Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File:                     cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier:          Z7Hl+d+yEzEDCysiuotlK3NmnjlzQNuVz+lXAdGPZ4E=
Subject key identifier:   AA:38:AE:B9:EF:36:96:E1:4B:37:99:AE:4A:70:BF:0A:EB:8D:8A:B0
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer:       /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial:       01962E61EC063A6B2F2B335460E758A82C36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number:          0F2B
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: F6TRgo1Qxqb0z2HOICITaJq6vVA.roa (hash: HB4jpWzWtSDjiUJivZqFCyvc7yAlpLdjecgjjSvTmVc=)
                          2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: R8BvOQqYyVH7jxq+UGfPsOkKmPfoAG8BTtfYrRB3PHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:06:3a:6b:2f:2b:33:54:60:e7:58:a8:2c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=aa38aeb9ef3696e14b3799ae4a70bf0aeb8d8ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:49:00:e3:57:a6:1a:04:46:b5:75:6b:39:
                    19:ec:19:8b:4a:c0:14:08:6a:56:e7:94:66:46:2a:
                    0e:4e:96:fc:41:c4:50:27:23:b4:85:3a:dd:e0:b0:
                    d4:9b:38:93:4f:51:b0:77:a0:6b:c8:84:6e:01:c8:
                    4d:05:67:0d:89:7e:b6:b0:e6:0b:2c:1a:76:b8:b4:
                    47:12:b1:dd:c5:e6:70:90:d0:67:f3:7b:b9:10:ca:
                    a3:4b:61:b4:26:4c:20:80:9d:8e:12:92:dc:32:88:
                    3e:61:54:fa:64:17:f7:3a:31:e2:56:16:43:ec:31:
                    7f:9d:7a:94:be:9a:cd:72:c3:46:f9:f1:cd:91:b3:
                    01:c6:f5:17:01:7e:2a:34:ab:16:55:d8:62:5f:81:
                    4c:0e:36:c9:7a:f9:4a:2c:eb:af:3c:09:2e:7c:49:
                    08:14:bf:be:cf:97:50:d9:5d:59:e2:1a:41:fc:1b:
                    44:99:e2:22:81:a9:fc:1f:88:2e:26:63:3e:87:43:
                    a6:12:bf:0a:ed:32:c3:7b:dc:86:22:c5:ce:20:fc:
                    48:d4:51:2f:6a:3e:ee:48:53:20:90:66:e3:9d:52:
                    1b:bf:50:b9:24:88:e2:cd:c9:6b:9b:4e:af:25:28:
                    0d:a5:de:bf:15:b0:67:9d:d6:7c:ec:d0:df:b2:70:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:38:AE:B9:EF:36:96:E1:4B:37:99:AE:4A:70:BF:0A:EB:8D:8A:B0
            X509v3 Authority Key Identifier:
                keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:d2:9d:5c:cb:47:c8:24:d4:c5:d6:b0:92:d9:cd:30:39:
         b6:e2:09:79:d6:67:e1:45:9d:25:ef:24:77:0f:89:44:37:ef:
         8d:2e:41:17:ed:e8:1c:62:8c:91:58:f3:f5:93:5a:e0:85:7b:
         97:21:d2:30:80:70:26:27:21:be:5e:d2:cb:fa:57:0e:1e:df:
         fe:10:31:14:2a:ce:73:a8:78:34:da:6b:4b:82:55:72:2b:cf:
         b9:3c:fe:01:15:23:64:15:f6:9d:2a:8a:2d:68:fa:b7:3b:31:
         c7:99:fb:97:40:f9:c0:00:7d:68:1e:a5:d5:38:6b:64:a3:02:
         f7:0a:c6:6a:58:0c:e8:bd:38:3f:72:12:c3:eb:44:48:c2:f1:
         ed:90:9e:65:f6:4f:95:2a:3e:08:3c:cc:17:09:75:a0:ee:1d:
         1b:ee:7e:af:6a:da:4d:f8:c0:ad:72:5b:a1:3e:ec:86:b0:bd:
         7e:c2:58:cc:cc:fb:f7:77:ba:b4:0d:47:d8:f9:ab:14:41:2c:
         de:14:15:2f:d3:9b:df:8b:5c:61:ce:10:ac:20:b4:ea:ae:93:
         0d:fb:a8:1d:73:d2:1b:6c:13:cf:b7:57:43:6c:b8:f9:c4:ca:
         db:16:30:5b:57:17:4b:1c:fb:8f:c7:f1:cd:05:2a:3e:28:b5:
         f0:0c:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----