Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
File:                     Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft (raw, json)
Hash identifier:          tpzyEFZ4n6crqB5RZODYcSXtSUNkZ9coChZwna38NL8=
Subject key identifier:   E9:23:E3:67:39:13:9F:02:98:BB:19:36:3B:F7:C6:1C:0C:A0:B3:FB
Authority key identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
Certificate issuer:       /CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Certificate serial:       01962FAB59F106B2DFCA9223D473C3384B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
Manifest number:          0241
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl (hash: gRI4lwC+VhWagC3GrX1ToH4PNs0WfmvtPaVnfmdUv4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:59:f1:06:b2:df:ca:92:23:d4:73:c3:38:4b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=e923e36739139f0298bb19363bf7c61c0ca0b3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ea:47:d8:9b:b4:f2:11:5e:aa:00:9d:d6:76:
                    7c:8c:23:bc:0f:53:d2:f3:4a:da:55:02:5b:43:6a:
                    89:03:99:b1:98:11:bf:9b:63:93:b9:3d:f4:af:22:
                    b2:61:ac:b4:5c:10:fa:62:7d:5a:30:4f:6e:bc:3e:
                    33:ea:a4:8a:f5:15:69:10:26:d3:f3:44:01:29:c1:
                    e4:9a:9a:cf:23:62:d8:7e:04:a8:df:0a:f3:89:cc:
                    09:3b:7c:7f:bb:7f:92:e6:a3:ae:ac:f8:cf:a3:ab:
                    1f:32:5f:b8:6e:d8:ff:29:2e:31:2a:b6:0b:78:0c:
                    2c:9b:77:a6:94:0b:9f:ff:ba:cb:b1:3b:ed:95:14:
                    cc:b2:1c:39:e4:fb:cd:ce:c6:4a:a3:98:77:f3:12:
                    d1:72:dc:fd:2f:ec:01:bb:66:ad:ba:b1:c2:29:ee:
                    4e:d2:46:16:24:ed:1d:20:7a:5e:9e:b0:7c:17:20:
                    f7:74:ad:81:49:ef:c6:df:7c:51:7b:13:ef:3d:8d:
                    c3:20:51:bf:08:74:83:d7:ec:73:b4:b3:db:08:77:
                    50:5b:0c:1a:0d:ce:ef:eb:fc:c6:4f:22:f4:af:00:
                    e9:42:e5:5e:1e:ec:82:67:7b:f8:cd:34:f1:18:f5:
                    00:dd:3a:dc:59:55:71:b4:33:48:95:c5:47:03:1d:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:23:E3:67:39:13:9F:02:98:BB:19:36:3B:F7:C6:1C:0C:A0:B3:FB
            X509v3 Authority Key Identifier:
                keyid:39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b2:2c:65:1c:c1:7b:19:35:c7:61:07:27:4d:92:71:cb:32:
         ac:ad:93:b3:ea:fd:92:67:2d:3e:68:d0:4e:27:28:82:c2:cb:
         4c:3a:6b:53:b7:c2:ff:81:b8:c3:82:56:53:27:c3:43:07:16:
         0c:b7:31:e3:8c:3b:69:e3:d0:6d:5c:ee:74:c7:da:a7:41:15:
         63:7b:3a:34:12:bc:f5:00:0a:bc:ab:db:1e:82:c4:47:99:89:
         38:62:d5:86:ec:d8:a2:34:f3:98:48:01:ff:5e:3a:05:72:a3:
         cc:80:26:64:a8:49:a6:d8:27:7f:a7:ba:58:0d:f0:fc:05:5a:
         05:17:6e:8c:7b:a8:53:84:12:8f:cd:82:a2:05:e1:c1:5a:20:
         dd:0a:1c:74:82:8a:a4:52:ee:f4:18:15:a7:57:2e:cc:cd:40:
         e8:98:2d:e5:0f:78:59:b6:b7:f4:5f:4b:96:52:43:86:cb:1b:
         95:b5:37:44:90:5e:2e:02:46:4d:69:12:48:72:60:e5:3e:e0:
         b4:08:e6:77:52:b3:0f:e0:41:86:de:3a:59:e7:a8:01:3c:19:
         01:95:99:7f:20:b5:1e:a3:96:31:0d:8b:40:19:b4:c6:a8:61:
         dc:54:d5:03:25:dd:15:78:6c:bb:d8:26:75:26:0b:8e:9b:cc:
         94:a3:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----