Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
File:                     coCW6KzXbpqhfz62eAQG49pWPtI.mft (raw, json)
Hash identifier:          tCvPgqRcLv8DtbQqWkX4qkAdsdn8jDLvULAhzC5G90g=
Subject key identifier:   06:13:35:C4:75:31:25:FC:81:55:56:59:A8:98:1C:9F:2C:F2:6A:98
Authority key identifier: 72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Certificate issuer:       /CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Certificate serial:       01962F74EDD231EB347582131AAEBC208D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
Manifest number:          13A4
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: coCW6KzXbpqhfz62eAQG49pWPtI.crl (hash: jhuJT9zmj8CCuU4zQvFNjC28pcngijhBbwmOSC6ZVXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ed:d2:31:eb:34:75:82:13:1a:ae:bc:20:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=061335c4753125fc81555659a8981c9f2cf26a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:8b:5a:f1:de:de:b4:4b:b1:99:bf:07:f5:
                    d0:43:84:d5:c5:a6:c0:fa:71:20:82:de:5b:ac:b3:
                    f5:1e:cb:78:07:36:0b:c6:2b:c7:03:7a:99:ec:e3:
                    70:23:4c:db:de:e8:a7:fd:0c:03:db:f3:59:08:33:
                    d9:27:92:31:7e:97:c7:5d:57:94:4c:fd:65:df:eb:
                    8b:b6:6c:98:23:07:5b:9a:87:e4:84:78:12:7a:ea:
                    98:24:ca:24:11:72:d2:3a:9f:cd:38:60:00:71:4a:
                    46:5d:da:8d:bc:77:55:a5:10:c3:22:71:5c:a2:36:
                    6d:b1:99:01:9f:a0:06:a5:82:ab:81:98:16:81:bc:
                    9a:c3:3c:7b:08:b8:70:8c:67:09:93:f6:8e:e4:36:
                    2b:49:f6:29:67:81:0e:0b:45:d4:b8:c3:02:53:11:
                    d9:ae:35:9c:d2:fd:f0:17:ea:e1:20:af:d4:70:f0:
                    7e:94:62:ed:8f:71:b1:9e:20:c2:38:8a:7b:ee:11:
                    a6:44:d1:84:8b:b3:3c:56:b5:02:a7:6c:46:c7:88:
                    b5:26:b3:b7:b5:ef:c2:03:43:9e:89:fa:d7:9d:c2:
                    36:f4:7f:64:bb:28:e5:d4:c1:68:f4:cc:f7:d9:b4:
                    5d:87:31:dc:9a:9c:6c:3f:4a:d7:6a:fd:2f:bc:a5:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:35:C4:75:31:25:FC:81:55:56:59:A8:98:1C:9F:2C:F2:6A:98
            X509v3 Authority Key Identifier:
                keyid:72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:07:e0:5f:88:b9:3f:89:01:37:5f:ff:e3:3e:4f:57:53:18:
         9c:2b:0d:cf:96:5c:36:e7:73:62:2b:a3:b6:e7:fe:41:81:49:
         7f:96:43:6e:de:3f:c8:3b:c5:f5:36:a6:e3:a8:ba:9e:ad:24:
         29:1e:df:97:73:d0:cd:a4:1c:d7:a8:e7:60:2f:bc:37:7a:4c:
         76:9b:f9:0b:5e:5f:e0:ec:82:6d:14:de:08:d6:42:d8:00:3a:
         e3:e6:fd:a1:3a:51:6e:f2:80:85:04:af:bb:e0:3b:51:dd:04:
         91:1c:2b:2c:63:1d:e1:98:44:a4:91:a2:59:77:d2:c7:f9:a2:
         9a:9d:95:24:f2:6b:65:bb:e9:e3:8f:d0:5b:ae:99:99:3e:09:
         51:7e:f2:f9:b6:74:8e:f9:9e:81:be:cd:ff:fc:7f:d2:98:77:
         ae:fd:1b:cb:fd:3d:c5:37:78:61:d2:fa:5b:e4:68:d7:ae:f4:
         46:4f:30:2f:87:4f:5e:85:45:fa:de:2d:40:b5:3d:e7:d7:ba:
         cd:a0:44:98:3d:e2:0e:30:94:b1:7b:d2:34:05:b7:7c:08:22:
         12:12:2d:b0:75:f3:1a:95:36:84:aa:c6:b8:bf:42:d7:0b:69:
         ab:3e:3c:96:6e:15:67:42:73:a1:d1:2c:5d:65:29:6c:17:96:
         36:d6:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----