Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File:                     CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier:          RWbHrS2CUxMQoKmUTxhUvS6X94WWDi8fpAhnt3ZD2qk=
Subject key identifier:   AE:13:23:07:2A:97:2F:E4:C5:8B:19:29:03:1E:C3:E1:77:FB:25:17
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer:       /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial:       01962E61975C2CF79EECEB6276D8266526C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: sRUtRN6SEOLm/rkb9nYK3xDgC1P6IstuGxSywfFdrTU=)
                          2: dsLG2j4EWWmiv7tptAS2-fkcXU0.roa (hash: ADLTdWLJS9zEs/uQjjxNH0vaJWWshki3RYpjC8+gtcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:97:5c:2c:f7:9e:ec:eb:62:76:d8:26:65:26:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=ae1323072a972fe4c58b1929031ec3e177fb2517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:2d:38:80:5b:a1:b9:e7:5b:50:f5:d4:c9:
                    72:2f:2a:f8:39:c8:cf:cd:26:e7:41:ea:34:54:f1:
                    bf:d0:d2:1b:a5:0f:54:8a:4a:57:79:02:68:ca:c9:
                    8a:a3:72:00:f1:e0:7e:3f:65:2b:23:fd:00:c3:82:
                    87:cb:52:1f:d4:40:be:bf:8f:c5:12:d0:2b:21:b9:
                    36:7a:ad:2c:63:b7:1b:b6:b1:f1:f8:bc:dd:03:07:
                    4f:18:42:99:92:10:e7:47:f0:ff:3a:f8:1c:e9:b2:
                    2c:b6:ff:ed:f4:c3:ff:ec:cf:71:67:9e:11:78:36:
                    5c:cb:ef:84:f5:ce:a4:e5:47:82:17:e6:a3:44:6e:
                    e4:44:dc:1d:33:5a:d7:03:4d:77:9c:eb:03:20:4e:
                    14:b7:2a:e1:ed:64:ac:20:e7:e0:cb:e5:40:ab:5d:
                    5f:2c:f5:b8:9c:10:70:99:f0:0f:d3:b0:8c:7e:2d:
                    61:6a:64:1d:3f:2a:db:88:d1:2f:ae:0f:d6:67:28:
                    dd:ca:da:be:00:d7:dc:67:34:e4:3a:2b:84:5c:2a:
                    eb:1c:ed:96:4d:df:08:47:68:ee:ba:f9:20:8d:57:
                    29:d0:15:7a:2e:1b:6d:47:ea:b2:57:1d:8f:ce:51:
                    ed:41:0c:e3:d2:69:82:e2:31:1d:1c:d7:46:7e:fb:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:13:23:07:2A:97:2F:E4:C5:8B:19:29:03:1E:C3:E1:77:FB:25:17
            X509v3 Authority Key Identifier:
                keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:74:af:35:fd:a3:8f:51:4c:af:53:9f:f3:a5:22:6e:72:
         1e:37:19:aa:c2:f4:c7:70:b5:16:e3:a8:9f:ea:6d:22:b1:bc:
         36:d1:df:11:7b:1a:5b:84:c4:b1:bd:73:d1:f1:a1:ae:46:b9:
         31:ae:37:a3:86:55:1b:6e:38:32:c3:b9:39:46:98:16:6c:dc:
         3d:5d:57:41:03:b3:64:8f:6a:99:94:a3:86:06:fc:24:fe:56:
         33:cf:a6:d2:7e:11:c9:b7:e9:9b:95:cf:a3:2c:9c:7b:94:69:
         fe:2a:6d:b8:9c:9d:07:48:13:98:6d:32:81:14:26:72:c7:ec:
         c0:ff:d3:5a:ee:dc:88:c7:3c:84:e5:16:4f:96:d9:92:4e:16:
         e6:82:a7:84:e7:14:fe:6a:ae:2b:76:79:3d:b2:97:6f:5a:b9:
         fb:15:70:d9:4a:69:e8:0e:6b:a6:d4:0c:40:f8:96:48:fa:4c:
         17:e4:e1:b3:b7:53:59:6c:67:ce:ce:24:b0:c8:04:bd:70:b2:
         5a:46:45:44:eb:8a:6e:ba:9f:92:dd:e1:64:7f:04:39:ad:2f:
         19:e8:f5:e1:9b:d0:0d:bf:42:18:77:be:76:d2:74:06:6c:dd:
         a7:71:97:78:6f:75:df:e9:de:8f:92:0f:3a:4e:98:24:18:d5:
         54:34:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----