Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
File:                     0c0c1HQkGQk2se35qYScPjBYfzo.mft (raw, json)
Hash identifier:          AgOvQtgqjMTAU9vnURHV/XgoNt7cR5AZUvcbvvvusGI=
Subject key identifier:   8B:ED:56:53:71:25:17:54:3E:F2:BA:C3:62:CF:36:DD:64:B1:46:8F
Authority key identifier: D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
Certificate issuer:       /CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Certificate serial:       01962E99447999557FFB1A01E8D3AE86010D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: 0c0c1HQkGQk2se35qYScPjBYfzo.crl (hash: klDnThgozugsbdJdxK2g6s2Rb1up5OHrF4grRM11iGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:44:79:99:55:7f:fb:1a:01:e8:d3:ae:86:01:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=8bed5653712517543ef2bac362cf36dd64b1468f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:27:82:3a:15:73:5a:e5:5b:09:c8:26:ba:
                    db:7f:ed:8b:24:86:22:8a:59:81:81:7e:33:bc:b5:
                    94:33:8f:6d:98:10:02:3a:7d:d4:6b:76:a4:f2:b2:
                    94:7a:de:00:30:c6:e3:50:02:f7:b1:1e:3b:28:7d:
                    8e:b4:a9:33:1a:c4:1c:cd:dd:99:42:94:cd:de:87:
                    4a:14:c4:86:bf:bc:bf:13:f2:26:ac:39:9e:62:ee:
                    7e:05:73:e0:18:dc:55:19:5a:9d:6b:49:ea:19:90:
                    96:72:20:08:a9:75:2f:18:d5:4a:e3:f5:ec:f4:ad:
                    c9:90:f4:dc:4d:a6:6c:69:68:b4:8f:7c:00:e9:97:
                    c5:bd:af:0d:83:36:1d:2b:a8:19:ae:48:92:87:0e:
                    83:33:79:60:0b:65:1f:ac:9a:03:cb:92:4c:49:c3:
                    dd:e2:83:9d:e0:31:14:0d:5a:e5:21:a3:7f:11:0b:
                    ff:b9:75:97:26:59:c8:d7:07:81:44:b6:09:a5:a8:
                    c1:05:75:04:81:bd:96:bc:29:cf:de:61:9c:ba:05:
                    ee:21:6b:11:5e:40:54:0a:6d:bc:7a:0b:5a:ec:34:
                    4f:8c:dd:6a:c3:70:17:92:eb:83:b7:62:86:75:32:
                    84:e1:85:b2:b3:c4:a0:7e:c5:d8:70:2c:20:a5:68:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:ED:56:53:71:25:17:54:3E:F2:BA:C3:62:CF:36:DD:64:B1:46:8F
            X509v3 Authority Key Identifier:
                keyid:D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:89:a8:33:1c:ca:58:42:32:06:59:74:0b:4a:4a:da:8c:55:
         11:2b:a4:15:59:64:11:79:7e:da:d5:27:1b:dc:b3:ab:ff:a0:
         ca:e2:6f:dd:34:54:b5:0c:95:9c:4b:58:55:cf:42:e2:5c:63:
         d6:7d:cc:39:df:b6:5d:e2:b1:d4:cb:19:39:6e:84:a2:de:3e:
         35:5d:9b:c7:4d:c0:be:bd:99:55:81:a4:ae:7a:6b:44:b4:d1:
         e9:ec:d1:4d:35:28:50:ed:dc:58:2c:0e:06:b6:70:11:8e:f1:
         16:2d:5b:b3:0c:da:05:c3:a5:fe:8c:58:2e:5a:cb:ea:aa:e1:
         1c:f7:3c:48:9e:16:fb:2b:02:e8:c9:71:ab:1a:f6:56:52:3f:
         85:65:a5:a6:cc:23:79:16:24:c8:3f:bd:c5:b7:10:61:bb:91:
         8b:e4:67:cf:4b:7c:c3:82:78:e6:f3:bf:b6:78:54:f9:9d:ca:
         69:1b:26:f8:40:46:19:f0:63:95:45:cb:12:51:f5:42:53:d2:
         30:14:1a:c7:15:1d:48:9e:53:42:75:5c:c2:92:f4:d7:ba:e2:
         e5:1b:de:49:fb:73:fc:86:2f:c6:07:95:26:0f:ea:05:f6:79:
         70:26:ac:d4:3d:da:84:62:fe:7b:33:13:ad:56:88:7d:7a:81:
         25:71:27:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----