Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File:                     CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier:          mJpdk7FM1YpkbjQD21WtU3QyzSrh+J9IHVy1+xQKWqg=
Subject key identifier:   CA:9F:40:2A:58:2E:60:57:95:B1:5F:4D:A9:11:D9:6E:D1:85:C9:7B
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer:       /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial:       01962DF3EC1AB7E05F0E7907DC6E00D78E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number:          08D2
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: 3gv46gHglxJhaDSSLt2nKWOH0ZomP0RyfIPIs0/Hx/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ec:1a:b7:e0:5f:0e:79:07:dc:6e:00:d7:8e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=ca9f402a582e605795b15f4da911d96ed185c97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:66:e8:f5:a6:e0:e6:e0:32:84:45:cc:bd:
                    f5:07:8e:13:f1:41:21:be:d1:25:fb:6a:20:8f:13:
                    03:f5:4c:c4:ed:d7:8a:bb:3c:c5:cb:65:9a:66:2d:
                    0b:0c:78:ca:4e:20:76:c5:2d:c4:d5:5f:1c:51:97:
                    a1:55:77:93:0c:0a:7b:f1:c4:03:b3:6e:77:7a:9b:
                    42:18:29:66:e0:40:38:bb:45:72:80:47:89:59:7f:
                    7d:1e:a4:43:96:3a:dd:18:83:b6:51:9a:11:07:90:
                    15:81:c3:08:03:0f:f2:57:36:bf:31:e1:ba:23:46:
                    ea:68:e4:68:18:c2:89:e1:ec:22:97:49:4d:60:97:
                    93:b5:34:9f:27:f9:4c:02:60:c9:0b:e9:3b:ea:93:
                    ae:94:a5:89:9a:f7:b4:ac:2f:9b:81:1b:78:aa:1b:
                    08:b6:ed:92:f0:89:8e:19:1c:20:36:53:22:ca:2c:
                    27:52:e7:70:22:63:4a:35:83:8a:02:7f:48:2e:5d:
                    37:22:84:b7:ed:dc:19:82:58:b2:f8:a7:a9:45:23:
                    34:4a:83:cb:8b:15:32:21:28:f4:2f:1d:9d:5c:e9:
                    fb:58:44:78:73:a2:d2:b9:52:41:fc:3d:12:4b:f1:
                    de:d2:94:f6:66:67:19:09:3c:e1:72:a0:54:a6:76:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9F:40:2A:58:2E:60:57:95:B1:5F:4D:A9:11:D9:6E:D1:85:C9:7B
            X509v3 Authority Key Identifier:
                keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6d:fe:e1:ab:be:b0:fc:85:80:b5:db:43:48:3b:14:94:1d:
         6b:6c:64:ea:79:fd:fc:82:ac:43:cd:6e:32:31:93:eb:2c:98:
         3b:95:3f:f5:bb:06:9a:95:20:75:54:c6:c3:a7:3b:36:7b:16:
         7d:b6:67:82:67:84:76:f6:66:fa:ad:02:89:95:84:81:37:cf:
         d2:49:8b:f8:a0:e8:45:27:8c:f0:88:2a:1a:e0:5c:08:a9:a2:
         78:6c:76:7c:65:f1:c2:9e:5a:a5:bd:9a:3f:be:11:b9:bb:42:
         ab:71:b5:3d:0e:da:19:b3:5e:0b:e7:7f:da:51:53:6b:d7:b4:
         5d:b5:a0:88:cf:e6:81:f3:54:80:d0:94:4c:5e:22:54:5f:63:
         4d:e2:6b:21:c7:b7:36:d8:fa:86:4f:96:0c:25:db:1b:e2:90:
         16:e0:24:b0:ed:d6:80:ff:c8:04:55:da:d6:f8:59:a4:6e:2d:
         17:8c:bd:a3:ef:b2:2b:56:da:72:fa:3d:ba:35:5b:89:56:ff:
         94:23:00:75:71:20:f2:b3:5f:fc:d7:92:57:8c:39:23:ac:9f:
         7e:f1:cf:9a:1c:16:71:5c:10:33:89:b8:cd:5b:52:15:40:f0:
         21:17:f7:1b:c2:7e:75:eb:04:9a:93:23:36:0b:f0:8a:80:11:
         14:b7:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----