Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File:                     C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier:          CwE+jc6bzLKzLNbc5OqAN/sshVyiEFFwAfHoE2Y8bGw=
Subject key identifier:   8D:DE:44:6C:81:92:75:E0:B7:44:3D:8D:47:41:30:A7:3D:21:B7:A1
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer:       /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial:       01962F74A351AC0C6C7C0304951A94170CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number:          0DB8
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: rTQ30gqa0woSN/ImuOn6CHT1fnz8B6rk2xogIz3QaFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a3:51:ac:0c:6c:7c:03:04:95:1a:94:17:0c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=8dde446c819275e0b7443d8d474130a73d21b7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:09:88:69:c2:c0:62:19:89:c7:93:06:b4:
                    1a:0d:36:48:19:0c:e3:de:23:fa:08:54:99:3a:4c:
                    9f:19:6c:6f:ed:f9:13:43:66:6d:06:73:84:5f:17:
                    2e:70:2c:fe:e2:98:e2:ad:b8:09:8a:13:4d:aa:82:
                    7f:9f:c6:cc:f9:82:77:3b:90:38:f7:60:fd:d0:91:
                    b5:78:f2:06:58:37:0b:87:75:fa:fc:1d:10:51:1f:
                    e3:e4:2b:0c:e7:57:8a:f0:e4:4c:5c:7a:75:26:71:
                    9a:7f:cb:da:ee:1a:fe:a7:f1:6e:8f:5f:c9:f0:95:
                    7e:88:4f:12:21:29:c5:71:18:8c:83:bb:9c:41:fc:
                    f1:f9:53:0e:41:df:00:a4:72:84:4e:7b:2e:35:57:
                    4b:1b:92:bb:46:dd:f0:1b:35:a9:12:f9:4b:43:04:
                    74:5b:0a:7e:54:cc:c7:dc:10:07:a4:68:50:e0:30:
                    85:98:d5:78:3f:9e:3d:27:6a:63:c3:d6:ea:aa:fa:
                    0f:71:56:d3:46:50:7a:80:7c:85:3b:3e:7a:cc:72:
                    ab:59:a2:29:7a:fa:17:8d:7f:7f:ac:0c:c0:63:13:
                    bc:7f:03:ce:ee:91:1a:98:c8:23:60:b8:f5:81:a1:
                    c5:ff:87:c0:85:7c:cc:48:d7:ba:e1:e3:cc:c5:8c:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:44:6C:81:92:75:E0:B7:44:3D:8D:47:41:30:A7:3D:21:B7:A1
            X509v3 Authority Key Identifier:
                keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5e:59:b6:bd:c2:cf:44:09:fa:3b:e4:82:11:33:c8:29:45:
         49:22:ee:0b:00:0c:53:07:ad:8f:f5:5c:79:ea:10:c5:bf:54:
         0c:48:dc:03:80:e8:27:14:74:dc:f2:6c:d2:a0:2a:f2:31:d7:
         1f:55:14:d8:35:ec:fb:bf:ba:c7:1a:b9:45:95:b6:ef:d2:df:
         3c:fe:6c:e6:8d:ea:be:07:df:e9:c6:f2:94:60:2c:25:60:f7:
         e9:4f:b7:a2:a9:f3:f1:9a:9f:82:ca:2b:01:42:dd:e7:ee:a1:
         44:91:2a:8d:74:0f:01:08:c0:c5:a1:a0:3b:11:f1:c7:24:89:
         e4:1c:79:8e:e9:28:3a:37:69:da:79:5c:1b:ac:1f:01:a6:c7:
         83:35:e7:e7:46:eb:8c:e6:4b:5d:c2:14:bd:0a:b3:ae:36:07:
         73:92:b6:a0:86:13:ff:62:28:fb:19:b1:02:21:13:84:e9:94:
         54:e6:39:f8:24:99:2f:14:87:dc:30:6a:f4:dc:f8:82:6f:c2:
         5a:19:67:9d:79:8c:78:30:83:25:a1:0d:60:a4:21:ec:b4:3c:
         0b:9d:d6:62:79:80:91:b3:1f:5a:33:3b:20:42:1c:4c:d9:cb:
         15:ec:c5:7a:ba:d4:fd:94:ab:ae:23:1b:25:3e:cd:60:5d:68:
         61:72:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----