Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File:                     CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier:          5i0ozoYdLxMRTfbHDE9N4E5rDc+wiFahtZI08Z3ykdI=
Subject key identifier:   BD:39:A6:0A:E1:18:D8:67:C6:7E:98:47:F9:3D:7B:BE:73:7B:B3:08
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer:       /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial:       01962E61DB8BDCEBE133C3183D758FFD5A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number:          0EA3
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: 66W+SVtTOnHSiG3cONECA4TpWePS73C0Xmc3nTPCvb8=)
                          2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:db:8b:dc:eb:e1:33:c3:18:3d:75:8f:fd:5a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=bd39a60ae118d867c67e9847f93d7bbe737bb308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:5e:e3:f9:20:ba:28:c6:a3:40:75:05:0e:
                    f0:bc:f5:36:44:2b:35:59:35:d0:af:c5:23:8d:35:
                    67:bb:1f:d0:fb:1c:aa:45:c0:52:d6:56:b2:f8:ec:
                    71:d3:2c:2e:ec:85:b1:7f:06:9e:e8:ee:71:26:ba:
                    03:dc:43:53:05:cc:8e:1b:2b:f1:36:a7:14:5a:6a:
                    dc:4d:13:2f:d9:3d:d7:5d:cb:1a:ba:6f:a2:05:ac:
                    e3:4a:66:5a:63:43:45:37:6a:73:b6:e7:1d:6d:0d:
                    3f:f4:95:fd:3e:09:4a:af:2b:30:56:2a:3f:42:94:
                    a9:35:6b:ac:72:64:1e:a1:27:c2:cf:41:75:a9:76:
                    e3:90:f8:fb:b4:14:ef:a5:1f:24:de:52:9f:8d:d7:
                    ee:6c:b3:b9:b7:79:e5:22:b1:54:d7:cb:51:34:8b:
                    81:fb:3b:35:de:19:94:3a:ef:cc:0f:63:94:5d:92:
                    57:49:a8:09:b4:3c:ef:dc:2f:e6:ed:dc:69:9c:56:
                    70:47:e1:86:c4:1c:a1:f9:fb:35:a2:d7:17:80:0b:
                    01:57:12:a3:d8:da:d6:de:07:dc:90:6f:21:2d:5f:
                    ce:ef:52:86:18:c7:3f:58:47:0a:5d:7d:f4:8d:b6:
                    ac:23:5a:17:77:2b:7e:db:10:37:fb:20:06:ad:f4:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:39:A6:0A:E1:18:D8:67:C6:7E:98:47:F9:3D:7B:BE:73:7B:B3:08
            X509v3 Authority Key Identifier:
                keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:28:4f:53:a4:82:a6:22:3f:9c:6a:a5:d2:f7:7e:5a:05:d0:
         2b:95:d3:5e:10:6e:6e:2f:3f:da:85:ba:a8:53:e8:4e:c7:69:
         56:6f:5d:0c:b8:55:1b:5c:6d:6a:f2:88:34:cd:7a:9b:5d:ef:
         c2:a9:ad:c9:9a:f2:e4:d3:1f:5b:d6:1c:f3:4e:fb:ba:af:a1:
         62:30:14:ee:88:fd:d9:99:56:a6:88:22:4a:c1:ad:b1:69:9a:
         78:43:4d:ed:98:84:43:b0:87:0e:29:be:e5:ec:3d:7b:06:57:
         88:40:95:33:01:2e:cc:1e:b8:42:5d:2a:73:22:9c:6c:7b:33:
         5e:74:e4:bb:c6:5d:4e:76:d8:6d:4c:c0:67:d6:f8:00:7c:cf:
         f2:99:82:66:94:12:43:f3:f9:c9:2c:d2:a2:95:8c:90:b5:aa:
         fa:f3:51:9e:cf:c4:df:41:dd:a6:f5:fb:48:fd:07:48:a5:ac:
         d6:41:08:6e:54:fb:a6:db:0f:9e:5e:18:90:fc:ea:8a:5e:90:
         e1:1b:02:de:4e:58:54:53:59:41:be:47:67:5f:bc:74:2d:c9:
         14:9e:45:34:46:4e:a6:d6:df:8c:c0:f3:74:80:18:93:8b:d5:
         b3:34:de:d7:5d:3a:e4:29:0b:47:25:9e:47:81:8c:c4:9a:ff:
         30:05:89:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----