Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          lqNJiud07tnBsPq3u5S4IqFTeiIH5ReIC2SqIxdBN6k=
Subject key identifier:   2D:CD:A6:AB:60:ED:8D:D0:3D:57:F0:90:68:3F:DC:18:79:36:4A:14
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       01962FAB75DF4E162406ADBCB45AE59433CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          14BB
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: cIw6UzlPrRqYGbbaG+RDYi/WBoc2J4WFzFesm14IdW4=)
                          2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:75:df:4e:16:24:06:ad:bc:b4:5a:e5:94:33:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=2dcda6ab60ed8dd03d57f090683fdc1879364a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:94:01:1a:84:b5:c7:e5:4f:a8:32:d2:fd:
                    bf:7b:57:b3:cb:27:03:3b:57:79:fc:f8:5b:7a:7c:
                    70:ae:ea:f2:79:aa:bf:4e:db:8e:59:37:aa:5c:95:
                    10:9e:86:3e:f2:64:24:f4:40:6f:e7:8f:ba:78:ca:
                    0b:ee:01:bb:39:bf:ac:2c:c1:65:bc:00:02:c0:d1:
                    dc:e5:fa:1a:20:d2:81:11:76:0f:0a:b8:17:00:f7:
                    14:c9:2b:b0:11:3c:d1:ba:ef:f8:23:d8:d0:9a:a8:
                    bd:55:42:9b:35:39:d9:de:1e:9e:ba:d0:70:b8:bb:
                    b6:5e:be:1a:7a:5a:7e:17:50:ab:f9:80:6b:b1:4f:
                    78:70:75:c6:dd:76:9a:e0:82:be:69:a7:c9:b7:cb:
                    63:4c:97:2e:39:b0:80:1d:61:94:eb:e9:40:46:f9:
                    53:49:3e:15:54:95:f6:58:6c:6a:f2:95:57:97:d0:
                    dd:05:83:7a:f8:72:12:0b:d2:2c:04:f2:0a:2a:fd:
                    85:09:72:00:ac:0e:0b:57:cf:bf:8d:04:d9:23:4f:
                    70:cf:8a:36:af:23:c0:d0:5b:4f:ad:77:21:d0:81:
                    ca:9a:0d:3a:75:fa:c9:17:06:f4:3d:bd:71:37:fc:
                    cf:5c:f6:93:79:ee:0a:ba:ce:e7:9b:e2:94:d4:8e:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CD:A6:AB:60:ED:8D:D0:3D:57:F0:90:68:3F:DC:18:79:36:4A:14
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:60:3e:16:3f:09:a6:86:ba:5c:16:d3:f3:73:78:89:38:1b:
         79:35:b9:2b:bd:88:7a:50:a6:de:8a:c0:ea:9f:e2:00:13:75:
         31:20:8b:05:4b:20:ff:8d:ce:35:72:c8:63:55:30:11:c2:d4:
         0e:e2:ca:f7:51:5c:64:1c:a5:10:f8:3d:7e:4a:41:d9:57:a0:
         07:55:6c:f7:52:f7:54:7c:80:c2:30:62:6b:fe:ec:23:88:a0:
         a6:43:05:d5:14:05:f9:18:71:58:16:6e:cb:2b:11:5b:9f:8a:
         78:92:94:8e:8c:ad:01:27:43:60:4a:67:ab:ec:bc:1a:38:2a:
         6b:b9:3a:03:00:94:0a:b7:01:e7:82:37:e9:b3:0b:de:c2:a8:
         ab:cf:b5:a9:bc:2c:6e:45:d8:67:7e:fb:19:83:a5:cc:c5:17:
         e6:71:44:60:b2:43:e4:aa:11:ba:66:89:e3:1a:2a:20:7f:7b:
         66:cb:a6:71:ed:20:2b:e5:c3:13:1b:4e:d4:26:d1:e3:6e:78:
         c8:70:68:22:09:1a:d0:c2:c5:48:f5:f1:92:63:c5:4f:48:82:
         56:bd:22:c7:bb:ef:3d:24:17:a7:37:7b:17:bb:f0:67:8e:ce:
         7e:16:7f:0e:6a:53:87:50:4c:3c:f9:e7:16:0e:ad:f8:f8:0f:
         fd:6c:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----