Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File:                     o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier:          4Gb6nsbsMGBhoTNrKYwjf+YVmh/JWFUkXCmXryCI80o=
Subject key identifier:   13:45:31:67:BB:2F:E5:10:3C:0B:26:DD:0C:34:8E:0C:A1:CA:4A:52
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer:       /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial:       01962E61B0E72514D941BA66E967AC4C0F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number:          0D9C
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
                          2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: vcppLJ2t/4o1UZV0nxC3sttgX5+AwQ4r07AkBlUwP2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b0:e7:25:14:d9:41:ba:66:e9:67:ac:4c:0f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=13453167bb2fe5103c0b26dd0c348e0ca1ca4a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:7a:ea:fe:b8:d7:1c:1b:3a:3c:82:90:f2:
                    90:ea:bc:cf:07:90:a5:e3:06:85:fa:6a:7e:60:91:
                    c5:17:78:cd:6f:3a:77:dc:4e:47:b2:4a:06:22:de:
                    e2:97:ef:84:bf:da:26:c3:35:f9:fd:5c:55:37:79:
                    be:a5:73:c6:ce:db:14:e8:48:96:c5:93:7b:51:cb:
                    81:f2:8c:90:b3:f6:7a:3f:ba:86:c7:2a:d7:70:c6:
                    0b:f7:67:55:b9:f7:35:ee:df:47:9d:5b:c2:05:41:
                    b7:6c:56:ea:ea:d6:fd:d0:c5:d1:a1:f9:8e:86:96:
                    bb:e9:3c:e6:5e:b0:64:b0:28:82:88:ad:64:32:6d:
                    94:9a:e1:21:b1:03:49:62:29:5e:1f:8f:6b:18:8f:
                    16:82:6b:a0:d2:08:05:69:12:4e:1c:c5:2e:80:2e:
                    66:4d:d9:34:41:1d:19:82:90:9b:74:04:66:b5:96:
                    0f:ac:58:e0:15:79:f7:3a:e5:d6:4b:4d:25:56:53:
                    61:9f:41:55:2e:12:c1:fb:26:d0:96:15:84:5a:50:
                    30:71:aa:81:fe:48:95:9d:12:e1:e8:d3:45:a4:e6:
                    78:2b:7c:12:1f:80:44:80:f5:92:3c:e6:5e:2a:52:
                    fa:dd:0a:77:50:8b:37:75:29:4d:e5:cc:10:5f:39:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:45:31:67:BB:2F:E5:10:3C:0B:26:DD:0C:34:8E:0C:A1:CA:4A:52
            X509v3 Authority Key Identifier:
                keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:d0:d8:2d:98:aa:f8:3c:ec:e1:e2:cd:a4:b4:0b:02:9c:
         5f:0f:0f:43:99:5e:47:6d:24:4d:a2:ab:c8:26:fc:db:ef:09:
         a9:5e:f8:dd:e6:4f:a5:b6:c2:17:db:3c:18:58:08:c7:3c:59:
         5e:27:d7:7a:d5:94:de:5f:9c:bd:7c:4e:95:ab:10:ac:37:fb:
         e7:82:14:10:a3:5e:84:c5:ce:73:65:6d:27:39:95:87:21:c1:
         11:73:84:49:33:2d:d0:e1:2a:27:55:69:e4:99:fe:64:b8:b8:
         db:8c:09:24:ce:2d:cb:33:01:41:75:41:a4:3e:23:e0:8a:ed:
         20:49:08:bb:a5:f6:69:c3:a7:7d:81:fb:00:d8:da:81:f7:4d:
         43:1b:48:0a:2c:21:8c:e7:02:89:7d:03:7f:89:34:16:55:ec:
         a9:30:46:4e:af:87:37:b1:15:74:dd:1d:e3:09:48:81:4f:60:
         00:1d:0c:eb:26:50:88:29:dd:12:b7:a8:c4:ec:94:93:0b:28:
         a3:ef:7c:f9:7e:34:68:03:3a:c6:3d:9d:b6:f2:35:2e:cd:68:
         84:db:b6:bb:4b:4d:e5:86:6d:6d:71:e3:4a:b1:4d:26:07:fd:
         7b:d6:fe:58:a6:9c:60:2b:40:97:90:1b:d2:e2:2e:c5:03:88:
         a0:aa:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----