Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File:                     oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier:          oyb0TB0CKbqUT+h5jTNqPCPpJ34WP43Gc1MORp4lwBs=
Subject key identifier:   53:4C:1B:CF:38:16:A4:31:C7:5A:4D:E3:91:B9:CF:CF:96:87:CB:B0
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer:       /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial:       01962E99BC56239D3A9E92008DE94087EC3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: VVqyO1Xw9WlcCFoVtID/sMyAyPbdGAd9uSZt6KM/w10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bc:56:23:9d:3a:9e:92:00:8d:e9:40:87:ec:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=534c1bcf3816a431c75a4de391b9cfcf9687cbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:ec:dc:f1:01:fa:b8:e4:c9:6d:7d:b8:ca:
                    7b:dc:81:31:a9:70:cb:ed:25:3d:95:70:7b:a1:4f:
                    b6:19:08:35:4f:2c:fb:da:a4:2a:04:c5:be:95:7f:
                    e7:03:19:af:a3:c2:3f:0f:3b:b7:29:76:30:d3:59:
                    3a:70:98:41:ec:5d:64:47:a7:a5:46:0e:60:47:dc:
                    cc:a3:ca:ee:7d:e1:c1:ef:75:2d:09:46:81:cb:aa:
                    18:51:c7:4b:27:ab:33:20:e1:db:de:73:30:8f:00:
                    66:4b:11:de:fd:b2:42:b8:87:f1:0f:40:e9:f0:21:
                    94:84:41:ab:49:a5:a2:f1:3d:20:a5:7c:e4:99:3e:
                    ff:06:de:5a:aa:d1:46:95:d2:a7:b3:cc:2a:4d:6e:
                    9b:d2:85:c5:72:97:e3:5b:f4:76:d6:59:48:77:18:
                    fe:d6:c5:f0:b1:27:20:71:3c:25:9e:69:11:a3:80:
                    fd:79:c9:cd:20:fb:a9:ef:2b:af:38:7f:d0:d6:26:
                    e0:a0:2e:d8:37:e4:9a:d4:c4:05:28:4b:e0:ba:c4:
                    70:71:45:8e:e4:85:3f:47:dd:e3:0f:d4:a3:ae:d6:
                    da:fd:96:ae:0c:21:d4:64:81:82:5e:34:ca:3c:70:
                    9c:ca:7a:52:13:c8:f7:d4:4d:bd:0b:a0:ef:62:f2:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4C:1B:CF:38:16:A4:31:C7:5A:4D:E3:91:B9:CF:CF:96:87:CB:B0
            X509v3 Authority Key Identifier:
                keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:4f:51:58:04:f1:4b:e0:44:c0:d4:8c:8d:7f:0e:2e:9b:
         63:3e:68:5d:ff:63:a2:5d:4c:3c:68:d3:83:d7:58:4a:3c:05:
         99:cb:29:cc:fd:15:01:9e:00:52:e6:9c:6c:04:6d:ed:8b:22:
         38:ca:36:e6:42:40:be:44:e9:cc:ff:02:47:92:5e:ee:0c:05:
         ba:6c:59:28:33:76:8b:48:ab:6a:91:5c:71:32:01:75:48:4b:
         1b:24:4b:a2:93:80:32:d7:3f:20:69:20:2a:9d:87:2b:dd:42:
         7e:26:c8:cc:e4:36:87:bb:46:de:82:27:ed:a0:bf:36:74:78:
         65:45:da:d1:2f:47:91:99:bd:e1:eb:9d:da:2e:09:d3:a9:70:
         b4:74:df:ee:4e:78:a3:f3:1f:56:6c:f2:da:29:19:46:bc:88:
         70:53:ca:74:bf:d7:70:55:8b:72:d4:3e:86:6e:06:5d:c0:4e:
         09:22:23:df:c1:fe:cf:32:1a:b0:0a:dd:bf:2a:01:ee:6d:53:
         7a:6a:9e:8d:0b:6d:7b:81:ad:9f:d1:91:4f:49:72:31:04:ed:
         df:42:6c:f2:88:cd:fd:8a:02:c0:31:b3:01:2f:25:cc:bc:b0:
         4f:f7:bd:c7:ec:ad:7d:c0:25:0f:19:be:a1:1b:88:cc:5a:91:
         16:dd:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----