Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File:                     C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier:          cbrrn8eelZS7hve33VHoSdSDMw1ClEvofegSb03+70k=
Subject key identifier:   90:FF:53:F9:19:B6:03:3B:8B:2A:1E:3E:83:D8:AB:CE:B4:49:DE:82
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer:       /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial:       01962F74204B90625D95611CF3403977ACE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number:          0EB4
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: K+ucQojB4z5PHY7Q8cOO//40yyEpW+lKa86Iff/J9hY=)
                          2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:20:4b:90:62:5d:95:61:1c:f3:40:39:77:ac:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=90ff53f919b6033b8b2a1e3e83d8abceb449de82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:d8:fd:f9:d8:86:ee:5f:c9:ee:07:0d:b3:
                    a4:e9:bd:4c:fa:a4:3f:4e:0d:2c:31:66:68:d3:f2:
                    d3:1b:5a:5f:e5:d3:6c:41:2d:22:c2:a7:97:73:a6:
                    6a:b4:0e:06:01:7b:cc:c6:65:f8:06:b3:0d:b1:8d:
                    74:ca:94:ac:57:53:80:33:b3:ec:ba:71:f8:ee:2c:
                    3e:ab:d0:d1:c4:7f:09:b2:3d:37:bc:27:c9:04:1a:
                    0d:1b:23:64:ff:75:b5:0b:9a:12:2b:d9:29:8a:da:
                    1e:26:1a:bf:88:65:4c:3f:5c:b7:d7:ea:1d:87:4f:
                    ae:4f:17:fc:83:86:ce:b3:f9:6f:eb:20:e6:b8:f7:
                    d4:04:b3:fb:dd:c7:fb:7c:62:3d:82:79:89:22:1d:
                    04:49:f8:ef:d5:ea:fd:4e:1c:b2:bc:f7:7d:72:70:
                    b6:83:29:4e:65:d2:7d:4d:8b:67:b9:00:5b:27:55:
                    d6:a1:be:9c:b1:46:b4:e8:44:e8:00:78:ac:d8:0d:
                    cc:42:a6:41:9b:a9:03:1c:5c:9f:89:d0:8e:9f:48:
                    16:f2:bb:b4:32:32:8f:22:0b:eb:66:86:7a:d9:3b:
                    17:e0:54:58:01:06:46:39:e1:0e:e8:d3:e2:20:1e:
                    3b:95:a3:30:f3:60:21:ad:12:0e:ed:5d:aa:3e:c9:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FF:53:F9:19:B6:03:3B:8B:2A:1E:3E:83:D8:AB:CE:B4:49:DE:82
            X509v3 Authority Key Identifier:
                keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:72:1e:cd:5e:93:67:09:e5:c9:b6:15:21:15:98:3a:93:3e:
         19:c1:0f:c8:74:69:dc:6f:17:76:f9:80:ec:00:1d:c1:3f:ff:
         95:ad:91:23:ab:e6:26:8b:02:b1:1d:8e:e9:a4:11:73:20:4c:
         96:e3:db:36:f0:a4:7f:b9:84:e5:78:da:62:df:4f:23:3f:af:
         a5:0a:22:6e:e2:8a:37:f9:36:25:71:03:5e:0b:5b:07:c8:6d:
         23:8f:b4:85:65:7b:ee:94:35:c9:e8:65:71:bd:4b:53:27:40:
         4b:ae:c2:9d:0d:49:c6:2e:5a:5d:a1:8d:56:c6:97:3b:d8:e1:
         18:7d:5b:70:d9:91:b6:16:38:d0:bd:f4:2b:54:b7:a5:b3:29:
         bd:5c:0e:09:9e:46:5f:ec:e6:e9:d3:65:cb:1d:d4:4a:77:55:
         90:7b:1f:0a:94:d5:ad:b6:1e:6d:42:33:c2:04:51:d9:b1:25:
         7c:82:9f:83:61:4d:b6:e0:82:fd:7c:1e:0f:ad:38:bd:25:f2:
         82:2d:93:6e:08:78:39:5e:de:ac:55:ac:5e:a7:ff:4b:00:e2:
         6b:9f:5c:ff:c0:29:f8:f8:ae:38:e8:95:26:58:9b:2e:15:0f:
         53:e6:55:a3:bb:40:cb:ea:ce:0d:db:48:c8:2b:9d:01:e7:3a:
         7c:7a:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----