Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
File:                     ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json)
Hash identifier:          VihbkhkfXgce/iH+UBZUXLqrtgaS7YTTWcX8Lo26asw=
Subject key identifier:   9C:1E:8D:B4:77:F0:0F:DC:F3:28:BB:FE:7B:F0:7C:A8:4C:B6:85:06
Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
Certificate issuer:       /CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Certificate serial:       01962DF42B1EA0F7BBCC709702AA34E5A70C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: lwHYg53QMbw93sry9akOndV9lP0b6G8Iwhn2uzFCN4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2b:1e:a0:f7:bb:cc:70:97:02:aa:34:e5:a7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=9c1e8db477f00fdcf328bbfe7bf07ca84cb68506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:96:29:0c:c1:57:91:f3:50:ee:4b:84:42:
                    f6:72:bb:d5:fe:79:59:32:21:a2:c0:c1:fa:d4:f2:
                    09:d5:bd:ea:cb:99:cb:df:e1:06:ca:96:54:ce:30:
                    20:fd:00:5a:90:f2:7a:9b:6e:c8:d9:6b:9b:78:e5:
                    69:57:9d:16:99:bc:fb:c6:45:55:f7:a3:73:97:ba:
                    31:2f:c6:cd:9f:04:ef:15:69:f6:f7:77:e0:fb:4c:
                    fb:28:92:50:35:01:53:b1:a8:b0:17:62:94:4e:9d:
                    ca:04:c1:35:cb:b1:2b:0a:c0:18:0b:33:0e:4f:70:
                    ef:32:b4:49:54:a2:83:9b:d1:ba:45:b5:4c:76:e2:
                    cd:f8:4f:21:68:0d:bd:9b:63:12:60:a2:1b:ec:87:
                    ae:a6:a7:37:7c:80:2b:b0:de:82:77:11:96:99:e1:
                    5e:9a:92:42:cc:94:36:34:83:8f:cf:8e:eb:f9:20:
                    a4:4a:83:3f:f8:3c:cd:2c:a7:32:2c:e8:ff:61:ac:
                    70:90:d3:2a:3d:15:e2:a4:81:74:d4:f8:dc:d3:1c:
                    65:54:2e:75:ef:7d:f2:32:cd:c9:9a:c9:a5:24:cc:
                    81:0b:d9:b2:b2:98:40:44:94:e3:ab:b4:07:38:e4:
                    ff:79:3f:de:b6:f2:2f:7b:78:41:d6:c7:be:a6:94:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:8D:B4:77:F0:0F:DC:F3:28:BB:FE:7B:F0:7C:A8:4C:B6:85:06
            X509v3 Authority Key Identifier:
                keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:0e:c2:98:79:af:97:71:05:23:b7:1e:1c:4f:53:0d:9c:
         57:ba:1a:e4:38:cb:25:03:0f:47:db:da:a7:ef:29:3d:5c:24:
         b1:42:f4:7f:fa:d0:08:e8:b4:7b:bc:df:83:98:44:e1:ea:ca:
         5a:1d:e2:1c:79:16:60:ab:71:78:10:5f:34:cd:bc:0d:76:93:
         7d:94:78:a3:ac:08:cc:8d:d1:c3:98:96:98:18:57:63:45:77:
         52:4c:df:5c:e3:6a:b0:57:b5:59:03:62:4d:1c:14:d1:34:6b:
         1e:89:de:8c:80:d7:df:2c:61:d5:23:cf:68:ab:2d:c6:15:86:
         44:cf:b0:02:6e:d4:6d:f5:73:b3:81:f8:31:5f:66:eb:a5:54:
         59:46:d2:c1:55:29:12:88:a8:b3:40:38:95:69:f9:dc:70:1d:
         97:0d:fa:bf:f8:99:85:39:a0:06:27:c8:dc:6b:82:14:bb:74:
         bc:16:55:98:ac:48:a3:56:91:93:38:6b:86:53:d7:70:5b:69:
         01:5e:76:0f:5c:8d:5e:c7:74:b3:6d:37:28:5c:43:6b:9b:60:
         68:bf:33:b5:31:4d:52:7a:d6:34:3e:e8:3b:0d:43:4e:1a:15:
         44:55:09:94:9c:39:b8:b6:a2:b0:9d:a5:64:23:92:13:84:cc:
         d5:5d:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----