Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File:                     mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier:          rmw4q5q+kaLNor0zySXytC4qSCAHpKUNilTcqtvoJug=
Subject key identifier:   CF:83:0B:61:33:15:6C:25:1C:9E:A2:65:65:9B:1A:B6:5B:01:47:D7
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer:       /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial:       01962DF3F97193BE5E8C1C3ABE48A85B45C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number:          0C90
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: rwb+fri1nqO9dJaKnwFHV1tKa/0zuQ8WHdJjHP2Z9+U=)
                          2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f9:71:93:be:5e:8c:1c:3a:be:48:a8:5b:45:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=cf830b6133156c251c9ea265659b1ab65b0147d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:e2:af:d3:1f:6d:7c:76:a7:20:c6:2c:03:
                    2a:67:0d:33:09:8f:8e:d0:3e:6f:2b:f9:1f:20:c0:
                    ca:49:05:84:07:9c:59:c8:b4:45:96:52:a5:0d:1f:
                    7e:a7:23:f9:18:ef:57:91:97:ad:b7:e0:d0:a2:eb:
                    15:14:83:66:52:93:c0:64:3d:d6:07:30:e6:d9:ab:
                    b4:1d:e4:06:da:4d:e6:f5:01:56:28:ef:5d:3f:13:
                    55:78:4d:76:14:dc:0c:0f:47:cc:09:25:e4:e4:d0:
                    2c:62:cf:8b:44:5e:94:b1:6e:d4:7e:5d:94:8c:65:
                    87:5c:7d:06:66:84:c1:3a:66:8a:82:f9:75:6c:1f:
                    98:a6:1c:f0:c6:a6:1d:9c:bc:3f:98:14:bc:87:34:
                    a7:06:b7:ab:31:89:b7:58:45:e8:60:b1:d8:a8:2e:
                    c3:a0:e9:f4:fc:23:e1:fe:bc:5f:af:3d:0e:45:3d:
                    42:5a:1b:03:ad:2f:fa:c9:e9:52:e0:ea:95:ed:3a:
                    c2:30:64:a0:c2:d7:3c:c5:66:82:ea:93:ef:18:97:
                    68:e7:65:26:e7:a2:8b:d5:d3:67:83:08:ad:0b:7a:
                    66:ed:2f:dd:1b:9a:cb:d5:9e:99:f3:3a:d5:3e:e1:
                    f6:65:de:17:a0:51:25:5d:e2:e3:c4:4a:4e:f0:29:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:0B:61:33:15:6C:25:1C:9E:A2:65:65:9B:1A:B6:5B:01:47:D7
            X509v3 Authority Key Identifier:
                keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b2:d5:1f:72:84:71:8d:8e:a5:4b:b7:b5:94:72:ff:14:56:
         88:9f:30:66:f2:f7:38:09:f1:85:b7:a6:a5:ef:84:f4:7b:3b:
         b1:47:3b:2c:c3:00:d3:7b:4a:3f:8f:4d:25:24:e1:73:cb:9a:
         6f:76:28:02:8a:e4:5a:10:63:ab:8a:3f:5c:ad:3f:ae:1b:d7:
         ec:ae:02:2d:e9:b9:73:03:04:9d:23:f9:db:a4:d6:3b:86:5e:
         d0:22:a5:53:b4:de:0b:8e:4e:dc:b1:6a:d7:3b:24:6a:5a:bf:
         9c:45:e5:5c:c9:06:c9:74:a5:5c:63:24:98:6d:66:a6:59:3d:
         ce:ba:1c:73:9f:07:a0:ba:e4:97:de:08:01:cc:1c:f4:bd:92:
         51:e0:1f:c9:20:6a:0f:c8:34:9e:52:5c:18:44:3f:7a:fe:8d:
         92:35:12:0d:15:71:79:16:ec:70:9b:c5:91:24:86:26:4f:dc:
         7f:d6:da:e8:5f:3a:16:a9:01:f8:0d:17:fa:27:0c:0b:fa:fa:
         69:12:de:4f:fb:bf:4d:fa:3b:b3:21:8d:ee:b4:e1:c4:e4:a1:
         5e:86:5f:00:65:8e:e3:4e:c4:bf:a8:6e:ee:e4:a6:11:ce:ac:
         bc:94:c1:d8:6d:2a:fa:38:f6:9e:1e:27:68:28:f0:0a:5f:4e:
         e8:5f:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----