Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
File:                     C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft (raw, json)
Hash identifier:          ZKaLsXocKZWmevMoAbas+XmhI6ubl1fTDLlkiBUlfmQ=
Subject key identifier:   80:68:92:F0:B9:8F:42:6B:2C:04:19:F2:8E:77:07:72:7E:FE:1F:42
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       01962E617DFA544AE7EFADF5E9C4478B76FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
Manifest number:          08DC
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 0R7qlpggNu0m26niM6erbXxYeHM.roa (hash: OxiLF9x0YYjLKJb8tbqbd3VHeJ/ObZslL98x/IEw1IY=)
                          2: 5JWwWMcuyVYOaM5wTK2AKc996ao.roa (hash: xjor4B9xYep/0UbImKPt4c2KMWlwoQQAJ1unLV0n+dY=)
                          3: 8J2x4vo5iqf1YO8Yjh9Q9fbsa1M.roa (hash: e13kSkxfq6F8HgarW6Z5ZhoBlPx+9OindbCN0l0XbQ0=)
                          4: 8SoxTRgx4yZX3pysrwfnU5abS_k.roa (hash: hAalayBLNiuoYY9mruU0p+ymjoKA5i5z6o4MgQeI6mw=)
                          5: C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl (hash: tND1lsj2bRyZZgn8H516xoxjtVbKve07kPbV9qKQN+0=)
                          6: IXaUBKmjxIWWLX0WChkXZJwJ3wI.roa (hash: u1CLpqf4y0nD5SbcshlkaRSHKVJbo6klJncki5Ik5bk=)
                          7: M4Jv3Sh9kH6glCggHSZejNULYjA.roa (hash: 8/qGBQWt2IjwfplKSmXmJ0SqW8+ks7O0TJauJ5vtOmM=)
                          8: TjYZVXxKOa8EVyxrnZD7NzmCZdo.roa (hash: /JIVtM3Gao9wCw2j1cR6n7NvExz/Ot1NMbQjW5Wq054=)
                          9: kBsGsKPDw5KOW7ekZNCFpFwFVYw.roa (hash: /R0T/0RMAuzqIkqwYYYz/q3ulggvCfwcd6sMsiuxOI0=)
                          10: sJYMwo200kc_JOEUu8LgshH8u4E.roa (hash: ZSBFSQniA3kGtcm+Z+BZhg6dXJBYL9d1swTV3ijAXis=)
                          11: u-9y-LM7GouEYwc1w_OBFzaWlkU.roa (hash: TFxIXc3wdG9by6im/gP7SNpYZHKPr5Ng6frLoi+SwRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7d:fa:54:4a:e7:ef:ad:f5:e9:c4:47:8b:76:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=806892f0b98f426b2c0419f28e7707727efe1f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:6b:d1:e5:67:72:51:81:61:b0:30:71:d6:
                    0d:96:00:9e:5a:1b:cb:7d:c9:52:b0:e8:60:90:39:
                    58:ec:10:8b:7d:5e:74:ff:30:ef:1b:ca:6f:de:23:
                    a1:df:8b:0f:59:42:e4:d1:7f:b9:ec:66:5b:e5:c6:
                    91:5c:55:a4:44:ec:a1:ac:41:03:25:7c:05:18:9d:
                    07:e9:51:e7:96:cd:f8:5a:93:9d:bc:01:76:28:3f:
                    9c:93:d4:95:65:15:64:e4:84:55:c7:b4:4a:71:0b:
                    85:d3:18:cd:75:7f:c1:d8:dc:ae:8c:bc:b1:ed:40:
                    2d:b1:57:9f:f4:d5:ae:63:19:35:b9:e1:b4:e8:ac:
                    1c:5a:aa:33:d7:e0:4a:13:36:80:89:88:dd:e6:e5:
                    62:fe:0e:e8:10:88:ec:8a:20:88:c4:88:ae:44:4d:
                    e8:af:92:65:56:9a:bf:20:f1:e7:2d:38:f4:79:cc:
                    0d:f2:64:5f:4b:93:9e:39:73:6b:0c:5a:ca:25:e8:
                    15:b7:cd:f1:01:97:94:53:7b:de:c8:ad:e2:43:5a:
                    40:be:c7:55:77:9e:43:86:4e:cc:67:bd:41:bf:93:
                    55:d5:25:57:75:0e:77:df:45:9b:46:6d:f5:95:be:
                    84:9a:fc:31:2a:48:76:03:9b:7e:0b:93:8b:51:2f:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:68:92:F0:B9:8F:42:6B:2C:04:19:F2:8E:77:07:72:7E:FE:1F:42
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9e:a4:3d:3f:23:6f:4d:d9:6e:ac:46:83:7e:c0:2d:b1:b2:
         01:cc:ea:e4:9f:5a:24:f6:4a:fd:df:46:73:a0:fa:4c:57:a0:
         98:2e:a9:23:92:4e:d3:84:e7:49:6a:e2:5e:cf:8d:fc:85:c1:
         5a:ca:b8:d6:95:20:eb:60:c2:52:53:0c:89:20:00:6a:b2:09:
         ba:4d:e9:1f:1b:bf:3c:6a:82:0a:3b:9a:5a:d0:71:2a:8b:47:
         2d:39:9e:90:82:94:52:84:2e:98:87:f4:23:6d:09:bd:21:72:
         04:de:5a:d2:64:db:75:fb:33:8f:07:c2:1e:51:78:f8:10:75:
         e0:f7:06:e4:f5:ee:02:9d:31:b7:d4:90:bd:ce:b5:87:4d:d0:
         9a:0f:84:6f:8f:a5:e8:32:60:d0:6c:fe:5a:ca:71:c5:9b:bb:
         4d:82:44:4f:da:e7:2b:a4:7e:3f:a0:60:e2:5a:25:33:0f:26:
         81:c5:62:23:08:a2:fd:1c:78:c4:fc:a2:4c:03:70:90:1c:5d:
         36:8c:17:8e:5c:db:f3:f0:88:e6:9a:b4:2e:fd:36:3c:93:41:
         a8:25:30:01:a9:38:e7:a8:46:99:1c:ba:59:ad:55:71:54:b5:
         69:c1:ce:3b:82:65:ac:3b:a8:1a:19:f9:6a:45:50:05:65:b4:
         8a:81:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----