Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File:                     x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier:          nO2mFLT9L8sIyWtbhtOdlguhQdDLzBq4NTFy53jgSwc=
Subject key identifier:   BC:48:6C:24:08:56:15:6F:E1:B1:23:2D:A0:C6:17:98:3B:A0:A9:1E
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer:       /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial:       01962E2AE211F5CDF3126AAE83A96DB8F828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number:          14B3
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=)
                          2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: aBFHDr3mENkPRBQNrJtD0lZdZb25pFf+WPHiMdRJ6gY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e2:11:f5:cd:f3:12:6a:ae:83:a9:6d:b8:f8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=bc486c240856156fe1b1232da0c617983ba0a91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:ad:23:13:1c:24:86:5c:9e:e2:60:ab:f8:
                    94:c6:98:1b:ff:30:6e:34:2b:16:a9:e1:88:ae:f1:
                    43:df:bb:d8:ca:ae:39:3e:e3:f4:1a:2b:52:1c:eb:
                    39:08:87:70:95:b2:fa:e8:d9:6d:e6:8e:5b:25:85:
                    a3:88:f8:56:61:28:29:3b:fe:bd:a8:18:0c:2b:bb:
                    0f:c7:8c:da:c5:52:d0:31:b3:2f:20:44:ea:ff:50:
                    d8:c0:45:93:1e:8a:b0:3c:0b:8f:01:eb:fe:4d:08:
                    3c:b7:6c:2a:4a:63:8f:17:2d:8f:05:ac:f6:12:f5:
                    be:03:d8:3c:a4:07:88:1a:e4:47:9c:2a:69:6e:5b:
                    a3:cb:b2:e7:21:81:82:c5:a4:ae:9c:4b:17:bb:6b:
                    48:5c:46:2e:4b:ec:77:7b:1b:01:5b:92:c8:93:f6:
                    57:48:3a:a5:f6:93:02:4a:0f:12:8c:7f:62:88:27:
                    b8:5e:13:95:ae:32:45:10:9c:a7:a6:e3:0e:92:77:
                    c3:ec:db:61:c6:38:e9:d4:be:5c:92:6b:f5:a9:bd:
                    5d:08:78:2d:05:d4:18:ff:88:8a:9d:fe:5e:36:35:
                    2b:d7:8b:17:81:b2:c3:f9:8e:96:62:52:2c:d2:7c:
                    82:96:f2:0f:08:27:c0:0c:20:df:2c:49:7a:60:08:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:48:6C:24:08:56:15:6F:E1:B1:23:2D:A0:C6:17:98:3B:A0:A9:1E
            X509v3 Authority Key Identifier:
                keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:b9:02:02:3d:5c:3e:cc:f3:e7:c0:f5:91:0c:4c:b3:c3:
         64:e8:51:05:33:98:f5:e7:82:59:c4:6e:14:99:46:0b:73:9f:
         9e:fe:ee:31:8c:36:36:49:f8:4c:83:5c:06:5f:12:71:6d:d0:
         81:4f:8f:e4:44:ed:57:71:8e:cc:30:ef:b7:1b:bf:55:11:68:
         4e:55:8a:66:1e:d1:f3:6d:26:2a:49:1d:4a:04:81:18:94:2d:
         ea:6f:d3:75:7f:90:ba:03:91:9c:6a:33:e9:c6:86:14:00:8c:
         56:34:19:90:04:5a:d4:43:17:0a:46:dd:7e:40:cd:d7:87:dd:
         04:ea:29:04:b7:6a:dd:b8:69:96:fa:20:79:21:25:65:d3:f0:
         55:6f:1b:e1:7d:75:50:32:cc:36:8b:75:ef:e1:17:f3:2f:01:
         44:97:6e:42:ad:e0:06:b2:97:bb:92:53:68:2a:91:dc:5c:c3:
         8f:ce:ce:66:59:c5:22:8b:f9:98:cb:57:92:92:1d:1b:d3:75:
         11:3b:99:8d:00:61:d2:31:a5:27:29:6b:aa:12:47:cb:10:94:
         c5:fd:49:36:29:30:88:6d:a3:3c:c5:ed:71:ce:b4:01:f5:71:
         80:3a:44:4d:c8:c2:fc:ce:3e:e1:40:ec:33:dd:5b:26:da:ac:
         f4:a6:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----