Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File:                     C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier:          znwWpa820BstOF+0nZyYKvy3+eKun3gz3ze6KuaWZ+g=
Subject key identifier:   8B:A0:F7:AB:7C:4E:A5:0A:F4:C5:B8:B4:FE:45:21:DA:09:77:01:43
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer:       /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial:       01962E6200EB07A094DABB2AACDB754D0E6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number:          0EDD
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: 3DzcKmKV5CDzIu1hiukJSi2aG9j6jkE/qeb1SVxSdJA=)
                          2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:00:eb:07:a0:94:da:bb:2a:ac:db:75:4d:0e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=8ba0f7ab7c4ea50af4c5b8b4fe4521da09770143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:0b:84:32:12:34:2a:98:3e:d9:f7:c8:d1:
                    46:e3:7e:63:5b:16:14:fe:97:93:3c:be:f3:27:9d:
                    2c:ee:51:ea:cb:57:78:c4:c8:f4:a3:89:59:38:53:
                    95:e5:b6:94:a9:3e:06:66:da:21:2b:61:41:cd:e0:
                    ac:be:7e:a1:91:31:92:db:d8:0b:d2:c4:fa:70:0d:
                    4d:1e:f3:b8:b4:23:26:b6:10:10:d2:fb:28:0a:f3:
                    ff:cf:c9:65:78:15:fe:ec:22:42:43:35:da:4d:2c:
                    1d:d0:df:5d:0d:83:01:90:fe:03:b1:a0:39:5f:ec:
                    ef:3b:fe:02:ff:2a:b7:2b:e7:bc:c8:35:50:f4:bc:
                    b0:ee:6d:65:06:a7:82:29:33:93:14:88:9a:c3:e3:
                    34:78:c8:f4:a9:ba:54:9d:56:8f:ec:88:b6:36:f1:
                    7a:e2:a8:fc:ba:60:d5:6e:89:59:bc:7d:57:b8:f6:
                    36:ea:76:5e:36:d2:8f:02:69:20:7f:fa:e7:2c:a8:
                    4c:f7:a0:fe:c8:6e:78:0e:9b:01:b0:aa:97:0e:1d:
                    0a:8c:50:04:c4:ab:5c:46:0d:6a:72:c9:8f:7d:e1:
                    02:10:63:17:19:d8:4a:cf:19:e2:65:90:a5:3d:a8:
                    65:5d:02:e4:58:28:b1:d4:da:6a:4b:19:22:22:e2:
                    01:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A0:F7:AB:7C:4E:A5:0A:F4:C5:B8:B4:FE:45:21:DA:09:77:01:43
            X509v3 Authority Key Identifier:
                keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:1b:29:3b:1c:53:c6:a5:47:65:e5:62:cd:72:50:8b:b7:
         ca:89:45:0e:84:f3:b2:5b:7d:fd:9f:ec:0d:75:a0:b7:02:48:
         b0:f6:c0:6f:8e:ec:27:b1:54:da:b9:3e:7c:e2:0f:97:11:c9:
         ae:a5:38:b9:d7:b8:7e:ac:af:4d:1a:19:ee:76:fa:56:96:8c:
         3b:a0:07:fb:8f:cc:43:c1:04:78:0e:f9:59:2c:93:c5:72:5a:
         47:a7:83:ff:b6:ac:b2:dc:7a:7d:1b:89:a4:be:50:56:ac:6f:
         5f:5a:63:d8:80:e3:fb:eb:e0:37:39:10:99:5f:21:6c:5f:4e:
         cd:65:f5:68:34:de:2e:f2:df:43:87:39:b3:90:5a:b7:7a:c8:
         69:36:e8:4c:3e:b6:a7:a7:55:12:58:4f:78:43:77:06:03:38:
         c2:3c:c2:4f:8f:79:28:87:09:8f:5d:d3:58:93:cc:02:19:8b:
         79:11:2e:fc:a0:7b:fd:e2:6c:3c:00:84:68:3f:ce:01:0c:18:
         f2:30:a6:b8:28:ed:14:84:4b:53:ae:b4:ab:5a:20:d5:61:e3:
         24:93:19:99:e4:97:fc:bb:9b:85:f6:0b:27:6f:97:27:ee:77:
         34:06:27:cc:a3:48:3e:d5:e6:76:ed:d7:0e:7a:05:04:fe:db:
         0d:9e:6c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----