Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
File:                     oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft (raw, json)
Hash identifier:          Hy+//QhVC7CzPLK0H78UewceDQ55/kH2cLblmwdV4mI=
Subject key identifier:   C1:CC:CD:95:33:98:23:20:81:FA:E9:30:3C:A0:F2:1A:19:F5:08:DC
Authority key identifier: A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
Certificate issuer:       /CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Certificate serial:       01962DF3E5C8AFB022A011C7F105F22620A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
Manifest number:          0409
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl (hash: bHuVft4RqxtkXpAr/iSlnzoA6fHGnLroUJ/8ZB6/A+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e5:c8:af:b0:22:a0:11:c7:f1:05:f2:26:20:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=c1cccd953398232081fae9303ca0f21a19f508dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:f0:df:1e:38:6a:8c:75:ef:5c:9c:e0:35:
                    74:79:2e:29:30:43:27:23:13:75:a5:bb:14:ac:db:
                    8c:5c:2d:46:75:6b:24:1e:7d:14:ba:27:9d:53:cb:
                    07:83:73:6e:b0:a9:08:9a:b0:fd:ee:ea:c1:a0:e6:
                    2e:c5:d2:5f:a1:44:21:63:df:8c:bb:69:37:cd:52:
                    a4:04:05:7a:5b:3f:88:9e:c3:27:13:86:5f:3b:eb:
                    3c:53:b5:5e:97:c2:ba:e1:59:6b:cf:11:46:5f:8f:
                    3b:19:5b:6b:c9:b1:0a:f4:48:c1:2a:ec:c4:85:50:
                    fb:9c:a3:2a:30:62:3f:0a:ec:3a:56:c2:c4:71:7f:
                    5f:cf:67:99:fd:31:78:37:a1:0e:3d:ca:cf:31:ee:
                    8e:fa:1a:61:fe:f9:26:7d:e1:99:90:82:a3:70:97:
                    71:da:c7:48:43:c9:7f:e9:4d:2e:d1:dd:c1:30:ed:
                    0e:84:d4:d2:88:90:bf:1b:27:d7:75:09:67:5f:ff:
                    6b:76:50:b7:25:bd:37:f2:a8:27:08:a3:44:ba:50:
                    84:1d:5f:87:78:27:95:3c:6f:2c:f2:10:60:42:46:
                    e6:b6:41:18:f3:b4:8b:de:53:31:b7:9b:2e:15:f5:
                    20:c0:05:85:16:ff:23:41:15:13:24:ab:a0:31:08:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CC:CD:95:33:98:23:20:81:FA:E9:30:3C:A0:F2:1A:19:F5:08:DC
            X509v3 Authority Key Identifier:
                keyid:A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d6:7b:a1:0a:55:75:4e:b6:6c:04:04:60:c3:13:14:f0:c1:
         7a:fa:9b:7a:d2:02:32:b2:8e:6b:65:0c:f2:41:02:ee:ae:fd:
         4a:3d:94:67:af:1a:fb:1c:93:b7:62:07:a3:86:7b:81:0f:ed:
         8f:d4:e2:c7:58:92:38:8a:98:95:8a:72:1a:5c:7d:c3:22:f5:
         28:04:ac:cc:72:19:6f:39:d8:5d:04:02:ec:ea:58:60:4a:d1:
         97:84:31:db:43:8e:fc:d2:2e:b3:1f:ba:71:67:56:df:c0:a6:
         36:aa:67:2f:9e:9c:0d:18:0a:3f:9d:80:7e:79:fa:d0:a8:46:
         dc:c9:7f:a2:a2:e6:05:34:b3:58:ce:94:f2:df:10:7b:96:2b:
         8c:36:2e:1a:9b:35:90:c3:90:7f:66:c6:52:00:dd:16:2e:08:
         fe:a8:2d:1d:af:95:99:d1:7c:c4:04:c2:20:7b:fc:63:b9:73:
         96:bc:88:45:a3:a2:c6:29:6f:7a:9b:d5:71:74:f7:95:14:aa:
         8b:79:e2:6e:39:d0:de:66:8f:3b:a3:c6:32:60:1d:c7:c2:c6:
         78:5a:4f:f4:2c:15:74:82:cd:68:02:be:95:f5:63:6b:23:73:
         d5:4f:3f:a3:3c:d3:17:2d:ba:4d:ac:4a:d8:50:a6:39:36:5a:
         e8:67:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----