Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File:                     Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier:          aUqprQHv2HeGdqFo8xuVqSdXeqzHfyTfJN7I8mP4SvE=
Subject key identifier:   64:E7:73:C7:F5:61:7F:FA:3D:DE:C2:A3:59:8D:13:BD:A7:78:55:3C
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer:       /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial:       01962E99B7E5F4322F9EAEFCC10E56837F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: dY595pTV3pDJou66bkCZsjpaP++vata/P4C853fdZxA=)
                          2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b7:e5:f4:32:2f:9e:ae:fc:c1:0e:56:83:7f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=64e773c7f5617ffa3ddec2a3598d13bda778553c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:b0:4e:61:a3:87:18:c5:0e:c8:94:5e:1c:
                    3d:04:c6:0e:8a:aa:9d:d6:2d:e0:34:b0:88:b9:33:
                    05:61:2a:5d:da:fc:a9:06:da:90:ca:1d:8b:69:bf:
                    ee:89:f1:70:ab:0a:27:61:ee:fd:bd:1e:a5:7d:16:
                    11:0d:08:16:f6:a7:3e:5b:b7:c6:67:b9:61:6e:d6:
                    47:3c:fb:a6:76:32:0a:be:68:bc:e5:60:92:2d:c6:
                    3e:0f:0e:36:a4:ee:2e:9b:f3:7c:bd:b9:ca:fd:e7:
                    47:45:95:33:4a:32:e3:24:1a:96:a6:7a:95:c6:82:
                    7f:7c:cc:25:17:0a:1d:98:12:cc:c8:72:b8:d5:f3:
                    b2:9e:96:fe:be:f2:0a:7d:70:f2:41:1c:10:45:d3:
                    71:21:97:9b:fe:da:7c:23:4e:33:9e:f9:88:f4:76:
                    f5:4c:17:b5:00:f1:d8:e7:5d:c8:1c:1d:25:b1:b5:
                    9b:a8:f0:a2:54:ba:c4:83:c0:cd:57:29:04:39:2f:
                    96:8c:a6:17:b4:11:97:c8:2b:ba:1b:33:9d:3c:77:
                    ec:ac:b5:d3:ac:a2:bb:a9:ea:f3:a4:ea:7f:86:52:
                    c3:5a:50:cb:b8:18:e3:af:a7:fa:a9:2f:8a:c3:c9:
                    7a:33:09:e4:1f:c5:a1:71:a6:9e:a3:64:52:5c:7a:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E7:73:C7:F5:61:7F:FA:3D:DE:C2:A3:59:8D:13:BD:A7:78:55:3C
            X509v3 Authority Key Identifier:
                keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:b2:e3:bf:3c:77:9a:0c:15:82:bf:83:9e:18:a8:18:de:
         35:94:1c:b7:d3:00:46:40:c4:bb:ff:78:7e:1e:06:4d:70:6c:
         26:1b:cc:4c:22:7b:2c:8a:6a:55:a4:31:88:08:0f:94:8b:e8:
         b9:9f:2a:be:27:bc:ef:08:7f:1d:63:9d:5f:94:67:89:62:b0:
         2e:52:3f:67:76:da:3f:5b:0a:bd:e3:e3:44:14:d1:33:41:a2:
         f2:2b:61:b8:68:b4:5e:03:cd:89:c8:47:44:0b:b1:cb:2b:77:
         b3:ac:80:a8:60:ca:4d:0d:40:bc:a2:30:ea:52:86:62:df:35:
         37:93:7c:c6:42:c4:fa:77:60:9d:8d:63:75:2c:9d:8b:cd:67:
         c7:10:94:06:c9:42:3f:b4:cf:77:10:44:9a:54:18:9c:2b:05:
         87:3d:58:dc:49:14:04:d5:98:c7:51:b1:b5:65:cb:7c:aa:b0:
         84:7f:69:0a:ca:f0:eb:c3:98:a5:e5:3b:e0:44:1d:a0:30:af:
         4c:77:3f:64:d4:11:34:0f:6d:c4:90:bf:0f:c9:36:c3:0f:bf:
         59:c3:ed:ee:cd:1f:05:ec:0c:dc:1b:f0:13:41:1e:03:96:02:
         4f:89:ea:37:db:63:24:71:70:7a:af:31:bc:68:b0:a9:cc:8e:
         a0:cd:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----