Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File:                     C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier:          JD73IyTBGZo1e0YIt6VAcLnEPtKmbT87c+HiCVhFDyo=
Subject key identifier:   23:C6:D7:17:DA:B8:56:29:9C:30:A9:43:95:6F:78:6E:E3:18:6B:C3
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer:       /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial:       01962F74BB9A9C043F8C8489DDEBC65EA68F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number:          0957
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: /FKgDQ/Ah/DWIs/0i+fHK5etuYTzjt7b++0t3UUWuVQ=)
                          2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bb:9a:9c:04:3f:8c:84:89:dd:eb:c6:5e:a6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=23c6d717dab856299c30a943956f786ee3186bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:ad:ee:33:2d:00:86:ec:a4:b1:14:8a:39:
                    9d:7b:2f:3e:e0:af:07:c4:34:f7:ed:a1:25:ef:b8:
                    c4:bd:a0:bf:2d:cf:ea:f9:f2:0a:75:43:41:68:6c:
                    dd:21:d0:84:ea:f0:89:d5:68:21:57:04:79:ec:62:
                    b2:c4:b3:3e:56:c7:10:98:24:c0:10:e1:93:d4:55:
                    6b:77:d6:8b:5e:1c:63:00:b8:af:c6:c8:c7:6d:e7:
                    75:47:af:b1:6b:16:11:ae:85:50:87:22:c6:dc:ff:
                    f6:e2:d2:a0:6d:dd:c2:10:80:45:f9:b1:54:af:41:
                    06:b2:db:6b:c3:1a:b6:ec:ff:4f:f3:b7:7c:60:23:
                    75:d6:3a:a6:9d:c5:65:63:f5:75:55:45:c9:59:c1:
                    63:c8:35:b3:d5:75:63:48:b9:c3:b4:fc:02:67:5f:
                    7e:45:da:4a:83:d4:df:60:2b:a6:c9:02:2d:9c:9e:
                    cd:7c:2a:6d:da:77:e8:aa:b9:17:40:4c:b2:55:35:
                    86:40:aa:48:2a:bb:4d:d9:4f:7d:96:70:f3:bc:f3:
                    68:f7:80:a8:de:8b:81:32:61:cd:33:4a:56:09:59:
                    d6:44:21:20:64:69:23:a3:1f:8a:ad:b5:8a:6a:88:
                    85:ce:cd:08:d8:68:5c:6f:70:4d:c2:91:aa:8f:36:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C6:D7:17:DA:B8:56:29:9C:30:A9:43:95:6F:78:6E:E3:18:6B:C3
            X509v3 Authority Key Identifier:
                keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:84:62:bf:9f:3f:02:5a:5a:12:6e:62:9a:c3:da:31:d4:
         66:6c:f0:ef:78:63:04:df:fe:2f:2d:c2:f5:fc:ea:1a:99:b1:
         6e:9e:ac:7f:91:d9:0d:f9:80:4e:b3:ef:d5:50:b7:53:97:33:
         e4:c3:9a:8d:21:47:cd:d0:5c:f5:55:9c:68:9c:a4:23:98:58:
         5c:b1:82:f0:b4:6a:cb:1d:05:fa:62:5e:99:a4:0f:85:74:57:
         9a:bb:e9:51:46:83:18:d8:03:cc:aa:ae:2b:a2:a4:bb:43:96:
         ea:5b:4c:01:e2:92:fa:3a:ec:c1:52:c8:66:df:6b:6a:e0:e0:
         70:46:a5:5b:ec:3c:85:05:76:70:3b:56:45:2d:96:d8:a2:13:
         3f:6b:b5:f1:7d:87:cc:7f:45:dc:46:b6:e5:34:75:9a:cf:d1:
         c4:63:ab:fc:9d:58:20:5e:4a:fe:2f:3f:3b:f9:0e:8d:86:79:
         3f:26:69:7e:55:dd:8b:dc:81:8d:a1:06:e5:a9:34:89:5c:df:
         0f:c0:21:af:5b:74:85:13:13:e6:08:49:6e:5f:ed:e9:2b:59:
         a1:cc:d7:a6:d4:33:37:f6:08:e1:fb:ae:d2:28:a0:f8:00:89:
         60:89:e3:3f:c2:0b:a4:00:98:05:f9:18:2a:b2:eb:66:62:8b:
         cf:71:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----