Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c07cbe-9b0f-4382-b054-7592d289b289/1/x0FhWaiFfMXeEmj_lfTizmFZVUs.mft
File:                     x0FhWaiFfMXeEmj_lfTizmFZVUs.mft (raw, json)
Hash identifier:          HwLADeitI3dg1D5Ccnzkt9VFIztmVbUubWoRXqiIDSY=
Subject key identifier:   C9:00:0C:13:B7:07:7C:FE:47:35:4F:7B:EE:A8:7C:07:9B:C0:D4:A9
Authority key identifier: C7:41:61:59:A8:85:7C:C5:DE:12:68:FF:95:F4:E2:CE:61:59:55:4B
Certificate issuer:       /CN=c7416159a8857cc5de1268ff95f4e2ce6159554b
Certificate serial:       01948E50D57582AA0E704625DF1807DE05DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0FhWaiFfMXeEmj_lfTizmFZVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c07cbe-9b0f-4382-b054-7592d289b289/1/x0FhWaiFfMXeEmj_lfTizmFZVUs.mft
Manifest number:          0A10
Signing time:             Wed 22 Jan 2025 14:00:49 +0000
Manifest this update:     Wed 22 Jan 2025 14:00:49 +0000
Manifest next update:     Thu 23 Jan 2025 14:00:49 +0000
Files and hashes:         1: x0FhWaiFfMXeEmj_lfTizmFZVUs.crl (hash: EeMo9aGTPBKKrOW8FaWHEXXw/5fCxwgIC8k+sk+gL5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:50:d5:75:82:aa:0e:70:46:25:df:18:07:de:05:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7416159a8857cc5de1268ff95f4e2ce6159554b
        Validity
            Not Before: Jan 22 14:00:49 2025 GMT
            Not After : Jan 23 14:00:49 2025 GMT
        Subject: CN=c9000c13b7077cfe47354f7beea87c079bc0d4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:4a:bf:79:09:8f:9a:27:c3:2b:d1:3d:0e:
                    5d:75:54:0b:a2:68:a4:14:c0:b4:37:6c:27:b9:31:
                    8d:e6:80:e7:75:c1:5e:68:da:75:15:0a:df:82:78:
                    b1:99:b6:14:46:83:04:e1:a3:73:99:ed:03:d3:3b:
                    10:bb:21:fc:7c:9b:41:68:e4:17:71:ef:35:83:65:
                    38:d1:47:76:09:d7:e5:7f:64:ab:56:bb:f9:e6:59:
                    f1:c5:96:3e:d7:1e:78:b6:ce:bd:1f:ce:b7:c9:06:
                    bf:0a:34:fb:9c:35:c2:cb:1d:0e:7b:17:a1:13:1e:
                    6c:7d:b6:77:76:2b:c9:7c:69:05:03:62:14:a7:a0:
                    f8:42:dc:6c:76:aa:29:f0:bc:65:86:0b:61:ff:a1:
                    df:d6:0c:3e:70:52:8f:16:b6:5b:eb:39:a0:5b:03:
                    63:c2:12:ba:46:88:40:aa:12:ae:cd:8c:96:03:c9:
                    2b:b9:d1:62:4a:cd:5f:c6:c0:10:3a:e2:5e:8f:5f:
                    7d:0c:c4:a7:14:af:3d:b6:f4:4e:b8:e0:05:1e:88:
                    b2:d5:fe:40:b7:f6:59:03:89:ea:00:ea:dd:c3:96:
                    98:94:dd:61:d5:67:cc:e4:bf:d5:b2:64:68:88:af:
                    a6:41:0c:11:23:8f:d0:e6:0d:8f:84:d6:ac:38:0e:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:00:0C:13:B7:07:7C:FE:47:35:4F:7B:EE:A8:7C:07:9B:C0:D4:A9
            X509v3 Authority Key Identifier:
                keyid:C7:41:61:59:A8:85:7C:C5:DE:12:68:FF:95:F4:E2:CE:61:59:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0FhWaiFfMXeEmj_lfTizmFZVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c07cbe-9b0f-4382-b054-7592d289b289/1/x0FhWaiFfMXeEmj_lfTizmFZVUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c07cbe-9b0f-4382-b054-7592d289b289/1/x0FhWaiFfMXeEmj_lfTizmFZVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:e6:0a:7f:c5:d6:71:41:0f:ed:c1:fc:b7:60:d6:52:b4:
         11:c3:d2:66:0f:59:89:83:1f:7f:2a:0d:71:25:a6:50:32:0b:
         02:7d:dc:c5:f3:f9:ec:6d:5c:c3:6a:1e:3f:d9:c3:7c:ba:9b:
         cf:10:c5:68:c7:11:50:bd:c2:43:d1:ab:c7:26:4c:c1:2d:fb:
         59:67:42:f7:32:90:19:d8:85:10:38:e8:7e:e1:39:b6:b5:6d:
         e2:3a:0c:ad:c7:5d:46:df:cd:14:90:3c:13:50:53:87:2d:56:
         4b:60:39:a4:e2:32:b4:01:43:31:a1:63:0a:b7:dd:6b:76:d3:
         c5:60:bb:d1:7e:ac:78:21:67:42:ef:5b:87:70:24:b3:b8:4d:
         45:cd:50:96:33:00:17:31:d6:36:d1:28:cd:3c:ab:96:81:8a:
         2a:c3:9a:04:0f:01:9e:b6:e3:70:98:39:41:d0:69:f4:4a:de:
         c4:ca:5e:a2:2f:b1:76:93:9f:63:9c:3a:d3:a5:d9:15:7d:81:
         c3:e6:0b:70:d1:db:1a:95:b0:2d:a6:aa:90:55:96:8b:49:08:
         c1:91:c4:a4:c3:25:58:8d:5c:29:0e:0e:94:04:d4:29:28:ed:
         4c:53:c4:a7:2e:48:94:f0:85:79:cd:4e:89:2c:29:eb:d5:47:
         d9:56:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----