Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File:                     _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier:          z2OTmxjUCS0Cwaz4Z0T6xVfuzk2p4VCqKAFEr7nxBtE=
Subject key identifier:   EF:BC:C9:AD:32:6A:73:8B:54:DE:B2:E4:90:B1:5B:3B:6F:7B:87:A2
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer:       /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial:       01962F7513559C8F4C3A4B85E097E844F75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number:          0323
Signing time:             Sun 13 Apr 2025 14:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:03 +0000
Files and hashes:         1: 8b2MYp-hkoi3xWAERwOdBetyEr0.roa (hash: xdjzN/dKBz+p1uPtY9z1q8M+hEUT4eY7/Ecx7N8LfC8=)
                          2: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: sgqYvAmfVw7qq0R7sJhZJUFvvZHKIChW2glCyhVIckI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:13:55:9c:8f:4c:3a:4b:85:e0:97:e8:44:f7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
        Validity
            Not Before: Apr 13 14:02:03 2025 GMT
            Not After : Apr 14 14:02:03 2025 GMT
        Subject: CN=efbcc9ad326a738b54deb2e490b15b3b6f7b87a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:7d:6d:ea:f5:ea:2f:16:39:bb:93:c8:5d:
                    e5:74:ef:7d:f2:e9:36:44:1c:ce:c6:23:46:af:05:
                    b4:2c:d9:4d:6a:90:73:db:f8:0d:29:0c:75:c1:b7:
                    0c:51:7b:54:dc:79:8a:bd:5f:d7:97:66:60:f9:8e:
                    aa:4e:60:88:34:25:16:b1:d8:b9:e0:72:ff:28:06:
                    bb:61:3f:80:9e:99:65:16:b3:d5:65:17:b3:e7:75:
                    4a:76:b1:9d:f3:de:4b:6c:e9:ba:91:2e:7e:7d:27:
                    20:55:ea:33:f0:ea:2e:65:4d:3a:e2:e3:cc:5e:c1:
                    e3:44:d4:51:b7:3a:81:ce:85:74:6f:55:99:e5:3c:
                    67:37:58:50:f1:da:9a:b8:3a:68:b1:94:f9:bb:37:
                    5c:2b:89:b4:89:49:0c:19:5a:98:91:af:6a:29:d2:
                    a3:72:fe:c8:69:5f:c9:24:7b:ca:5c:14:ed:37:3b:
                    7e:a4:93:ff:f2:da:fe:dd:bc:9c:7e:d2:45:bd:dd:
                    15:e7:c1:c6:77:fb:dd:2e:f4:33:dd:79:f5:6b:ee:
                    95:a6:7e:4d:b9:72:2d:78:f4:37:d8:34:b1:81:29:
                    b0:38:a6:21:36:73:ae:ba:51:61:74:2a:91:f8:6a:
                    bf:96:90:1e:63:d0:64:b6:e6:4f:71:ed:83:98:41:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BC:C9:AD:32:6A:73:8B:54:DE:B2:E4:90:B1:5B:3B:6F:7B:87:A2
            X509v3 Authority Key Identifier:
                keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:d8:26:d9:e1:e0:bd:03:3d:38:60:c2:d2:59:82:66:68:
         b0:46:28:c8:46:b8:a9:ab:f5:d3:ba:22:8c:56:01:0d:a4:14:
         81:41:ca:19:d7:16:93:ca:21:aa:ff:2b:5d:0e:49:33:ed:62:
         16:82:83:b9:6c:3e:38:9c:97:4a:d3:d6:bf:58:c8:13:cc:f4:
         2b:a5:e4:aa:b4:a9:00:be:45:91:95:d9:b3:1f:7d:62:e4:70:
         24:d5:40:4e:4f:d6:2f:aa:3b:20:da:65:ec:14:52:57:91:81:
         db:75:12:80:53:a2:54:fe:d4:82:55:36:17:b9:8f:20:24:8f:
         a1:87:ba:b5:01:4a:aa:ea:a6:69:13:f3:c4:54:21:90:dd:cd:
         8e:3d:25:1b:6a:6f:fb:b6:4d:26:62:63:2b:cf:e3:53:4e:bf:
         0f:47:89:4b:c3:3d:85:6b:3f:63:e2:d5:a7:c2:9e:ba:c6:f4:
         83:17:a1:94:e5:eb:17:b4:54:3f:dd:8f:6d:a7:bf:d1:39:a9:
         5f:b2:86:f7:d5:36:4a:1b:ef:3a:63:b7:c0:b0:c4:49:cb:d5:
         6a:f9:62:23:14:7c:be:58:9e:ec:6c:92:d5:92:ea:70:42:26:
         cb:29:31:77:40:4d:1f:8e:22:1d:7c:cf:cc:ae:80:ee:fe:d2:
         7e:ea:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----