Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File:                     C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier:          sm7jozgzM+ZZuXWdqngk/OP5ChTctQFJ6yCZ06PW8dc=
Subject key identifier:   A0:62:0D:1B:F8:58:5D:DD:FC:3A:BC:50:B4:3E:94:C0:D6:12:C6:DA
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer:       /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial:       01962F06989BDBBD0DDBBDE7E3B0DBF7C5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number:          0518
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: rd+888kwlPxdUtIlO92OHx+fRQY65sIRrHeaox0BOFA=)
                          2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:98:9b:db:bd:0d:db:bd:e7:e3:b0:db:f7:c5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=a0620d1bf8585dddfc3abc50b43e94c0d612c6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:92:fd:73:a1:c1:c0:82:cc:d6:82:6a:b2:
                    60:d5:84:2f:7b:ad:dd:9a:b6:b9:f2:e5:56:24:63:
                    2b:36:c2:82:ef:19:60:6e:98:16:a8:57:c0:5b:5b:
                    ab:bd:ac:39:71:73:f7:26:62:3b:5c:ee:ba:73:a8:
                    ca:18:24:7e:94:41:cc:9f:d9:f8:3b:46:54:c1:2e:
                    3d:84:91:09:e8:ad:85:b8:ba:a5:85:ae:17:9e:9d:
                    30:11:57:0d:46:64:67:fc:d4:ee:18:31:66:8f:ad:
                    ac:f3:e3:fd:8a:02:46:db:1d:58:c9:24:1d:36:77:
                    dd:23:d5:95:8b:58:51:1c:3b:f8:b4:a9:d0:ae:f1:
                    7b:e8:f6:65:9d:a3:a0:c9:31:b2:cd:52:ed:a1:0f:
                    28:8c:d3:ff:e6:83:cf:86:39:72:98:eb:13:3d:c9:
                    ef:dc:6c:75:c7:b1:df:cb:09:9e:df:ff:1e:20:2e:
                    35:50:f8:ce:47:cb:ed:22:35:3d:a8:58:47:6b:23:
                    f6:78:6a:49:4f:3b:cd:02:f7:f8:7c:5b:a9:20:b5:
                    88:9b:cc:56:b1:ab:79:17:18:9c:7b:5c:38:51:1e:
                    8e:b9:10:65:f9:7b:cc:d0:ad:02:76:2d:ba:39:85:
                    ca:6d:bc:d3:fe:dd:8a:30:80:92:76:68:88:fc:a8:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:62:0D:1B:F8:58:5D:DD:FC:3A:BC:50:B4:3E:94:C0:D6:12:C6:DA
            X509v3 Authority Key Identifier:
                keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c8:06:d5:a3:e3:06:d9:f2:c4:87:74:01:2a:8b:9f:39:97:
         d6:fc:33:2d:26:65:0d:a1:97:d9:9b:22:56:81:d4:8e:5b:36:
         fe:6b:a0:33:96:61:e4:69:6b:c3:23:ff:f7:bb:57:46:b5:32:
         76:df:dc:19:40:fa:79:44:48:2e:0f:1a:50:c7:f0:99:a8:00:
         be:88:98:8e:11:b0:81:1c:c5:8e:0d:98:5f:e6:7d:1c:5e:c1:
         53:f3:9c:61:53:09:b7:db:fa:9c:59:e0:04:96:48:26:ab:5c:
         85:89:bb:a6:0c:3d:5b:4f:16:d9:d5:11:8d:fd:2c:0e:19:5b:
         20:17:a8:0d:dc:ee:41:64:d5:bf:c1:c6:a0:ea:83:c4:be:e9:
         21:b3:dd:a6:77:46:d1:b4:43:45:2b:30:f4:44:70:54:50:d2:
         94:53:8d:9b:b9:6b:03:f3:8d:93:5e:3e:0d:bf:83:32:17:a8:
         6d:aa:e4:1e:04:29:48:85:b4:57:c4:f7:6b:bd:d3:eb:4f:5a:
         c7:c7:32:be:be:40:e9:e6:b2:c4:55:f0:45:98:f1:8a:83:e1:
         d6:1c:56:9e:79:49:e6:bc:94:30:cb:fb:d6:d4:9b:8c:5f:02:
         89:e2:00:48:57:72:97:85:69:62:59:6b:83:9e:fb:2a:1f:be:
         c7:f9:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----