Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File:                     o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier:          OWFuDKSHRg3x3TJ10+ykYpwyRBwhK2Uw7u+Iht7GfOo=
Subject key identifier:   C4:57:BF:84:10:A5:A2:B2:70:B6:94:0A:9E:70:F7:AD:59:F9:1A:D8
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer:       /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial:       01962F7442BA584389E52AB02447859F46F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: WT2JoTcTKkUhk2lE4qNupnkGvGSbdQ4M17QtomJm//8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:42:ba:58:43:89:e5:2a:b0:24:47:85:9f:46:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=c457bf8410a5a2b270b6940a9e70f7ad59f91ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:34:3b:fb:d2:bc:66:bf:c4:35:70:bb:df:
                    29:59:29:73:5b:f4:a4:b9:21:38:fa:1a:cd:13:27:
                    de:b9:f3:13:4a:62:98:be:d1:d8:06:14:57:4a:d8:
                    ac:7f:1f:6d:ef:64:c8:db:e3:82:8a:48:63:da:7f:
                    09:9f:3b:b4:f5:50:5e:bb:3e:63:42:74:93:3d:c4:
                    6b:6f:80:9c:fe:9e:ac:6a:ce:73:21:7d:31:12:ca:
                    92:66:a0:3f:53:44:b5:d4:92:2f:3b:08:45:e1:fb:
                    6a:3a:8e:9e:1f:00:ee:4e:fc:8f:86:35:86:eb:5b:
                    85:41:c8:3d:65:2e:4f:7c:2c:76:4a:9e:36:26:af:
                    3e:fe:85:43:67:5f:3d:5b:ff:39:eb:9b:a7:8a:5e:
                    14:a2:9a:40:4f:6e:39:df:16:e6:b6:be:52:5f:f2:
                    c5:fe:fd:44:72:9d:ce:a6:e8:b3:f6:fd:84:d4:a0:
                    dd:9a:be:76:f0:1c:fc:78:1d:cb:af:ad:29:0b:d8:
                    0a:94:10:c5:f3:7f:97:f6:c6:e9:a2:d5:b5:e3:0f:
                    52:be:60:59:ae:1d:a2:16:4f:2b:b8:23:45:99:82:
                    c1:13:3a:4d:8b:eb:53:4a:bf:e4:97:60:be:d3:dd:
                    df:32:f4:60:fc:e6:9a:e9:e4:fa:52:c3:d6:84:a5:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:57:BF:84:10:A5:A2:B2:70:B6:94:0A:9E:70:F7:AD:59:F9:1A:D8
            X509v3 Authority Key Identifier:
                keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9b:21:db:d4:42:a9:2f:fe:b0:d1:10:2e:cb:cb:14:75:96:
         b1:83:cd:50:ea:e4:e3:7c:2d:5e:f9:bb:83:2e:61:7a:63:84:
         b4:2f:09:d8:09:1e:27:53:a0:ca:0a:19:20:33:2d:b6:00:6c:
         0c:67:be:f6:53:9b:e9:d5:78:71:7c:a5:06:7d:9a:be:30:df:
         05:76:f3:95:fc:44:e3:df:92:08:87:91:7a:b7:e9:01:8c:55:
         ff:a4:83:05:28:3e:aa:7a:98:c9:3c:b5:1c:e4:41:76:94:6e:
         93:9e:0a:85:95:fa:88:2c:0d:6d:ff:92:e4:84:ee:e6:83:6c:
         e3:09:55:12:e1:31:d8:79:97:d9:cf:b3:0e:12:41:23:44:09:
         d2:a9:df:d5:9b:54:8d:8b:5a:d3:9a:2b:96:74:d5:fd:27:78:
         ce:ea:f3:91:04:0b:fb:b5:fd:f1:4d:f3:85:22:45:9d:31:56:
         71:0e:21:03:4d:38:60:cb:92:eb:ce:fd:e0:f5:7b:00:f9:71:
         e1:e8:7c:7d:0d:06:7b:3d:51:c4:ac:db:f5:6a:31:ee:ad:04:
         96:06:a2:ec:ce:d8:94:78:8a:dc:63:c1:47:0a:e2:33:78:8f:
         70:e1:61:bc:c5:f9:d7:74:fc:6a:c4:70:63:8d:67:45:3c:b6:
         a7:5a:ca:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----