Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File:                     Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier:          w0y6SbNAid+bXlek3Y60IxKChspGbDlLhJ8Di919bIU=
Subject key identifier:   C0:06:EB:AC:6E:02:33:8A:E3:79:B3:FA:69:A9:E0:A1:E6:32:D3:C2
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer:       /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial:       01962E99B38D649C4F2490FAC4B70B3E4FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number:          0927
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: 9mdgCsTw5WZxZyrq+bxmMCdouyIZ37hw672qbCOk55M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b3:8d:64:9c:4f:24:90:fa:c4:b7:0b:3e:4f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=c006ebac6e02338ae379b3fa69a9e0a1e632d3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:92:40:a9:b9:14:7d:38:10:4b:96:41:4f:
                    cb:70:5f:62:f6:ac:61:c7:a0:ad:bf:7a:a1:29:34:
                    a8:5f:04:d9:ac:ef:1c:fc:0d:61:1e:52:6b:4b:79:
                    bc:e8:b6:4c:ef:9f:e5:a5:1f:ab:71:de:af:c0:bc:
                    e7:ca:e7:af:ed:c2:09:26:66:2a:1f:29:95:d7:df:
                    f3:10:2d:5e:bb:6e:d7:8f:70:63:f6:1c:6a:1d:5e:
                    86:83:52:81:a7:5c:4d:48:ea:3b:64:f9:ec:7a:8e:
                    1d:42:55:5a:17:bf:8e:31:ed:6a:51:0c:1a:d9:74:
                    55:d7:15:f2:87:e4:04:b5:a7:69:ec:79:6b:56:0d:
                    4a:0d:da:a8:29:4a:59:d1:71:de:92:ad:8d:45:18:
                    70:6e:e9:a3:52:32:f9:a3:d2:e3:ba:1a:a8:72:6f:
                    2d:ab:ed:b0:a7:62:46:c0:c3:aa:a8:e6:f6:75:7c:
                    ba:5d:fe:52:58:84:97:92:d1:a9:c1:c8:cc:6b:dd:
                    20:fa:c6:34:48:51:f9:5d:26:08:1b:6d:f2:64:03:
                    42:f2:cc:86:17:55:58:7f:3c:1a:68:d3:ce:c2:10:
                    82:8b:dc:00:56:0a:29:ed:a3:f5:4d:b8:79:08:36:
                    a7:b1:27:98:bc:e9:33:98:b7:c7:df:6b:f3:c7:66:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:EB:AC:6E:02:33:8A:E3:79:B3:FA:69:A9:E0:A1:E6:32:D3:C2
            X509v3 Authority Key Identifier:
                keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:dc:08:d8:55:b3:e7:29:89:85:b4:96:10:77:df:4e:3e:58:
         ae:81:66:9b:6f:e3:1a:ab:ba:b8:01:75:d8:ec:a1:f0:78:93:
         39:a1:97:c8:0f:1a:40:6c:bc:e1:d1:6a:8f:61:66:75:74:48:
         51:da:dc:22:d9:d6:9c:cc:6d:b7:94:a3:80:1e:e2:d1:80:5a:
         7a:2d:df:39:c2:c2:a5:5f:00:de:de:42:f5:59:27:69:d5:57:
         b3:01:0f:b4:44:a3:9e:05:da:24:54:7f:f2:58:5c:84:e0:b1:
         79:c6:54:1d:62:93:03:df:01:aa:ad:02:1d:52:77:26:2f:dc:
         e1:99:ed:ad:13:c5:3c:92:a7:f6:10:74:3a:c2:b9:e9:82:33:
         1f:5b:f1:8b:5c:35:3d:f7:a8:aa:2b:ff:05:40:1e:ea:77:93:
         d5:4a:dc:9a:e8:94:d5:fe:dc:50:1e:f0:fb:4f:d4:61:20:d1:
         06:94:ee:c6:7f:b6:7a:4d:65:c9:aa:96:f1:ad:01:86:d2:71:
         f3:fd:ca:de:e5:4b:41:a5:65:18:62:f4:e3:63:1b:2a:a1:f9:
         cb:2c:6b:66:3a:15:1c:9d:02:d4:ad:3b:38:76:c8:08:78:35:
         cd:5e:e5:e8:0f:55:24:72:d3:3d:83:9f:c6:3d:d2:26:09:3b:
         90:d8:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----