Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File:                     CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier:          E5Auscud4+GivQAwqsWxWbmyz4uawy7CO94ANJFjFGY=
Subject key identifier:   CB:19:B9:D9:F2:47:E9:ED:BA:FF:61:38:0F:E5:13:F4:01:2B:AD:A3
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer:       /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial:       01962F746C9F1CC6E2D448B03D512E612634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
                          2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: 5mnDU8Bgi9dSfqW78P5wrVXJC/asGlbncl8j4MNEjxU=)
                          3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6c:9f:1c:c6:e2:d4:48:b0:3d:51:2e:61:26:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=cb19b9d9f247e9edbaff61380fe513f4012bada3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:34:40:da:f3:2a:5e:6f:49:81:f1:fe:39:
                    71:1b:a4:a7:98:f9:d0:14:9f:dc:35:6b:11:e4:ff:
                    14:f7:a0:0b:13:c3:4f:da:75:ec:14:9a:ce:bc:3b:
                    73:8c:c0:38:45:75:2b:3b:dc:23:42:93:a2:b0:e0:
                    18:d2:de:e6:62:f3:0e:95:3b:f4:fc:04:a3:b9:01:
                    63:be:80:e7:3d:d3:ae:de:4a:21:60:f0:ac:8a:d2:
                    b6:2c:f1:f3:7f:4c:f0:d6:89:5f:9c:a1:28:e8:f9:
                    a6:0c:47:45:0a:44:12:16:e5:41:76:4f:c8:19:0d:
                    a3:df:f9:76:49:9c:83:2e:bc:1a:23:e8:35:c5:b5:
                    23:84:df:b7:6a:7c:8d:ca:19:79:44:ff:f2:cc:f0:
                    ec:2b:f8:f2:6d:22:07:a7:cb:a1:b6:7f:c3:75:40:
                    7d:cc:52:4d:37:21:1c:a5:a7:a2:a8:f5:80:3f:61:
                    09:59:9b:26:32:f1:ec:8d:5e:8b:43:23:38:b5:4c:
                    87:bc:d6:59:cc:59:2a:35:13:ca:24:03:aa:f6:48:
                    36:86:8f:d7:91:a9:f6:ea:1e:4b:91:af:3f:9f:05:
                    2a:e0:6d:af:7e:6f:85:3d:eb:73:68:ed:cf:2b:d8:
                    2a:c6:a7:bd:71:67:d9:ee:52:17:f7:07:0b:e3:b5:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:B9:D9:F2:47:E9:ED:BA:FF:61:38:0F:E5:13:F4:01:2B:AD:A3
            X509v3 Authority Key Identifier:
                keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:fc:11:d2:7e:c9:40:f4:f0:4d:3c:b5:a1:9b:bc:59:37:
         e5:4f:88:ef:90:da:06:13:56:79:2c:5e:77:23:62:21:3d:45:
         75:8c:8f:b9:4e:10:17:03:5e:c2:11:ca:ba:8c:ed:c2:5a:c5:
         85:2c:ad:1d:98:8f:74:8f:fb:b9:fb:b0:36:81:d1:01:9f:bc:
         d1:7c:1b:3c:44:3f:0b:12:dc:20:a9:c9:d5:84:d2:70:c9:7d:
         8d:90:79:9d:74:0f:79:5b:cd:76:09:6c:ad:28:d7:c1:05:96:
         4b:85:8f:bc:7f:76:dc:7b:d1:99:81:8a:01:05:80:0e:61:f2:
         69:3d:2b:ab:ea:99:09:b3:f0:07:4d:bf:0b:16:24:14:ca:b6:
         ca:4d:83:35:99:0e:61:53:99:4f:22:7a:29:32:57:6a:ae:a5:
         7a:49:8f:62:6c:13:39:86:3d:c1:1f:e6:d6:82:5c:dc:9a:d1:
         5b:7b:8b:0b:f7:79:39:6c:f2:06:b8:db:ff:ea:b6:c4:ec:b9:
         e7:d0:cc:1d:b2:71:c2:2b:cf:79:c6:bc:49:a1:a4:5b:6f:bf:
         77:24:9f:c1:64:ba:0a:08:6a:33:a6:3e:cd:ab:af:01:d4:5d:
         b2:6b:46:05:c2:ef:5f:2f:5d:bb:fb:fe:e8:fe:ae:ac:3b:d9:
         18:71:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----