Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File:                     CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier:          2wXZCoPEarxVhkBbMiN3Qrn0bzbqFAhXq57uMoPtNEs=
Subject key identifier:   97:51:B6:00:07:F5:50:A4:58:9A:14:B9:1D:B5:A1:FE:76:78:8F:EE
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer:       /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial:       01962F3DC6654AB4CDE0FD9CE1B41E54C6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number:          078C
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: xwkXIfG/X7ta+cWSpSn8oBYEV+O/C1A2sUznn65ubeo=)
                          2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c6:65:4a:b4:cd:e0:fd:9c:e1:b4:1e:54:c6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=9751b60007f550a4589a14b91db5a1fe76788fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:46:7d:03:c9:6d:83:38:42:be:10:2f:7a:
                    f2:2e:96:82:e4:29:42:9c:ef:1a:95:60:a2:51:c5:
                    7f:df:78:81:55:c2:5b:e9:01:ae:20:41:62:01:ff:
                    f8:ee:73:d5:12:d3:f0:a1:d2:0d:70:20:39:06:26:
                    95:6b:e4:59:a4:e5:8f:a9:76:6f:56:ce:c4:95:95:
                    2b:e3:4a:10:55:25:b6:c3:ff:1f:7f:6b:17:18:ae:
                    fe:68:17:ea:fe:f3:16:72:2f:b2:b6:43:71:19:cf:
                    c0:d6:85:3a:c1:4e:b3:1c:e5:da:6a:5c:1f:7f:89:
                    d9:de:b7:f7:24:fc:2a:fb:ad:49:44:d1:b8:99:30:
                    38:fd:96:a3:f2:14:e3:41:89:68:bc:d0:4d:4e:20:
                    8b:ff:c5:8e:f5:1f:18:16:c0:d3:94:eb:85:be:58:
                    7a:74:6c:d6:02:ec:6e:ae:54:8a:52:1d:c8:53:b8:
                    15:67:4f:c1:a9:87:1e:b5:d6:dd:0a:83:f3:07:2c:
                    88:47:68:75:5a:83:08:a6:67:8b:68:f9:73:ca:9b:
                    8f:44:17:6e:ff:7a:fe:94:64:af:37:5b:c3:bc:4b:
                    a7:ff:00:97:98:70:5e:a7:fa:57:5c:3d:e7:69:d9:
                    e4:0e:38:09:e0:06:a4:73:e7:da:6b:f2:f0:ab:f1:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:51:B6:00:07:F5:50:A4:58:9A:14:B9:1D:B5:A1:FE:76:78:8F:EE
            X509v3 Authority Key Identifier:
                keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:dc:4f:cb:12:66:2a:f5:46:41:f4:2f:5f:c8:dd:bb:4e:08:
         4a:5a:91:47:0a:c7:02:89:ff:03:6b:c2:32:4e:69:62:f4:29:
         e1:6d:e5:e8:7a:9e:df:45:35:41:6d:ab:ac:e8:8a:ad:e9:73:
         c7:41:88:e5:3c:bd:3e:69:64:98:cd:d9:b6:92:20:81:bc:46:
         6f:73:27:52:13:73:bc:b8:33:25:52:df:ee:8d:1d:5c:2c:f4:
         6b:c6:a9:00:1f:4b:de:98:53:04:ba:19:bd:fc:a7:6e:87:e7:
         2b:59:73:88:37:50:ea:b8:f0:da:55:c5:49:91:ef:55:88:8d:
         4d:45:41:ef:cd:e0:87:b8:34:0e:77:a8:11:7d:44:95:2d:9c:
         77:62:4f:f0:fe:6b:cf:62:b8:1d:bf:dc:21:97:49:3c:02:01:
         a4:1d:96:ab:60:0a:a3:bb:3c:80:6e:d1:7c:ea:d0:0f:58:e6:
         a8:9c:12:00:62:af:86:7c:c2:fa:f4:8a:84:9d:3e:da:de:16:
         0f:77:6d:06:f7:d1:0b:a3:67:fb:c5:73:1d:b7:c7:60:8f:79:
         af:64:fc:4b:6c:bc:a0:03:3e:51:3f:d5:07:2f:60:4a:1a:ac:
         6b:64:62:16:54:87:40:02:2d:a4:80:83:bc:3d:22:8b:51:20:
         3a:e7:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----