Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          qJ+YCsikfv/SxwIqgNAugRQmtDn+d1UWk/hb9w/wFi8=
Subject key identifier:   B0:EA:7C:27:F4:5C:E0:5F:15:D2:85:99:8B:15:B5:96:4E:89:97:01
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       01962DF458CA3577EBD9D4CB8B57F1491005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          1486
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=)
                          2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: gIyBiZN/mugkZuT8C6Xk0TUjvPMSJBSBhPAmcYFFK6g=)
                          3: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (hash: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=)
                          4: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=)
                          5: pkrI6iaUdda-z9WYMFjdcxpmXjo.roa (hash: hMCs1gjsYAVaOoAjArkJ6N1TgykfFMKnI+aiOTGukGc=)
                          6: tV6sObvzgTfPgUJ_zmLWZJP23Js.roa (hash: ruAGmOYz2wd7CtdLjtd2pZCz/+RLCcgBY+LOgFhOP3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:58:ca:35:77:eb:d9:d4:cb:8b:57:f1:49:10:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=b0ea7c27f45ce05f15d285998b15b5964e899701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:57:58:88:3a:74:e4:5a:e8:0c:df:ff:8d:77:
                    ed:fe:c2:b7:d7:77:6a:09:f9:d1:57:a3:5d:13:c2:
                    b1:9b:c7:18:1e:18:1f:61:9f:9c:7f:e0:92:90:0c:
                    68:96:31:d4:3d:22:26:9b:d5:1e:ac:3a:7c:7b:a2:
                    c1:78:a5:e8:92:43:23:fa:22:92:16:60:1a:fb:82:
                    e4:a9:f1:14:65:cd:2b:2d:cf:9d:64:c8:fb:6f:e7:
                    e1:42:e1:89:bd:bb:22:8e:39:64:d3:1a:b3:4d:02:
                    03:81:63:a4:77:48:3d:39:03:62:2f:38:7a:0f:a4:
                    67:58:2b:2a:b7:43:1d:e4:45:63:4a:b0:36:92:0c:
                    be:0e:4c:c2:19:c9:7d:15:74:a4:04:b6:fb:b9:ed:
                    a6:d8:0a:83:e6:d3:a4:47:ab:c2:af:e5:70:97:05:
                    ea:44:06:0e:30:69:8c:a3:c1:0c:16:fd:8a:2f:8f:
                    54:af:a4:8b:95:2e:eb:bf:5c:e2:09:67:22:a8:82:
                    03:39:3e:ad:4e:ed:bb:b9:20:03:65:8a:df:68:f4:
                    2d:53:0b:06:7d:ff:72:f6:e0:d5:fe:36:7c:97:45:
                    a6:06:e7:83:f0:ca:58:5f:95:74:87:91:d9:7d:91:
                    5f:e4:80:57:b6:c8:c8:90:db:ab:a6:6b:09:e8:49:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:7C:27:F4:5C:E0:5F:15:D2:85:99:8B:15:B5:96:4E:89:97:01
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a4:f7:c9:8f:b7:69:cb:49:fa:08:e5:6d:34:66:37:ca:1d:
         e4:d1:91:3a:56:4e:23:4c:58:6f:fa:ae:52:f2:ef:e8:e2:12:
         0e:e9:c9:de:42:c6:f5:7c:1a:a2:65:73:ca:7a:d4:2d:32:b9:
         e4:1e:4e:f0:a8:1b:e1:96:fe:ec:cc:1c:1d:e0:a2:a4:ff:e4:
         47:9a:76:12:ea:4c:31:64:b7:29:60:cf:d0:2a:e9:d5:36:af:
         13:e5:ad:e3:10:16:14:e8:4c:44:33:87:fb:0e:ba:28:2b:5f:
         1a:6f:76:c1:af:ff:73:ff:7a:f3:3c:78:82:0d:9d:c8:86:d1:
         dd:bc:be:ba:f5:b6:ec:e4:f7:7a:d5:1b:d6:e2:d7:86:33:85:
         27:67:b8:76:35:8d:87:38:e1:28:d2:66:f3:17:1f:76:cb:51:
         95:dc:df:4e:3a:84:03:49:5d:db:91:45:68:f0:a3:33:70:e6:
         2d:5a:66:54:d0:7c:cd:6f:63:3d:56:38:7e:48:a3:b1:9f:c0:
         79:e9:31:4c:fd:21:a0:9e:5f:8b:3e:3a:d1:3c:e3:d0:a8:25:
         d5:c8:74:05:41:52:4c:e5:a8:94:6e:90:33:37:2f:bc:b9:4d:
         60:6c:c7:85:da:ca:b8:45:75:c0:38:93:e4:fe:f0:93:71:aa:
         aa:38:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----