Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File:                     k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier:          Ej+ziYrH0rFQ7UY8cy6KD/VfZvVC5Vbad3bqZ2mKBY0=
Subject key identifier:   0C:CE:50:72:CB:33:AA:7A:4C:E7:A0:A8:27:E6:CA:B8:DC:6B:36:5A
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer:       /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial:       01962FAB15D027E01B61967F3AA22AF2D81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number:          0C87
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
                          2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: xRA0/Ej/ROE41D1wpUMqk2mV7VJzqUPREhMoQmsfFY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:15:d0:27:e0:1b:61:96:7f:3a:a2:2a:f2:d8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=0cce5072cb33aa7a4ce7a0a827e6cab8dc6b365a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:ca:c5:a3:27:f2:93:2a:a2:90:fd:14:d6:
                    c9:19:e8:3b:f9:1a:c5:c0:5c:7a:6c:d7:b6:f1:d1:
                    d0:51:6c:93:67:e0:9f:a3:ef:e9:c6:4f:af:ac:eb:
                    b3:9c:82:e5:7d:d1:c2:f6:bd:92:ef:86:6f:0b:17:
                    e7:31:18:f8:8f:8e:ff:3f:3e:59:e0:b9:aa:f9:43:
                    dc:70:de:a0:d9:8e:fc:3f:ef:18:08:a1:b9:da:16:
                    b5:b4:6c:a2:78:28:2d:89:0e:96:58:47:72:05:5c:
                    ad:83:75:ba:6f:40:e3:b2:f7:d0:84:71:a2:51:a1:
                    0c:5a:f7:b6:14:af:84:1d:f3:f0:ff:a3:1a:79:84:
                    4d:63:e3:0b:20:c5:a0:2b:11:8d:24:fa:19:46:5a:
                    5b:89:bc:06:a1:6c:16:a4:44:ca:36:59:be:f9:6b:
                    5e:ad:b7:70:37:fd:07:dd:42:3c:85:69:59:02:0b:
                    30:92:aa:d7:2b:a3:21:57:13:00:27:59:c8:09:06:
                    4a:3d:a9:1f:51:c1:e8:70:03:fe:91:f9:64:76:73:
                    30:b7:ec:36:04:ed:66:4c:5a:4b:49:0d:a5:5d:cb:
                    52:2a:35:4c:e7:5e:8c:ac:83:b5:e9:42:b5:8b:c3:
                    1f:9c:be:69:d5:99:4f:1a:52:a8:ee:49:06:79:92:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CE:50:72:CB:33:AA:7A:4C:E7:A0:A8:27:E6:CA:B8:DC:6B:36:5A
            X509v3 Authority Key Identifier:
                keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:e7:65:f9:87:02:92:06:4b:d0:cf:51:ae:16:07:3b:a0:
         4a:ff:d5:5b:77:76:01:5a:7d:91:ea:8d:42:88:a6:0a:7f:e8:
         4a:d0:d2:46:5c:de:e3:ac:14:89:84:b9:d6:e8:6c:87:a6:d9:
         51:5b:c6:f4:24:58:86:7c:55:25:23:81:09:90:54:b6:9a:3f:
         70:bd:85:bf:71:b6:bd:97:94:52:13:a2:39:42:1c:9c:ed:1a:
         3c:9c:b6:43:43:81:72:b8:f6:58:d0:57:79:21:c9:6a:22:f0:
         f1:54:6e:a9:d1:8c:b4:93:58:32:dd:9b:a9:0d:67:1b:05:3f:
         80:fb:6c:1f:f1:2c:4a:d8:7e:2a:d0:96:b5:01:68:03:14:92:
         e4:86:d6:c1:50:d5:9c:96:48:20:1e:ae:6e:00:a4:19:11:40:
         d0:ca:f1:16:f6:2b:29:ca:5d:e9:15:2f:da:ab:26:56:73:23:
         4e:6f:cf:6c:e0:8c:fc:85:c8:ea:69:b6:f2:8e:eb:8a:74:57:
         a3:a5:a8:61:e3:01:10:ea:42:af:6b:bf:54:f4:d2:ac:09:87:
         45:66:d4:a5:ce:df:04:21:bd:09:a0:ac:a9:c6:87:8e:de:cc:
         e4:6f:52:1d:b6:66:fd:2b:6e:39:d6:d7:73:96:c2:f6:1c:92:
         b0:8d:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----