:7b:7b:
         17:da:2a:4d:8d:ac:7f:62:79:e0:35:5a:46:f9:3f:d2:d4:f9:
         4f:04:fa:84:3c:2e:5f:c2:b3:f7:29:42:b4:24:d6:c4:75:0f:
         cc:28:31:f0:35:f4:98:e7:ae:55:4d:6c:a7:62:ba:01:64:05:
         c5:70:23:c6:1f:24:e5:e1:05:bf:c6:23:e2:24:0d:49:93:be:
         08:90:41:4a:63:e5:46:51:c1:5c:e1:25:0a:7f:06:a6:07:10:
         6a:27:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----