Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File:                     CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier:          dWW3BTcCR3NvCFRefOUs5XWqdcmgFR1KeRFseixSUEE=
Subject key identifier:   7D:05:33:0D:B7:24:8D:B9:7C:ED:AD:A6:D8:DF:26:93:7C:1F:B0:36
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer:       /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial:       01962F071791E726F99F4696F8130A95412F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number:          0842
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: 3XEH27g/Sd7k4jsOy2DGtnUNKB1AHVJKlVVqPAYpAH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:17:91:e7:26:f9:9f:46:96:f8:13:0a:95:41:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=7d05330db7248db97cedada6d8df26937c1fb036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:26:bb:a7:69:83:87:ff:05:a7:cf:48:d8:
                    20:1c:6d:90:55:03:1c:b5:c1:0b:30:34:73:8b:3d:
                    d6:88:a3:4f:fe:01:28:8b:8d:13:b8:80:0f:99:77:
                    51:b6:e2:82:f9:04:4b:f1:03:01:e5:f8:2a:2c:9d:
                    b1:c5:f6:9b:44:38:99:23:7f:04:9c:1d:10:e9:59:
                    28:78:20:ef:12:79:32:bc:f7:9c:ef:fc:27:f5:3c:
                    55:c8:ee:e9:b4:3d:f9:a2:1f:31:53:a4:09:bb:81:
                    57:f6:df:aa:b8:1b:b8:f2:7f:fa:45:2e:16:2b:be:
                    59:e2:c8:29:65:c5:0e:d4:97:68:da:98:b6:17:fc:
                    39:33:ab:9d:52:3b:07:20:13:51:98:5a:89:a7:d7:
                    25:0d:e6:b6:88:d4:39:ee:ef:f7:f5:6d:e5:12:a2:
                    c8:19:50:ca:aa:30:8f:12:fb:3b:d3:0e:3f:fb:bb:
                    0b:a4:1b:82:52:e4:92:1c:f5:a6:43:2a:3a:64:72:
                    81:d6:4a:7a:b6:29:ec:91:c9:e2:13:62:5e:b6:e0:
                    c2:a3:d9:0e:47:d0:6d:be:d1:1a:ff:6f:2a:30:f5:
                    db:99:bd:6a:a5:79:1d:11:0b:35:6b:1c:ac:55:74:
                    0d:6b:ae:15:8d:2d:c3:66:63:dc:74:dc:d2:73:54:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:05:33:0D:B7:24:8D:B9:7C:ED:AD:A6:D8:DF:26:93:7C:1F:B0:36
            X509v3 Authority Key Identifier:
                keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ef:55:b9:04:a2:86:82:66:d5:fe:79:1b:1a:df:f0:5b:25:
         5c:9f:d4:d0:f1:e0:c1:33:9d:3e:f6:38:40:00:52:10:69:dd:
         4f:0f:7f:dd:9a:3a:55:e4:a2:e9:b5:18:1d:e6:38:73:0f:34:
         3d:22:09:08:7f:a4:66:19:60:70:ee:8d:02:04:a6:99:b3:7f:
         f3:17:44:94:04:87:3f:4a:76:a3:87:fd:bd:1c:d1:25:b2:df:
         29:da:e2:60:e5:a9:4a:40:88:b0:16:bb:8e:2a:5e:06:a3:de:
         60:c3:47:99:28:fc:d4:85:f1:7b:5a:c9:09:c5:6f:54:a3:df:
         e2:1f:20:4b:4c:31:bd:64:91:a7:d3:d6:96:6d:01:0c:5f:44:
         13:9f:1e:74:1c:bb:eb:ad:fd:07:5f:75:14:6a:8e:3e:5a:b2:
         d8:92:e5:f7:f3:5c:21:1a:be:3a:63:9c:ca:3d:42:a9:64:d6:
         0e:90:5a:fc:60:e3:e4:e7:7e:86:04:31:1b:3d:00:3f:53:e2:
         54:94:ca:db:4b:28:06:01:0a:3e:f9:c0:8a:57:46:66:b3:58:
         26:28:53:9a:d0:82:e7:c8:90:04:05:bc:e9:08:c0:4b:f8:bd:
         9a:09:63:45:b6:88:e4:58:12:07:0a:e3:c8:be:ff:e1:6e:13:
         48:55:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----