Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File:                     COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier:          uqThaP9Z5LDCUfacFVOOxhub+i74l89OQlmzFm1xeBU=
Subject key identifier:   FF:EE:3A:34:F7:A3:AA:91:1E:B7:2D:33:51:0A:F1:87:12:B1:B5:C9
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer:       /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial:       01962F74703910CE5DE9E3A75EF5B753259B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number:          0109
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: XQyhDolcYMkBbkDojLKt6xN+tGeupEmyLsRMvEPCy9w=)
                          2: xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa (hash: Ym4zKNNqMflGb0dAEycHEmUQAQN+DoJITr/UvN/UU8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:70:39:10:ce:5d:e9:e3:a7:5e:f5:b7:53:25:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=ffee3a34f7a3aa911eb72d33510af18712b1b5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:0b:0b:8d:74:d7:31:c3:2a:3a:6c:18:f8:
                    0d:b7:b0:a9:c1:7f:c6:9d:21:2c:99:3b:74:66:09:
                    4e:dd:9c:1f:35:0a:10:a8:dc:d6:92:1d:11:02:89:
                    92:8e:8f:2e:c3:f4:c0:51:1d:33:8e:b3:10:d2:f0:
                    93:58:e1:95:b2:47:a8:8d:6f:e0:eb:28:f1:29:e2:
                    40:41:13:2c:3b:7e:0d:a9:b3:af:a5:7d:62:75:6a:
                    04:45:26:6e:c0:ba:c7:09:5d:fd:1f:73:85:a5:af:
                    26:44:88:f3:4f:44:a7:9e:87:71:6d:7b:90:60:b9:
                    39:cc:ab:9c:13:31:07:62:c0:74:53:66:5a:03:22:
                    f2:eb:22:ad:7c:f9:55:76:6a:e0:10:b0:36:93:6c:
                    e4:7a:10:3c:a5:9a:33:09:1c:5b:12:af:27:18:50:
                    73:ce:db:08:9e:42:fb:e3:18:ae:e7:fe:6a:bf:83:
                    c4:79:b9:dc:9b:fc:d9:54:e6:43:b4:e1:10:ad:42:
                    d2:fa:5b:97:45:17:ac:d5:a0:98:1a:0c:6e:1b:21:
                    97:7b:31:2a:a1:ec:38:49:87:41:40:7c:98:b6:91:
                    17:05:80:3d:84:3b:2e:49:ca:45:fb:4d:cf:ec:a3:
                    4b:cc:26:5d:ed:a0:a7:0d:09:6a:1d:df:97:8d:04:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EE:3A:34:F7:A3:AA:91:1E:B7:2D:33:51:0A:F1:87:12:B1:B5:C9
            X509v3 Authority Key Identifier:
                keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:03:d0:d5:e0:ad:ca:10:d8:e5:70:a6:c6:ff:08:a9:ef:d1:
         b8:a2:8b:d1:27:79:41:6c:a3:70:22:5a:55:b7:5f:2c:62:72:
         1f:d7:ca:3e:b3:4b:ea:61:39:89:f3:e7:d6:51:4c:2a:73:d8:
         64:67:24:4b:17:31:47:ec:f1:59:17:52:63:9f:9a:4b:35:5d:
         1b:f5:57:ac:dd:8d:7f:ab:35:c2:2c:89:75:47:b4:fc:9d:dc:
         53:b2:25:06:29:c5:56:a5:30:ff:a9:0a:b1:f1:63:ed:e5:0c:
         2d:11:58:ff:61:16:51:1a:bf:63:12:7f:ca:a7:c6:47:e2:1e:
         a1:20:d2:fd:47:07:21:4c:bd:62:4e:30:a3:72:e5:90:28:23:
         82:6d:42:9a:ee:59:84:d1:d2:13:5b:34:9f:ab:d9:ad:4b:16:
         8c:4b:fe:ba:f1:1d:df:f4:e3:3a:90:2b:e8:15:ba:85:c1:cc:
         0d:b9:6b:99:ce:80:60:c9:3b:da:f4:7e:12:01:b9:3c:de:fa:
         12:1d:00:f6:32:f0:a0:ff:43:fb:a8:69:f2:90:f1:ea:ec:af:
         e0:30:2a:f6:75:22:3a:d0:e3:41:c6:71:65:97:4e:55:d2:ba:
         12:67:07:f4:74:23:19:9f:c8:04:8d:a4:b8:fc:bd:b4:79:98:
         de:74:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----