Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
File:                     coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json)
Hash identifier:          zqPxw/r2OPvJ3Kiksz6vaTOwskrNonutYHEq1AWAzk0=
Subject key identifier:   78:39:03:B6:C9:33:DD:B9:C0:14:B9:76:44:00:9D:D3:DE:F5:70:0D
Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5
Certificate issuer:       /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
Certificate serial:       01962F071EBF681CC2660FC0B445EAE18E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft
Manifest number:          09CA
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: etO/LB5UxsMO+a8rJtN6xN0YHpew7UwReMe7SJ/rCoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1e:bf:68:1c:c2:66:0f:c0:b4:45:ea:e1:8e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=783903b6c933ddb9c014b97644009dd3def5700d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:18:d5:5c:ba:d1:a8:1e:0b:f8:44:dd:e4:
                    f4:ec:05:cf:9c:54:2b:70:95:c3:ac:4d:0b:36:cb:
                    5c:53:d7:a3:b0:16:32:53:a0:7c:b9:19:8c:4d:0f:
                    a9:c0:c5:46:88:87:49:28:38:40:8b:48:22:33:65:
                    60:89:81:a0:97:cc:d9:6b:da:83:b2:7b:09:f8:cd:
                    ee:60:37:98:d4:2d:2e:27:90:0a:43:05:1c:4e:58:
                    42:af:b6:9e:22:1a:1e:b0:2d:44:a4:6b:74:37:95:
                    5e:29:bb:34:ff:6e:c2:37:65:e6:20:58:70:72:3d:
                    4f:30:7b:33:7f:87:30:4a:7f:70:e4:20:17:e4:aa:
                    6b:68:12:d8:8b:2f:14:db:20:98:2f:9a:0b:c6:e2:
                    4e:f1:2d:5a:94:6d:00:55:83:c7:54:aa:97:22:d0:
                    f6:c2:53:45:df:47:44:e6:5f:89:c6:f8:19:14:f5:
                    fe:de:d3:09:e2:af:26:90:0b:0a:ba:8f:23:bd:fd:
                    ee:14:b3:ec:37:eb:9e:9f:e0:8c:5a:d6:72:13:54:
                    72:4b:44:76:2e:d2:60:d0:56:b6:8b:39:c6:1e:fb:
                    cb:a4:0a:a9:f4:d1:67:42:08:1a:85:2f:76:51:4f:
                    44:c8:67:75:1d:42:9b:ea:4f:01:9d:3b:3b:0c:f0:
                    8d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:03:B6:C9:33:DD:B9:C0:14:B9:76:44:00:9D:D3:DE:F5:70:0D
            X509v3 Authority Key Identifier:
                keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:55:41:10:ef:42:f4:5c:08:66:49:6f:34:50:53:03:1b:0a:
         54:a4:6a:3b:b8:f4:8f:b8:6d:dd:ee:6c:ca:9f:69:18:74:9f:
         32:1c:b3:c4:73:2a:9e:4d:76:85:1e:41:2b:01:1a:76:73:cc:
         af:30:41:e8:c2:bc:06:e0:ff:0c:6d:95:77:fe:50:71:37:f9:
         21:89:d3:65:0b:da:ef:8d:9e:86:a9:a1:81:63:67:e0:03:79:
         30:a5:82:c8:ae:87:80:5d:5e:56:39:b5:38:9d:cf:d9:76:19:
         74:c4:f4:09:89:ae:52:af:68:4a:78:f1:5a:b0:d6:51:d1:91:
         98:c0:15:45:32:52:37:a5:ec:7f:59:b1:8d:81:23:30:94:29:
         7f:f6:4f:9a:53:88:f8:49:53:e6:be:e5:ef:d5:0f:b6:eb:4a:
         db:c4:e0:c1:48:ef:b4:85:ca:b1:46:1b:82:f3:3c:0e:8c:28:
         55:8d:8f:43:5d:6d:db:d2:0f:28:3b:22:c9:67:23:6f:0d:08:
         b6:b0:74:64:d1:69:15:40:44:44:37:65:f6:d1:bd:f6:bd:90:
         fc:a5:1a:67:00:98:6f:11:f1:75:a7:90:07:89:51:2b:4a:da:
         e4:a1:93:92:54:0f:1b:38:27:d9:f0:e6:ba:a1:6b:50:34:2e:
         4b:cf:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----