Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File:                     oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier:          w/8XwVBQHza23oeL0jShOOmGAHILn4gPr0umI/Oujpw=
Subject key identifier:   55:8E:A5:E2:1F:2B:44:F7:B2:25:2B:0A:02:96:0E:14:D1:65:19:60
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer:       /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial:       01962ECF991E5C435B1285218F8C722B067F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number:          01F9
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: S427ixI7Pm+lv98lWpP7mGBMVSiSQ6Ptwo28Xl+dsrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:99:1e:5c:43:5b:12:85:21:8f:8c:72:2b:06:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=558ea5e21f2b44f7b2252b0a02960e14d1651960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:69:65:73:71:0a:48:a8:eb:78:e9:b7:ba:
                    64:20:85:a9:1d:0e:32:50:39:ca:66:44:49:fa:48:
                    9e:1e:58:75:a8:75:33:5d:42:e3:a2:81:01:af:45:
                    6b:3d:c2:55:10:ed:d6:35:ba:41:6d:5c:9c:81:fd:
                    5d:11:7a:1c:5e:4f:5e:57:f7:35:90:84:23:53:1a:
                    17:4a:1c:df:74:0e:0e:62:ad:78:fc:f2:a7:26:e2:
                    80:ec:f5:02:a8:31:63:ee:42:c1:42:58:c1:ae:e5:
                    88:91:cd:f9:ca:2f:19:37:1a:a2:b6:c4:6e:6d:2d:
                    09:e2:98:4a:f1:a7:64:e1:65:18:63:f1:fa:dc:40:
                    74:0f:df:03:65:9f:97:73:a8:ec:32:7c:08:e7:0a:
                    cf:c2:b6:7d:c8:dd:99:6c:82:35:8f:4b:8c:2d:0d:
                    d0:a9:bb:b3:ec:1b:7c:be:32:94:a1:c9:c6:f5:02:
                    24:0e:6c:94:3f:eb:d2:2e:b2:d8:e0:f4:28:7b:3a:
                    41:42:f0:6b:70:8f:cc:63:43:86:a2:38:8c:60:dd:
                    ae:c9:51:bb:f7:62:6b:0b:8e:08:92:72:cb:d9:99:
                    21:a9:80:f8:9e:31:41:a3:97:74:a8:25:6c:dc:2d:
                    66:af:46:b0:7b:ef:47:86:e0:8d:ef:0c:04:cd:2d:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8E:A5:E2:1F:2B:44:F7:B2:25:2B:0A:02:96:0E:14:D1:65:19:60
            X509v3 Authority Key Identifier:
                keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0e:50:78:ea:08:f9:bb:37:7d:6b:4f:70:99:f5:d8:62:95:
         7f:38:e6:26:1a:c0:2f:9e:06:d3:34:10:64:3e:74:34:aa:68:
         39:0f:72:7b:26:db:08:0a:8e:a6:40:24:1a:47:a1:f9:cc:3d:
         2a:8f:c6:84:b4:78:1d:db:6d:aa:6b:bc:d5:8c:4a:9a:c4:ba:
         f7:bd:6a:69:16:eb:a6:fa:99:35:ac:51:b9:c0:35:d4:b1:5d:
         b2:18:65:f5:04:7c:f3:7b:54:60:61:28:14:b3:44:68:f7:ef:
         f6:a6:6d:66:a0:2a:d2:9c:dc:a9:2a:88:f1:75:66:58:9d:9d:
         73:d5:7c:98:40:bb:98:52:8d:1c:59:28:4b:69:70:58:d5:a4:
         af:04:1d:0b:b5:92:cb:6c:cd:ad:b6:bc:fa:af:dc:a1:b7:37:
         49:34:80:a5:18:ac:d2:c6:e3:50:c1:cb:ce:c4:65:e4:75:4d:
         f4:ae:ea:26:51:f1:90:3b:ed:32:de:f1:8a:ce:84:b8:60:6b:
         52:22:d3:3a:dc:21:60:c2:1b:72:1e:8b:44:c2:23:58:f7:63:
         4e:5c:c9:ae:67:77:6a:3c:8e:18:1c:58:dc:2c:22:fe:6c:1d:
         44:ff:72:c0:df:76:ab:ab:dc:4d:86:4a:f1:2f:58:27:37:b0:
         14:06:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----