Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
File:                     aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft (raw, json)
Hash identifier:          nRkh+qj4vCwtepu8VRHLHinK1Ub2t5oqzlDM9tJrG9Q=
Subject key identifier:   E8:18:9E:30:D6:83:40:18:C1:1F:34:F0:37:CE:31:C8:ED:07:63:83
Authority key identifier: 68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
Certificate issuer:       /CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Certificate serial:       01962E99350AE026CDAACE6AA2CA019D5391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
Manifest number:          14CE
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl (hash: HR59XKp7vcYSSbUFuXqKSzoh+8HaO22WwHkFLnKfFwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:35:0a:e0:26:cd:aa:ce:6a:a2:ca:01:9d:53:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=e8189e30d6834018c11f34f037ce31c8ed076383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:15:5a:b7:6d:78:b6:1a:68:1d:a7:80:38:
                    d7:2d:38:9f:7c:af:fb:2b:84:b7:ea:0f:a2:45:30:
                    58:aa:82:e0:a3:a5:17:30:dc:f2:e4:68:83:0d:53:
                    34:86:51:15:17:bb:e2:34:05:56:9b:2d:98:94:cd:
                    11:94:0b:e9:64:d7:d6:3e:db:ba:da:64:3d:8e:19:
                    e9:4b:d5:24:9d:5c:33:99:dd:ef:9b:7b:2e:c3:2f:
                    5e:fa:d9:ce:c7:20:55:bb:56:42:b4:e8:10:a3:28:
                    d9:16:bd:8e:ca:99:f2:55:74:8e:a7:83:c1:b4:1a:
                    44:ec:7b:e4:cb:ad:57:5a:a8:38:52:36:7b:1c:cc:
                    c9:bb:e8:1c:38:69:08:05:af:cb:b6:10:dc:a4:7c:
                    62:1e:9b:a3:11:69:69:63:b6:e6:b4:8f:af:ce:0e:
                    83:61:86:7c:e2:12:23:db:b0:ac:14:31:65:b6:7d:
                    8e:fc:22:fd:f1:20:d7:d4:58:eb:cc:37:4d:7e:43:
                    ca:aa:ac:9e:ff:05:40:2f:3b:62:c5:11:2c:60:b4:
                    98:b4:79:70:27:61:60:ed:92:14:23:38:2a:61:79:
                    4c:b6:cf:73:14:e6:d7:9c:4a:99:02:30:f4:cb:bb:
                    32:ef:5e:9a:00:d1:0e:38:92:b8:06:fe:fe:b2:92:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:18:9E:30:D6:83:40:18:C1:1F:34:F0:37:CE:31:C8:ED:07:63:83
            X509v3 Authority Key Identifier:
                keyid:68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:09:5d:2b:ef:09:5d:fb:26:92:f3:9a:07:91:01:85:64:cb:
         65:3a:a7:ee:0a:c3:10:2e:2a:00:69:c5:43:44:d8:8e:bb:2f:
         a1:6f:b2:69:a0:8b:dd:25:11:7c:99:86:6e:cf:77:c2:b2:27:
         a0:dc:80:c8:5b:e1:f0:55:d5:22:e2:80:96:1b:65:ed:3a:c2:
         77:27:b5:4f:75:c9:a6:73:0a:11:a5:dc:1b:c8:db:99:e1:7f:
         e0:f0:49:01:8c:19:d6:66:d8:53:a6:51:fa:63:0b:36:1f:08:
         87:3a:9d:14:68:69:27:f9:97:e6:12:44:1d:ca:e7:af:f1:69:
         6e:38:87:08:c2:b4:ba:0c:2e:22:03:df:84:ee:80:4a:7f:42:
         d0:76:ef:9c:0b:f2:a2:c5:f4:f8:1d:44:c5:0a:5b:81:0b:f8:
         b1:fc:a2:29:4d:f1:50:cc:7e:fc:c2:f0:e5:f5:17:26:be:a4:
         71:af:55:9d:b8:14:91:96:69:96:4e:d6:29:d9:22:8a:66:14:
         b2:d9:fe:63:1b:dd:33:3b:d5:34:39:ea:84:6e:5c:7e:45:14:
         aa:7e:a0:23:80:72:55:f5:03:c0:73:8d:b7:26:95:ee:9f:b5:
         e4:56:75:e9:d6:7d:59:d2:d5:66:5f:b3:bd:fb:a2:da:35:ee:
         59:b6:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----