Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
File:                     cCw58YaCB38HK2IRb9TxaQh0r5Y.mft (raw, json)
Hash identifier:          9vAIaDL7AvtfTWZbqhyHC6ZxO9dZ8e15ymnNeoaNGtw=
Subject key identifier:   3F:10:42:B1:76:26:6E:5B:DF:7C:E5:5F:8B:81:F1:37:6F:36:D6:A9
Authority key identifier: 70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
Certificate issuer:       /CN=702c39f18682077f072b62116fd4f1690874af96
Certificate serial:       01962FAB52E7FE4752B27E0EA02D12423E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
Manifest number:          082C
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: DFyDZ0KcwXioQ8Y-7_O7BreSJ0c.roa (hash: 7LR5rGZdheek5FSN9VgvzhBSKbDgdVslo+r8yKVN2G0=)
                          2: cCw58YaCB38HK2IRb9TxaQh0r5Y.crl (hash: qSr7irEN2a3Eh0zXLynW5Ss9AqyKHl35hErUiuxgIao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:52:e7:fe:47:52:b2:7e:0e:a0:2d:12:42:3e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702c39f18682077f072b62116fd4f1690874af96
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=3f1042b176266e5bdf7ce55f8b81f1376f36d6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5a:eb:14:e9:1e:ee:84:6b:6d:97:dc:1a:e6:
                    d3:37:ec:b4:c0:47:46:ed:f0:97:33:84:3e:7b:8a:
                    3e:63:2a:fd:b0:40:db:58:ad:98:f5:46:08:da:c7:
                    d1:2d:46:1c:85:7c:bc:ce:d0:4a:b4:8a:1e:b9:b5:
                    2b:7d:ed:fb:27:22:ed:4b:6a:79:15:69:c0:d7:88:
                    ae:67:84:72:c3:21:21:85:a9:86:57:4b:48:78:ff:
                    b6:22:16:3d:f7:9d:4b:45:4c:ba:74:42:5f:40:25:
                    55:ad:c5:2d:c0:4c:0d:dc:4a:c5:16:fa:f6:40:53:
                    78:e6:1f:e7:72:19:91:bc:38:e8:ad:90:b7:c7:c8:
                    a3:29:7a:d4:66:4b:d7:81:bc:af:b9:98:e7:f5:c5:
                    2f:e1:bc:3f:00:16:e6:cd:aa:69:d8:ff:74:73:fb:
                    a2:cb:32:d0:6f:74:85:25:1c:f4:30:6c:9d:d0:78:
                    7a:77:eb:cb:58:3b:af:cb:62:ab:25:cd:58:de:aa:
                    3e:bb:cb:65:e5:f9:87:d4:78:47:35:04:52:6d:2f:
                    06:29:6b:cf:53:6a:a8:a8:24:92:c4:a0:e2:2d:03:
                    0e:73:b9:bf:fa:ac:be:d8:04:3e:7c:b1:86:a1:ce:
                    2f:bd:e4:36:14:43:ba:71:9a:a1:e7:f4:61:2f:be:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:42:B1:76:26:6E:5B:DF:7C:E5:5F:8B:81:F1:37:6F:36:D6:A9
            X509v3 Authority Key Identifier:
                keyid:70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:7f:c4:c5:cc:96:dd:0e:7d:9f:b3:00:30:32:19:93:dc:ae:
         a8:7c:cd:f3:59:92:7a:57:3a:30:5c:3f:1e:c7:e7:74:eb:1e:
         ad:22:55:b1:fb:09:f6:2f:f4:31:cf:1f:74:20:2a:7d:61:8a:
         2b:17:cd:3c:f8:36:41:e5:52:7a:3e:3f:05:bf:92:ed:d0:b9:
         22:78:51:5a:e2:ce:dd:4e:93:2c:18:e5:a7:46:b0:3f:89:94:
         bc:f2:09:64:d7:b2:5c:3f:44:39:3f:0d:60:d5:5b:34:cb:d0:
         52:56:de:5f:b9:2c:63:31:1f:1b:f8:fc:ed:6e:21:46:9b:92:
         8c:22:9b:2d:c2:2f:9d:38:c1:93:ea:72:1b:44:3c:06:9c:33:
         1a:e3:ff:a5:7e:51:df:33:33:21:1f:43:e3:c5:30:63:b6:37:
         d1:e9:47:14:05:67:ea:a2:8f:35:6f:1d:4d:6e:26:ae:29:63:
         17:da:42:bf:dd:65:bb:70:76:29:0e:e0:41:27:32:91:03:cb:
         bb:e0:79:58:1a:5b:1b:a7:79:27:19:21:99:f7:c0:99:d9:af:
         63:d7:91:6b:15:44:bd:ee:6e:74:86:22:21:f8:40:fd:92:13:
         f0:36:93:44:9f:3d:d7:2e:09:43:af:6a:48:84:82:4b:7c:96:
         c4:42:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----