Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File:                     CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier:          p2DrvKQ/71X1ay8TlaoEvE/XW5I/iWkAjfVdyL2VdVs=
Subject key identifier:   7C:1F:53:08:62:33:BE:89:70:40:09:08:00:B6:B8:1E:16:02:43:88
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer:       /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial:       01962F3DAC4CC02FD0729B55391BC090C12E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=)
                          2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: IaqklQFgyVQBoYTK8a2IBKQWxmV6a51uVkVtzmRQYVg=)
                          3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=)
                          4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ac:4c:c0:2f:d0:72:9b:55:39:1b:c0:90:c1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=7c1f53086233be897040090800b6b81e16024388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:72:3e:3a:5b:4d:96:c2:05:4f:61:bf:8e:
                    c2:89:37:80:d3:a9:0b:f5:77:2e:ab:c5:11:6a:c4:
                    49:97:9c:2a:32:90:a2:ba:9a:dd:ea:29:e9:e2:5e:
                    cd:9d:00:1e:a0:0e:0b:6c:de:7f:a1:f4:39:94:e0:
                    2e:ed:f1:59:f2:82:08:05:ed:c9:5c:d4:58:6a:6d:
                    39:f5:0e:1b:fd:aa:25:13:60:dd:1b:10:0f:01:c0:
                    0c:1a:3a:33:03:c4:4a:73:4b:fa:99:2e:2d:ba:72:
                    3b:9c:d1:78:12:8a:86:40:7c:33:51:56:3f:ca:3f:
                    1d:21:80:a0:1e:bb:40:17:41:25:1b:f5:1c:ef:64:
                    64:37:95:e1:53:2c:ae:e1:7c:b9:2c:51:0b:c8:05:
                    94:61:c7:eb:17:42:22:e4:a5:62:8d:6c:67:f3:30:
                    cc:e5:31:39:dd:46:4c:9b:3e:d0:bb:c5:e4:0e:f5:
                    7e:cd:d4:9c:0a:14:cc:c5:28:e5:b5:18:76:9b:be:
                    bf:e1:1d:cf:2f:c7:3b:bc:e8:a2:51:cc:f9:e6:c7:
                    93:8f:7a:9b:16:8f:08:19:be:86:2f:23:90:12:6d:
                    2d:d8:bd:eb:55:a1:da:54:2f:87:7e:01:02:bf:69:
                    97:2b:1b:ea:68:d4:85:fe:76:fc:af:9a:fc:bf:ea:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1F:53:08:62:33:BE:89:70:40:09:08:00:B6:B8:1E:16:02:43:88
            X509v3 Authority Key Identifier:
                keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4f:e8:8a:ba:2a:4e:ab:8f:27:10:de:72:07:89:aa:46:57:
         d1:af:d2:f8:3d:94:72:1e:6b:de:ef:c9:69:86:4e:53:c4:06:
         4a:18:3f:2e:af:e4:28:ca:c8:97:4e:4b:62:f1:06:70:34:e0:
         fc:c6:8c:41:1a:e0:11:e4:98:4f:93:d1:9f:c5:48:23:f9:67:
         ae:61:de:cc:a8:8e:d8:22:ef:92:2d:21:4d:ad:bc:74:0b:3d:
         54:16:32:ea:fe:83:50:4a:15:65:28:1c:13:44:a2:83:ab:ea:
         ce:4b:80:70:61:f4:ce:7f:a8:60:f6:4f:9c:c1:14:5d:04:45:
         ad:07:3a:ba:20:3f:da:6d:e5:69:8b:30:1b:57:91:a8:b4:0e:
         fa:2c:55:35:3b:0d:49:f9:d1:75:3f:10:64:15:5f:a0:e7:b7:
         72:4e:a7:da:f7:1b:d9:9c:74:2b:b4:4b:8a:34:a8:0b:bc:a5:
         fe:8d:58:84:f3:c8:bc:21:11:51:5e:c6:ca:e1:ef:21:f1:19:
         80:7d:98:2a:9e:c1:e5:7f:63:66:68:31:ee:46:c3:13:04:4b:
         20:70:ff:3b:9a:5d:1e:69:e3:a4:04:f0:a2:83:72:be:36:53:
         2f:d8:cd:e0:16:31:df:07:c6:5c:2a:51:aa:eb:33:ea:a7:13:
         c6:bc:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----