Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
File:                     OoLcXHHOpyxlsCahJnifOIZXC6Y.mft (raw, json)
Hash identifier:          VXkQUZ8GwiNY3GItVZP96o8dOxiSWMThIgjOJU0B34Y=
Subject key identifier:   F7:8C:4A:BD:C5:10:82:04:CF:60:9D:E9:97:51:E3:80:22:43:31:47
Authority key identifier: 3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
Certificate issuer:       /CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Certificate serial:       01962E99BD428EF52A4D1A0E98DD2E3E1A55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: OoLcXHHOpyxlsCahJnifOIZXC6Y.crl (hash: i53BQ2nH8eNMdNRNZVu9h8wGo4xJIourHl2xJsaIQEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bd:42:8e:f5:2a:4d:1a:0e:98:dd:2e:3e:1a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a82dc5c71cea72c65b026a126789f3886570ba6
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=f78c4abdc5108204cf609de99751e38022433147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:6d:c9:a3:f2:68:5c:6e:2b:78:d4:f6:4d:
                    3a:2d:62:9d:fb:ed:69:55:4f:b8:1b:bf:50:b1:c0:
                    dc:9d:1f:f5:d2:7b:0b:e9:5b:9b:e8:2a:15:3a:9e:
                    ad:07:6a:ba:aa:f4:d2:43:0d:4f:f2:20:61:43:1c:
                    41:84:41:5f:25:62:6d:c8:08:70:28:ea:82:c4:d4:
                    0b:23:bc:dd:bb:e8:34:21:8b:04:17:b6:6a:81:2d:
                    23:a5:70:07:17:ca:69:3a:e8:2b:e5:47:7d:84:22:
                    7d:17:70:49:fc:e4:38:b9:e2:83:60:a0:41:5b:18:
                    ec:84:06:1f:d8:0a:ac:93:2e:78:3e:6d:ee:fd:22:
                    1b:29:4e:71:73:b0:5f:71:e3:86:da:11:97:0e:25:
                    77:8e:ae:57:da:cf:05:f9:9a:91:b0:7c:05:b4:4c:
                    e4:ee:ab:ef:d4:79:64:cc:35:c8:48:55:29:fc:5a:
                    af:cc:9a:c7:1d:b3:45:94:0d:26:72:04:02:c0:ee:
                    38:71:85:64:9b:32:51:74:50:93:b0:fd:12:ba:8b:
                    52:7a:ff:c9:36:19:bb:f5:c3:9b:92:ef:84:da:76:
                    66:3f:2a:59:31:15:34:ce:fe:9e:f3:19:c5:20:c6:
                    c9:49:24:bd:5f:97:da:0a:60:c8:ab:af:48:0e:c0:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8C:4A:BD:C5:10:82:04:CF:60:9D:E9:97:51:E3:80:22:43:31:47
            X509v3 Authority Key Identifier:
                keyid:3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:9b:11:3d:17:73:f6:f3:d7:7d:6d:da:1c:fd:ef:ca:2b:
         06:df:ac:a0:a0:fc:ec:98:85:f7:ef:e7:53:10:64:03:6f:fa:
         53:76:e2:e2:df:db:56:f2:bb:eb:af:3a:11:08:82:48:13:26:
         b3:e8:e8:90:17:15:8a:65:ca:99:40:3e:98:3d:9f:60:a5:63:
         99:b0:b1:81:44:3a:79:f7:9e:3a:16:2e:4e:85:21:1f:b3:57:
         3e:f0:da:39:4c:8a:cc:8c:69:b9:55:9d:a2:c6:bc:82:4b:cb:
         70:00:1b:d9:2b:82:b4:e0:93:5e:ba:ee:bb:c4:e7:ba:cd:b2:
         55:c1:97:9d:5a:db:c2:0a:67:d8:8c:a0:dd:01:fd:18:ea:90:
         ed:df:fe:eb:8c:d4:0e:35:ba:a3:6d:13:10:7d:81:48:26:36:
         41:02:ec:ad:b3:6a:90:ba:d9:09:60:c1:63:5a:01:ac:be:ad:
         fb:c5:1f:ee:97:9e:ac:58:a8:b8:83:13:59:24:a0:73:54:e0:
         02:b0:92:30:07:15:91:86:be:e3:0d:dc:be:92:2a:34:d0:42:
         8f:5d:a1:36:b6:ae:bd:4d:15:ff:a8:91:b0:16:d8:dd:7a:1d:
         54:a0:9b:75:c3:c2:8d:0b:cc:13:0b:d2:c8:b8:59:a7:4e:1d:
         85:df:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----