Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
File:                     C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft (raw, json)
Hash identifier:          5UuO8U4CfrY//bVtuMlbFwv57jkqC05hnfX+v/2S1iQ=
Subject key identifier:   DC:10:5A:0D:A9:44:F8:E3:28:B4:FD:4F:C6:32:ED:B1:C9:DE:AA:C3
Authority key identifier: 0B:C7:31:35:37:31:D2:7D:89:C5:78:28:54:69:C6:8C:5D:57:AD:09
Certificate issuer:       /CN=0bc731353731d27d89c578285469c68c5d57ad09
Certificate serial:       019547485825AB4A9529E298A3C041642D5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft
Manifest number:          0601
Signing time:             Thu 27 Feb 2025 12:01:18 +0000
Manifest this update:     Thu 27 Feb 2025 12:01:18 +0000
Manifest next update:     Fri 28 Feb 2025 12:01:18 +0000
Files and hashes:         1: C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl (hash: CQzpMFn66PZa0oFgXzINi2BPLFnHdYBdpiiyKILtPQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:48:58:25:ab:4a:95:29:e2:98:a3:c0:41:64:2d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc731353731d27d89c578285469c68c5d57ad09
        Validity
            Not Before: Feb 27 12:01:18 2025 GMT
            Not After : Feb 28 12:01:18 2025 GMT
        Subject: CN=dc105a0da944f8e328b4fd4fc632edb1c9deaac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:7a:4a:37:f5:b6:c8:d1:52:26:d9:63:ab:
                    99:f4:e4:b4:76:fa:1d:32:05:b6:a7:19:e3:23:3d:
                    12:6d:0b:d3:04:56:e5:9d:54:4b:6f:ab:9b:3a:9c:
                    03:10:8d:95:e0:76:9d:2a:09:83:a9:bb:85:2c:2d:
                    ff:da:db:99:48:c2:7f:46:c6:89:b4:fd:46:90:fd:
                    27:c4:fa:f6:cd:17:12:cf:5b:ce:ea:3f:12:f8:57:
                    32:a1:e0:d2:fe:4d:f7:c6:ee:8f:d8:f4:e1:66:35:
                    0b:61:8e:09:0f:f4:d0:b4:3b:da:62:59:c8:fb:27:
                    e2:15:79:9a:de:d2:f7:04:0d:f6:1f:3e:45:63:e7:
                    64:4f:2c:bc:e8:20:90:7d:84:76:88:07:0f:1f:1c:
                    ca:05:77:a0:79:fc:88:79:0c:70:6c:47:f3:e2:75:
                    83:5c:65:3f:0b:4f:a6:86:49:11:ed:30:76:e9:c1:
                    2c:e6:9c:cf:2e:74:7d:62:aa:d4:06:73:e1:0e:4d:
                    6a:e7:e8:34:54:c5:43:5d:ab:2d:d4:71:5c:b2:75:
                    26:00:c3:5f:b7:15:37:32:5c:e8:a2:e8:01:5d:1a:
                    e8:2b:fb:f6:c7:7d:34:10:fe:94:0b:e7:be:0d:d9:
                    43:54:39:a3:e9:b3:a6:49:61:96:0b:02:31:85:39:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:10:5A:0D:A9:44:F8:E3:28:B4:FD:4F:C6:32:ED:B1:C9:DE:AA:C3
            X509v3 Authority Key Identifier:
                keyid:0B:C7:31:35:37:31:D2:7D:89:C5:78:28:54:69:C6:8C:5D:57:AD:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cxNTcx0n2JxXgoVGnGjF1XrQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4946d9-bdb6-45b4-9a9c-4abe6550920a/1/C8cxNTcx0n2JxXgoVGnGjF1XrQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:d7:b4:bd:8f:df:b3:1b:d1:ba:4d:aa:0c:01:24:19:39:
         94:07:05:b3:2e:94:25:f8:08:fa:42:82:4d:f9:9e:7a:44:2a:
         58:56:29:0f:22:b7:c7:f1:91:b2:19:30:59:ba:6f:8e:7b:3c:
         31:1a:40:34:32:73:65:13:81:e9:d8:29:69:16:b3:0c:c8:79:
         41:e4:58:9f:ed:ef:91:92:f3:8f:35:10:b3:9b:aa:db:d9:9a:
         b5:32:d0:ad:6a:6f:f6:0a:f5:3c:f1:bd:fd:1a:da:39:20:90:
         c9:98:33:7d:04:84:c4:76:80:ad:cd:30:ef:8e:08:48:66:71:
         88:d5:ac:05:86:05:e4:ab:0e:db:ea:5b:3b:07:a5:b8:89:5a:
         00:31:1d:a1:3c:8c:ab:07:45:42:17:7e:43:10:cc:b1:e5:2a:
         4a:07:3e:70:8a:e2:4c:c7:96:7d:4a:f0:20:de:70:4a:65:c5:
         85:8e:af:2c:ee:d8:62:0d:0f:e6:54:a7:04:f8:85:7e:b1:cb:
         f5:f1:a2:8a:91:82:ec:11:55:6d:11:14:4b:51:c3:a3:ab:28:
         91:6e:ad:b8:a6:89:bb:c2:53:16:61:ae:23:68:14:7b:db:36:
         82:22:07:ee:b2:bb:22:11:45:08:dc:a3:1e:ae:97:10:9c:68:
         b2:b9:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----