Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
File:                     CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json)
Hash identifier:          vpCnVB+J71Hmg63fYcjpYQ1sl9wZv6FhlzmYNHkS9Q8=
Subject key identifier:   34:F5:F2:E1:93:D0:99:90:4D:F3:58:EA:E6:6C:6F:41:F2:20:8A:B5
Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
Certificate issuer:       /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Certificate serial:       01962E2AED4FA6FDE9A9421AD38730AC7222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
Manifest number:          69
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: CaHZjCF0JoPX8YaluQJ8pU9yP4Gvm/Ooq4v17ehkDW0=)
                          2: XIYNgLktIjso42Y1xvc7ZQ9ush8.roa (hash: 2xDZhva1yvr4fqGcAJL4jzSvNBum97k23PuodDDKzAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ed:4f:a6:fd:e9:a9:42:1a:d3:87:30:ac:72:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=34f5f2e193d099904df358eae66c6f41f2208ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:73:28:e8:59:bc:31:91:2f:11:26:0f:3f:
                    c2:33:48:97:97:df:e1:0c:f3:e1:c1:09:34:c7:6a:
                    6e:da:37:cd:03:c5:28:6f:c3:b4:90:cd:b0:de:ea:
                    fb:fd:b6:a7:16:29:98:06:19:03:37:6e:ab:af:a9:
                    5d:45:37:00:02:16:fb:e9:06:ac:c8:00:fd:0f:d8:
                    88:bf:55:6e:f8:e9:7e:49:67:93:87:a3:d8:20:ca:
                    99:0f:40:58:2a:1b:91:54:20:3a:5e:b7:1d:87:3c:
                    08:88:61:c6:f2:34:18:8a:5f:83:24:dc:93:d7:80:
                    53:bc:0b:85:f6:9f:4f:3e:b7:31:dc:d9:78:00:33:
                    e0:9d:00:6c:35:63:8a:0b:13:50:e8:43:0a:5a:43:
                    0e:c1:1f:d2:04:d7:00:69:3d:04:17:92:48:a0:62:
                    dd:1b:f6:c5:4a:c9:07:38:fb:20:79:bb:a5:b3:da:
                    d0:fc:ed:a2:ea:e3:d9:1d:2d:2b:37:11:8f:24:a6:
                    a1:1d:0a:27:94:30:6f:22:6f:cb:f8:36:ee:2f:83:
                    08:47:d9:c7:3e:82:20:c2:d5:d1:a0:31:eb:de:7f:
                    1b:1f:9d:c7:c7:84:67:5f:00:34:41:2f:b8:d3:85:
                    2c:90:e0:c9:00:d0:56:de:ac:40:ff:e2:7c:ad:06:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:F2:E1:93:D0:99:90:4D:F3:58:EA:E6:6C:6F:41:F2:20:8A:B5
            X509v3 Authority Key Identifier:
                keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:d6:53:5c:26:35:9f:64:21:dd:0f:cd:5f:df:82:fd:e3:
         29:6e:02:3c:e5:bd:63:a3:53:a5:aa:c1:0c:d0:fd:02:a1:33:
         a5:76:b4:b2:40:fd:3f:d8:cd:a8:11:de:ce:ef:c4:16:de:69:
         fe:d7:df:26:6a:67:e7:81:38:ce:e6:3e:7a:22:0b:37:e9:d6:
         1f:34:a5:47:5a:ae:80:c0:6b:4c:41:77:d6:cc:8d:5a:47:5a:
         13:ed:31:e8:58:14:31:55:66:e5:82:1b:46:c3:e0:1a:68:f8:
         14:1a:3a:31:a1:16:f8:c1:e3:83:4f:ab:37:0d:1e:15:84:2e:
         42:5f:b8:0c:ef:cd:fc:69:88:74:57:a7:a6:ec:a5:b3:63:3e:
         99:8f:90:4d:02:16:36:ee:86:0c:53:a1:a4:8c:0a:d9:e5:e1:
         17:2c:b6:9b:ee:3f:8c:32:87:e6:d7:30:66:76:1e:fb:51:a1:
         6a:a5:c6:28:3c:6c:c2:87:9c:1f:bb:20:2e:fd:fd:87:8a:4e:
         66:d2:0e:23:01:85:85:0a:54:54:bd:dc:60:34:54:b5:2c:3b:
         68:4f:23:f7:17:a6:2d:91:4f:60:12:51:ad:91:5b:3a:52:33:
         6d:df:d8:d1:29:c9:d5:05:2a:cd:8d:66:cf:33:5a:73:c2:89:
         de:a0:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----