Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File:                     C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier:          enliexWX4LhjZccFRZhcQXeVUKSPMpf4Ome3wJFhghw=
Subject key identifier:   8C:22:5E:40:07:94:A9:59:80:27:CC:A4:D3:B7:E7:3A:4A:77:84:52
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer:       /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial:       01962FAB740E90B5CC18BD766A54E7BF21FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number:          0912
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
                          2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: WOe/2uiF78H6cd5ZHBeIVrMnKIqXI7tgBNaDJ+Xg3Ho=)
                          3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:74:0e:90:b5:cc:18:bd:76:6a:54:e7:bf:21:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=8c225e400794a9598027cca4d3b7e73a4a778452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0b:94:00:b3:6f:69:9b:07:cd:cb:c5:45:61:
                    45:d0:80:1d:4e:2a:ef:72:4a:31:dc:7b:0e:7f:1d:
                    f1:22:de:75:67:79:96:18:88:7a:a6:7e:dc:e2:d6:
                    5f:23:8d:26:49:63:52:c0:28:5a:e6:fe:98:0a:d0:
                    e3:e9:e5:f5:79:e3:58:99:a7:c0:8e:f3:fd:a2:c4:
                    ad:79:2e:9c:82:a6:4b:69:21:42:da:9f:27:56:59:
                    db:6a:b9:99:bb:3e:f8:e3:f0:b4:bb:1f:cf:d2:f3:
                    95:85:01:80:15:4d:c4:29:b6:66:7c:71:60:fd:f1:
                    f2:4d:4d:86:1f:11:f8:fc:a1:7a:20:fa:2d:66:89:
                    6a:0f:4d:33:72:c1:29:45:81:14:bc:5b:fd:46:1c:
                    8c:d1:62:96:8e:8e:66:38:4d:85:e4:af:d2:a8:3b:
                    67:94:f2:9b:fe:4d:93:12:69:15:d7:6b:70:e3:e4:
                    30:e6:4c:a1:91:01:0b:38:d0:46:1b:ec:c0:2e:87:
                    7a:34:54:91:8c:6d:d1:ca:db:f0:61:4f:46:46:d9:
                    87:a9:ce:c5:c6:67:2f:ec:2a:11:06:34:a5:bb:b2:
                    a9:a6:0c:88:5f:d5:09:54:c4:0b:13:8a:a7:1f:65:
                    72:6f:db:ca:ef:74:6d:2f:fb:70:98:ad:c3:98:42:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:22:5E:40:07:94:A9:59:80:27:CC:A4:D3:B7:E7:3A:4A:77:84:52
            X509v3 Authority Key Identifier:
                keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:86:41:cd:2b:04:77:86:5a:2f:40:5d:70:3f:2c:41:9e:37:
         71:81:e6:9a:1f:0d:19:29:5a:ac:24:ee:81:46:cb:a0:d1:86:
         32:8d:10:b4:5d:3e:2b:15:17:a8:ab:b8:fa:ef:8c:cd:dd:a6:
         7c:dd:28:d4:09:93:78:7e:f4:1b:87:06:e4:6b:b3:13:cb:4c:
         b0:3a:a4:8f:ee:14:a1:14:3d:aa:8b:77:5e:7e:15:ce:0d:2e:
         49:bd:ea:ad:0f:7b:80:c3:6e:05:25:9c:de:08:5c:79:c0:1b:
         11:66:5f:17:33:53:f0:c9:07:6f:76:56:8a:df:28:10:a6:64:
         b4:d6:6b:4e:d8:88:2a:6a:85:1d:cc:5f:f4:35:76:fd:f2:0f:
         45:91:a8:7d:78:fb:f2:14:26:03:16:03:10:b0:fe:98:1e:a7:
         1b:54:2a:3b:e9:a5:f8:90:40:67:19:15:7e:e8:b9:4c:79:b4:
         79:e5:26:2a:85:b8:c6:22:ee:af:ed:e1:76:ae:e3:d6:74:7e:
         ad:ee:c8:b5:70:f3:ef:a0:38:64:ef:db:0d:ab:23:39:73:72:
         16:23:70:66:01:49:81:da:a8:98:e0:c5:86:0f:e5:b9:c2:fc:
         b8:fc:e4:ae:eb:78:cc:38:0a:a6:c3:73:9d:f7:c8:94:2a:a2:
         33:e8:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----