Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File:                     xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier:          vDmGBlv0c0NZAAHVjUQU7Pxyksg7n9I0TCYVUF0ovf8=
Subject key identifier:   A2:CD:66:5F:33:98:F5:AC:3F:47:B5:6A:43:6C:E8:01:C9:66:56:EB
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer:       /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial:       01962F74A584A019243D1C2DEEBE2A8BF848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number:          0FDC
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: 2nzdh5v7DetDf7CZtkN3uOaXLwSyyFwmC4ww4RWcFLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a5:84:a0:19:24:3d:1c:2d:ee:be:2a:8b:f8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=a2cd665f3398f5ac3f47b56a436ce801c96656eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4b:ea:e1:66:57:ad:8f:8b:e6:4f:e7:11:c2:
                    c4:dd:1e:da:6c:3f:ee:86:9d:69:d0:80:1c:93:f6:
                    81:45:b5:37:2b:82:a7:8b:b1:31:5a:10:0f:ba:03:
                    7b:c3:03:3c:be:3f:20:51:8b:43:39:ba:45:d1:17:
                    c9:39:f7:16:e6:21:6b:27:fe:af:dd:0e:44:ef:61:
                    1d:eb:84:ee:d7:bb:6c:48:0e:58:0c:42:46:4d:9e:
                    9b:fc:8c:e3:be:95:90:fc:82:3b:fb:f6:57:3d:9c:
                    90:18:15:7c:aa:80:9e:f9:7c:b8:db:61:ac:26:25:
                    a7:c5:f1:ee:ae:37:8a:b3:37:a8:c7:2f:af:ef:d0:
                    6c:54:72:78:1e:65:2d:d7:19:3f:15:1a:ac:1c:8a:
                    90:9e:05:ad:4b:bb:23:c1:53:0e:56:19:02:2b:19:
                    82:34:fb:c0:10:72:d7:b6:28:37:f9:35:60:c7:aa:
                    2e:85:f0:a7:e5:55:84:c0:bd:81:43:31:59:53:45:
                    0f:bb:db:fd:70:51:90:cf:d3:d3:c7:d1:f3:e8:a7:
                    c1:24:ba:49:04:0f:cc:63:ee:02:77:e9:78:21:ba:
                    0e:df:79:99:d1:8b:68:d3:4a:11:05:06:01:59:a7:
                    01:6c:1f:23:87:4b:f4:ca:f2:c5:8e:90:1b:e3:55:
                    c2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:66:5F:33:98:F5:AC:3F:47:B5:6A:43:6C:E8:01:C9:66:56:EB
            X509v3 Authority Key Identifier:
                keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:dd:cb:1a:6a:11:6a:4b:6f:4d:89:f6:33:59:98:ea:68:a6:
         4c:b4:66:e7:b9:09:86:b6:f5:8a:9e:1b:cc:46:3b:77:d8:62:
         21:89:c5:b3:85:49:8e:e5:1d:b2:86:1f:22:2c:f6:ed:39:73:
         43:e7:aa:3b:c9:84:d5:2e:92:fa:9d:c0:e3:d0:69:de:d5:ee:
         57:fe:1b:38:bf:37:87:d3:95:f9:2e:b5:fa:bb:15:33:9a:e7:
         99:75:e0:60:30:be:21:30:8e:a9:dd:ab:18:77:c6:f3:62:78:
         f4:86:cc:a8:54:ad:2a:7f:cb:39:24:fe:62:cd:fc:b1:51:d2:
         3a:bd:b1:ae:e7:d5:92:57:3e:24:51:10:ee:ea:f6:b2:c8:45:
         c9:97:77:ca:dd:b6:f3:b1:06:60:06:ec:04:3e:67:b1:b5:e4:
         73:fa:7d:9e:91:0c:2d:0e:38:cf:fa:6d:2a:48:03:be:a3:d4:
         cf:5d:3e:dc:0b:46:d2:2b:c5:3e:3f:6d:3a:d5:58:f1:15:f0:
         d7:21:83:8b:f9:a7:5d:ea:79:bd:ce:13:1b:62:f9:51:c2:f7:
         68:5f:9f:17:d0:7b:95:6d:3d:a4:74:9b:93:a2:d2:d3:81:47:
         fc:d7:86:3a:71:00:d3:e2:4e:65:56:02:52:05:ef:e3:c2:fd:
         fa:8b:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----