Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File:                     C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier:          30Y255HG2brJ7YKsBVaPC3SGDNPywNizWxOJg5Bbcyg=
Subject key identifier:   86:FD:84:ED:CA:C2:41:AE:C3:71:FA:30:96:00:8D:E6:1D:52:10:E9
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer:       /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial:       01962E993E69741F221B019CA54FA4F8AED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: vyKiJpqZIhSKm5UGQDDxaGFMNhYGzMfVubKdQLQOqE0=)
                          2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
                          3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3e:69:74:1f:22:1b:01:9c:a5:4f:a4:f8:ae:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=86fd84edcac241aec371fa3096008de61d5210e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:07:9f:4c:17:09:0a:67:45:ea:a4:f1:95:9b:
                    cb:13:4b:b0:ef:90:7d:c7:95:50:18:45:d2:3f:7b:
                    6a:1e:78:f0:75:55:15:d9:d4:18:52:ec:76:08:00:
                    52:c8:b6:3c:0b:cb:de:be:07:7a:25:4b:41:9d:78:
                    36:c1:af:82:3c:57:ed:0f:94:35:e4:93:11:8f:69:
                    dc:df:a0:cc:ac:0d:44:b3:86:3d:2c:09:db:e2:04:
                    27:bf:d3:9f:e3:f3:66:bc:d6:5d:c4:97:2c:44:09:
                    a2:c1:ec:92:3b:3f:0e:fd:36:40:f1:fe:96:b8:51:
                    43:fb:fc:32:eb:43:48:4f:43:7f:fb:9f:ea:f6:ac:
                    ce:10:f0:cd:9b:45:8b:0d:5e:c8:81:fb:62:a6:cc:
                    0b:f6:7d:d4:b2:13:08:0f:7d:ce:1c:11:24:7e:d2:
                    4f:9c:05:e7:fe:39:b0:9a:38:62:b4:a9:1f:ce:ae:
                    28:c3:90:29:37:9a:90:e8:e9:ae:2d:48:c8:be:6e:
                    e0:dd:6a:b8:89:2b:31:c5:73:32:14:78:69:49:75:
                    77:85:17:48:13:fc:4d:8f:32:bd:79:2a:43:76:9f:
                    8d:c6:3f:23:4c:d2:7f:cf:a1:90:07:c1:a4:eb:4f:
                    0c:5c:33:72:13:ce:d4:db:3b:7a:88:9a:e7:38:bd:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FD:84:ED:CA:C2:41:AE:C3:71:FA:30:96:00:8D:E6:1D:52:10:E9
            X509v3 Authority Key Identifier:
                keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:2e:60:3a:ee:d0:9e:8f:46:09:b3:4d:fd:d5:7c:75:52:
         f0:7a:11:eb:f1:ce:5b:10:01:88:07:74:ae:e4:58:b6:25:03:
         5b:3d:d5:d7:ee:2e:f2:0c:bd:be:34:67:01:cd:1b:9d:11:bf:
         72:26:e1:2f:91:f8:d8:a8:42:63:ac:fe:ac:5f:1c:21:01:97:
         b5:29:67:0a:25:72:0c:b2:c2:1a:5e:4f:53:f6:00:7e:95:04:
         d2:ad:0e:f0:9f:a0:fb:92:ea:5a:d4:7c:42:9a:63:b9:76:c6:
         f5:be:ae:a0:7f:7a:4e:a6:3e:a4:20:a2:ec:27:2f:9f:38:20:
         8a:22:98:5e:80:be:fd:30:f7:11:06:ac:a8:09:ba:ca:2a:f6:
         9e:ad:eb:b7:dd:16:60:cf:03:e6:8c:d3:7c:dc:c1:c7:cc:9e:
         8d:29:47:68:2a:37:dd:0a:ca:53:05:82:6e:b5:92:3e:62:18:
         37:bf:31:c4:e7:dd:68:ce:8d:c1:e3:9f:36:4f:e4:49:01:de:
         2c:05:14:68:06:03:5f:ce:d4:ef:b1:08:a3:de:17:e7:cc:f2:
         71:8e:56:df:27:7d:fa:83:e1:1a:6c:c4:42:74:73:f1:13:e9:
         4f:c4:2f:2e:3b:f3:4e:fb:bd:dc:e8:d1:19:41:1e:d1:7f:6a:
         ff:e6:1a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----