Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File:                     AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier:          JlDfPzwGSYoK8WKplVB+LiWh8nV1pdfAbL7cQ4b+3CE=
Subject key identifier:   91:B4:89:45:D8:7F:F3:38:18:1F:E7:18:8C:2A:66:C1:4F:7C:7E:0A
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer:       /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial:       01962E990BA1A9437B03818E2F72D6A106A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number:          0BFC
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: +oxM/D+RXPrxf1oVTaa/NuRZSm3f+gkckxRrAU5dxWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0b:a1:a9:43:7b:03:81:8e:2f:72:d6:a1:06:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=91b48945d87ff338181fe7188c2a66c14f7c7e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:d8:1a:5e:08:85:0e:7f:fb:ec:10:fe:9f:
                    57:6d:ef:da:b2:12:98:b5:b5:f0:11:d2:9f:c3:1d:
                    06:eb:99:ea:c7:96:dd:96:52:4d:e8:58:29:6b:8f:
                    7b:60:02:11:00:2b:f8:c4:1e:de:b5:1c:10:c5:61:
                    77:a6:61:5e:97:d5:c9:f9:dc:15:a8:f5:d0:b9:ba:
                    dd:b8:2e:22:50:2a:fb:c6:91:63:2d:c6:4d:3e:a0:
                    62:89:df:d6:96:fa:62:a5:b2:54:bc:e4:40:38:9d:
                    fa:13:a2:96:ce:ab:b6:8e:34:3e:56:de:1c:3d:e9:
                    8b:31:f9:77:12:53:f8:b9:65:1f:5b:d2:61:c9:37:
                    88:36:b5:ef:91:81:38:3a:b5:d8:c0:07:43:4c:74:
                    d3:ce:d0:0d:86:7d:95:ed:b2:62:ee:dc:56:be:5a:
                    80:8a:9c:cc:7a:ac:bf:2a:67:24:1e:88:b8:d1:cb:
                    0e:9f:44:e8:86:1c:c7:1d:3e:c4:78:33:fa:e6:e5:
                    93:19:6e:2c:01:ab:33:6a:82:11:10:74:cf:ad:30:
                    de:34:10:e6:d0:80:ef:de:3a:d8:31:c1:7b:24:eb:
                    5c:4c:18:6a:23:88:a6:b2:31:26:38:f2:6a:ff:bc:
                    82:e8:cb:df:fd:9e:cf:4b:63:a9:ac:ba:98:17:04:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B4:89:45:D8:7F:F3:38:18:1F:E7:18:8C:2A:66:C1:4F:7C:7E:0A
            X509v3 Authority Key Identifier:
                keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:50:70:4b:76:99:42:4f:6c:08:6c:41:ed:87:ce:21:a6:
         44:66:7b:17:08:30:9d:42:bf:78:55:d6:4c:1e:f8:f0:e1:8f:
         3d:c5:ea:1e:69:78:aa:dc:a7:a1:e9:27:ec:8a:3c:98:b5:15:
         e2:2a:21:06:7a:2f:62:2b:ff:1d:fd:e3:a9:e6:93:ba:1a:37:
         f5:ee:5e:01:59:f7:fa:41:22:75:1d:86:ff:a0:2a:38:96:f4:
         93:3d:23:12:e9:4e:d3:ca:c3:7f:4a:53:1f:24:51:17:e9:9f:
         25:f1:ee:cb:e4:6f:70:98:e3:1d:2d:88:06:68:80:91:9d:e2:
         db:d8:e0:10:d7:08:98:20:e1:d5:1b:e4:33:4e:8e:26:a8:ae:
         c1:93:c4:95:3c:96:04:34:db:b4:2b:05:db:0f:e3:05:71:1e:
         c2:c0:3a:42:2d:e4:36:78:30:2b:5d:29:1a:58:3f:0a:b6:f3:
         b2:cb:8c:7d:ea:3d:e0:c3:f0:87:50:a7:d7:6c:ec:5f:fc:fa:
         fd:72:48:d4:04:bd:7f:bd:a6:ce:3e:f0:a4:1e:ca:7e:29:80:
         15:cc:1e:0f:cc:9b:20:da:85:ab:c1:eb:6f:de:f2:4a:eb:18:
         50:b3:36:f4:b1:54:2f:3c:29:82:a8:05:14:cd:e0:fb:1f:a0:
         e3:53:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----