Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File:                     CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier:          iYLw9MJrEw6LS/siELBdYkLU47RZGWB76LDbGnblR2E=
Subject key identifier:   C1:4F:D1:A3:3F:47:64:8E:6F:FC:94:45:6F:A5:4C:7B:CF:FB:26:C7
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer:       /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial:       01962DF3E224B29F0700EBB23FC2AFB2631A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: 6HOoB-xFW732_7qK2qidP05AsQk.roa (hash: hf9bIGWJZ6Oc66PzG2IxognJ3wYESBBpOFaaQJOqtDo=)
                          2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: 89FFvvywaB2X/3qlLyLjP8cX6u3lQeDt8uq6eZ19yY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e2:24:b2:9f:07:00:eb:b2:3f:c2:af:b2:63:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=c14fd1a33f47648e6ffc94456fa54c7bcffb26c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:17:22:93:d1:92:c0:84:f8:90:a2:ae:47:
                    62:9b:49:96:3c:5c:f6:7d:ac:48:0a:28:1a:a9:1b:
                    3f:53:3a:f2:33:f6:7a:65:a6:6d:22:87:14:fa:1d:
                    bc:4c:fc:0b:2f:09:30:bb:65:db:da:ff:52:a9:5b:
                    b7:b1:d8:ae:21:3d:2c:46:de:64:de:dc:ca:bf:ad:
                    72:3d:ec:b4:fb:0b:47:87:03:b2:93:29:7e:75:c9:
                    77:09:cf:a4:ab:f9:5f:74:75:7a:21:4a:9a:9d:ce:
                    c0:c3:d9:64:03:33:57:58:1a:1f:0b:58:6f:f5:65:
                    d4:8d:e7:78:3a:fd:30:1c:84:25:85:8e:06:23:fe:
                    d9:7c:e4:98:5e:74:2d:69:0d:3e:43:4e:7c:01:35:
                    ff:85:91:cc:f1:83:4f:72:c5:51:7c:92:32:cc:d0:
                    65:54:b0:d4:94:1f:05:02:0b:3e:3e:d3:ef:2e:16:
                    52:81:68:3b:5e:fb:7f:2a:59:cb:32:c2:7d:61:24:
                    bb:fe:37:a2:4a:9b:91:35:c6:7f:36:48:3c:07:ff:
                    cc:a8:67:b2:fa:10:dd:1c:f0:fc:e6:13:92:2f:2b:
                    99:6a:62:f0:a1:83:ea:82:47:3b:06:09:98:6b:7d:
                    8d:59:21:87:3d:d1:91:e2:b8:a6:cd:8b:bf:35:94:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4F:D1:A3:3F:47:64:8E:6F:FC:94:45:6F:A5:4C:7B:CF:FB:26:C7
            X509v3 Authority Key Identifier:
                keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d4:a9:bc:f8:93:32:8e:8e:2c:90:92:dc:c3:a7:0c:b2:69:
         10:ed:b6:08:bb:d0:d1:d5:95:3c:2e:f2:c1:b1:f2:e2:79:60:
         1a:52:2c:e8:cf:a6:c9:cf:c4:da:54:d3:38:ab:b2:95:f1:aa:
         fa:91:c7:ce:f7:f1:14:c4:19:16:fb:31:ee:a4:e3:94:db:6c:
         af:85:85:1c:28:56:f4:bf:0e:56:ae:b2:48:2e:22:9e:4c:ef:
         3b:52:0b:f6:bb:77:e7:02:ec:c4:27:d2:1d:b0:ff:97:2d:fc:
         26:35:b1:67:fa:93:04:c5:c2:33:58:a3:e4:68:0f:a5:5a:5c:
         b1:b9:f6:ca:b1:55:8b:98:e7:61:d0:ff:6e:e2:94:0f:7c:12:
         9a:09:99:c2:01:52:b6:4f:ba:e3:3a:3c:77:d3:78:b3:81:43:
         fb:72:60:4c:d0:35:4c:dc:6e:52:f0:b9:50:10:27:33:0f:51:
         6e:c1:f3:a0:7f:f0:26:cc:a1:53:26:f4:1c:36:7a:80:b8:60:
         34:3f:aa:a0:20:62:8a:bc:f9:46:2e:cd:f1:a6:e3:68:71:33:
         cc:d8:5b:d9:b5:2a:db:7a:9e:cc:82:74:55:01:2a:7c:30:27:
         4b:8c:8d:45:e9:7e:8d:13:18:fa:9f:45:96:48:90:ab:ef:1a:
         5b:fd:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----