Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File:                     0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier:          ZfB0lk6xBijhIx4GLgA5KaAEDZbPg94FaK1lSgsUotw=
Subject key identifier:   80:18:91:8B:66:09:29:B5:A5:63:CD:8F:50:E0:32:D0:D5:DF:2B:8B
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer:       /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial:       01962E994DDEBFA3B89876B4829D9872EF7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: X+vJSW7CArpvQy2tyDf2ly7wvmp1u3+w2aytqm99Sm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4d:de:bf:a3:b8:98:76:b4:82:9d:98:72:ef:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=8018918b660929b5a563cd8f50e032d0d5df2b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:39:b1:0c:67:28:d1:b7:5f:f4:93:a9:ce:
                    1c:02:4c:d9:03:a9:23:98:f7:93:b2:7b:b6:29:8b:
                    a6:3d:e4:be:8b:3e:e7:1f:06:8e:7c:e0:43:32:e6:
                    14:48:c9:84:77:0c:b7:70:91:28:c8:56:38:59:44:
                    81:b6:bf:7b:f5:d5:23:8a:8c:81:49:e0:37:47:33:
                    27:c4:24:0b:2c:c3:3b:5f:27:da:53:af:a7:42:7f:
                    a0:47:ce:ae:19:af:88:74:4c:65:42:bd:30:3a:ab:
                    38:54:b9:af:96:d4:ec:9f:99:ec:0d:b4:19:e3:3b:
                    61:e0:1f:aa:b8:f1:15:03:f6:63:68:f9:7c:d5:6e:
                    70:fb:66:e5:88:61:bb:98:51:e3:83:06:e1:32:37:
                    06:01:ae:e7:74:79:81:91:15:3f:a2:fe:f5:91:03:
                    a3:e9:39:32:bb:ad:39:39:00:f2:cf:b3:71:d5:68:
                    7f:36:f8:71:01:14:d0:5c:a1:03:53:ab:3a:80:03:
                    46:8e:eb:22:3c:8d:65:23:e9:45:23:41:5d:09:13:
                    83:93:b8:ae:d5:02:b6:60:e7:4d:45:1e:ce:f5:b4:
                    8a:b5:0b:dd:ec:f6:7b:9c:27:6a:f1:51:a7:c1:8d:
                    fd:2a:9f:88:96:26:0f:b9:ca:83:01:a4:cc:43:5e:
                    91:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:18:91:8B:66:09:29:B5:A5:63:CD:8F:50:E0:32:D0:D5:DF:2B:8B
            X509v3 Authority Key Identifier:
                keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:e7:91:52:64:7c:3a:41:25:1a:31:24:38:4a:2c:2c:b7:
         40:f7:63:25:85:77:49:84:3e:ff:ed:01:6d:2f:b0:b0:79:e5:
         31:69:5b:61:1e:7f:d3:ab:d4:63:43:12:3b:79:23:4d:b1:25:
         18:dc:34:c4:27:83:11:5b:39:8b:dd:1f:06:19:c3:14:3c:f5:
         f9:a5:65:b5:e9:e4:59:42:4e:a9:a8:1b:13:87:c7:53:45:cb:
         67:39:9c:30:94:b1:09:4c:73:18:69:f5:eb:1b:75:99:3f:4d:
         8b:53:78:b9:d1:1a:e5:35:bd:41:bc:23:59:cd:20:a5:c7:71:
         55:bb:f9:6a:0a:18:f5:ff:9f:a0:52:6c:d2:8c:e5:4e:6b:35:
         d2:a0:2a:f0:d8:b4:01:20:c5:22:50:b8:d3:7e:d6:5d:66:57:
         9c:5e:e7:73:85:fb:90:fb:ff:08:0c:ae:e1:e6:b3:9e:48:06:
         d3:c7:78:8c:c0:03:ef:04:4a:8a:78:53:75:96:66:e9:88:3f:
         7a:d5:4a:0b:d2:91:bf:49:18:da:d6:d2:b9:d6:92:eb:c9:b3:
         54:84:39:ca:b7:16:99:36:33:f3:91:39:ef:23:b6:a0:49:65:
         16:5f:a6:4a:d3:32:1c:25:0a:43:29:e4:93:c3:a5:2f:a0:5c:
         8a:11:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----