Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File:                     CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier:          jg/NXBBupeIBsIxnpwc4CZFOB++NzKTfVX+tOd77O/U=
Subject key identifier:   83:ED:2D:1B:ED:22:19:1D:32:68:BF:3D:17:AF:93:EB:82:17:01:30
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer:       /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial:       01962ECF6186B2A78982FC9E2B98FC17721B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number:          02E6
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: GyRs3FqmrEzkTozlde+3gZXeWsa2h658EJ7Uc7s//eo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:61:86:b2:a7:89:82:fc:9e:2b:98:fc:17:72:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=83ed2d1bed22191d3268bf3d17af93eb82170130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:3c:b5:43:50:7a:5b:36:27:87:b4:d8:b3:
                    41:85:9f:57:02:f5:59:2f:80:8b:7b:34:06:47:cc:
                    8f:8d:94:4b:9f:f4:0f:53:9f:96:f3:f3:b2:bd:81:
                    9d:ab:9c:26:f6:67:c3:3e:2e:f8:2a:cc:0b:50:af:
                    89:5e:e7:71:d1:7b:17:76:fe:bb:e3:7d:4b:e4:a8:
                    b7:29:12:08:bb:cc:de:34:ae:44:80:5c:a2:2f:04:
                    a2:f5:01:6f:2e:34:c1:e8:71:d7:fc:00:a8:e2:a2:
                    0d:95:a8:87:54:fc:b8:cc:e0:fc:be:a8:92:4e:ef:
                    7f:41:5d:a6:95:fc:f4:b9:24:e2:95:01:8d:7a:01:
                    4a:e5:d1:51:35:ef:f0:0d:bf:a7:72:70:84:9f:9b:
                    d6:57:f4:92:07:ca:71:df:ef:6e:66:81:11:d3:64:
                    12:dd:3b:4e:ef:39:e2:e9:92:0d:20:97:d3:48:2a:
                    3f:b7:91:bf:1b:49:cb:c9:e0:71:63:0e:5c:c9:f2:
                    35:1e:53:87:bf:e4:8b:ff:ca:7f:f3:ee:de:f6:16:
                    05:3a:c7:83:1d:fc:02:f3:a5:66:44:0d:c1:f3:cf:
                    35:d3:f9:47:53:7f:7a:bd:c9:b5:1e:c6:0f:09:46:
                    59:69:04:73:e2:04:94:c0:3f:46:9c:45:4b:df:a6:
                    e2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:ED:2D:1B:ED:22:19:1D:32:68:BF:3D:17:AF:93:EB:82:17:01:30
            X509v3 Authority Key Identifier:
                keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:53:b8:b3:c7:43:4b:cc:1d:39:6c:e1:7d:90:a9:42:91:b9:
         ff:a9:ef:33:58:88:aa:a8:90:d0:95:97:21:0e:76:c4:38:a3:
         d9:e6:ee:ed:e3:69:f9:ab:9e:57:63:cb:d6:35:a8:d8:3e:61:
         b2:5c:9a:38:1a:77:7a:4a:99:f2:54:03:01:ce:5b:1b:10:5d:
         91:7d:f6:1c:36:69:de:7c:e5:55:c9:9b:ba:1d:34:83:d8:2b:
         f5:b0:aa:51:ff:e7:ed:8c:14:60:8e:12:f4:6b:aa:57:dd:7b:
         04:76:db:da:ab:20:d0:6b:dd:6f:aa:0a:27:7b:4a:62:ce:b8:
         b0:b5:b1:68:0b:19:41:e7:f7:18:71:d6:f0:c7:ad:2b:37:8b:
         59:dc:a0:f8:6c:d4:f2:12:1b:d3:7c:eb:4a:f3:a3:4e:f6:35:
         5a:d1:8a:71:a4:3b:06:9a:34:4b:73:52:17:cd:f8:d9:07:95:
         1e:35:6c:9f:3f:0c:a3:27:6c:67:91:64:40:80:4e:b4:8b:f4:
         bc:83:78:68:ba:7f:56:f2:a3:84:0a:59:b4:89:e2:e7:d6:07:
         36:de:e9:5f:17:0f:4f:68:24:94:7a:ea:bd:6e:6b:e6:73:8d:
         85:74:a4:1d:f1:d8:3a:0f:c4:be:a1:38:6e:ea:3b:5a:a2:7f:
         fa:51:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----