Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File:                     0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier:          cDxNQ8BT/4N4z9eS6R8+U0nXvC3m79/dLpPFp4uIYUQ=
Subject key identifier:   CE:5E:D9:A0:D5:C7:8E:5E:E0:BD:E7:5C:2B:8B:DB:DA:44:D5:7F:47
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer:       /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial:       01962DF406D73D96CA2A6303B0FD6280B8E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: xB+094RWsAB72Xz30LuLRzJOtxrc4SYoDnKc12sI/ZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:06:d7:3d:96:ca:2a:63:03:b0:fd:62:80:b8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=ce5ed9a0d5c78e5ee0bde75c2b8bdbda44d57f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:ac:17:ae:c7:06:c3:e1:12:12:f6:3b:03:
                    0b:3c:54:11:e1:2e:86:15:67:61:1b:cd:a9:e7:cf:
                    79:e4:b3:17:3e:69:06:fc:ab:74:2f:a4:56:92:4d:
                    1f:c0:fb:b5:0f:c8:49:dd:e7:9b:13:8d:39:b8:9c:
                    05:e5:9f:c3:aa:c6:80:39:dd:67:ba:39:3f:bd:34:
                    df:1a:4c:54:5f:54:76:4b:42:bf:db:5a:d0:76:b8:
                    10:93:af:32:4e:dd:28:ad:6c:87:c1:42:5b:91:2d:
                    7b:0c:ef:be:8f:8e:bc:9a:4c:1a:ef:aa:30:0e:f5:
                    5a:25:40:be:f3:d7:b7:ee:de:8f:17:df:aa:25:cc:
                    ee:f3:f0:04:11:f3:a7:bb:bf:9e:74:69:68:2d:f5:
                    fe:80:98:a3:57:12:e1:80:a4:eb:a7:5b:5e:aa:26:
                    7c:6b:ff:1e:06:27:14:b3:c0:07:13:cf:d0:dc:d0:
                    11:43:76:0f:46:b6:2e:e7:d8:7b:3a:3a:d7:fe:d1:
                    64:28:98:7e:44:13:98:d0:4f:31:43:f9:9d:7e:89:
                    db:08:a4:b1:30:33:9a:6a:6e:d6:1d:6d:77:ef:17:
                    3c:3a:ca:42:47:a5:61:df:9a:1a:39:39:9c:c5:d5:
                    1a:c7:4b:9f:33:80:46:5c:68:f6:43:c9:76:4b:3b:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5E:D9:A0:D5:C7:8E:5E:E0:BD:E7:5C:2B:8B:DB:DA:44:D5:7F:47
            X509v3 Authority Key Identifier:
                keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:38:b7:96:81:35:40:ac:cd:1f:01:6b:60:4f:bd:fa:01:
         5c:20:40:e9:9b:3f:8a:76:aa:41:8a:03:ad:f9:31:59:5f:2e:
         58:74:1b:47:41:cf:c8:2a:b0:da:d8:15:e7:fd:8c:a6:41:4a:
         b1:c0:d9:41:eb:de:4e:06:92:e8:9f:69:02:35:cb:7e:a4:5b:
         2e:06:11:6c:f1:50:38:41:53:c0:10:c6:d0:d3:fd:ef:d0:89:
         00:32:3d:d1:86:b6:4b:d6:dc:cc:a0:36:09:41:01:2a:1d:00:
         29:61:1d:eb:a5:3a:85:2b:c8:a4:a5:0c:e5:4d:8c:76:50:82:
         81:d3:e3:e1:14:ed:8d:ca:fa:5b:76:0f:86:27:98:eb:09:e4:
         1b:d9:32:9c:ba:15:b0:58:75:c6:cc:99:c6:80:23:e6:41:ba:
         d6:5b:58:de:de:dd:dc:9f:92:03:51:96:a4:0c:60:f4:51:10:
         e9:e7:c9:50:4e:b5:44:a4:04:b2:dd:b9:15:f1:36:40:dc:d7:
         5a:b0:a8:34:3e:e5:d0:06:35:1c:34:09:2f:83:bc:2a:09:26:
         61:f7:47:0c:4c:b5:c8:04:85:31:51:c3:27:23:09:b1:63:78:
         1e:bd:fd:e9:8a:e0:32:cc:4c:a4:13:c0:bf:90:81:5e:8d:52:
         2c:e1:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----