Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
File:                     xC-Eb32rEnhmuie_qWS6fS3iBEw.mft (raw, json)
Hash identifier:          DPWf3+gmKkEybUXYrotVDtk2SXNTo9HR/WCyql6JZ2E=
Subject key identifier:   CE:F6:C0:83:62:31:F4:6D:7A:00:D5:DB:D3:80:95:1A:BE:09:3E:59
Authority key identifier: C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C
Certificate issuer:       /CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
Certificate serial:       01962F06AD02DADBE74E67F77BFE44AE99B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
Manifest number:          0962
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: s7BYPcFko15wHvOyF3oatSsccyI.roa (hash: 78VX1NSsQyuTClZ7PDZmJ4FVZ65vdHUjOgVNSdaYEok=)
                          2: xC-Eb32rEnhmuie_qWS6fS3iBEw.crl (hash: TKF+75pnT4BiyJMlf1g+tCbRTV+oF9fYyApqjfEaplM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ad:02:da:db:e7:4e:67:f7:7b:fe:44:ae:99:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=cef6c0836231f46d7a00d5dbd380951abe093e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:6a:d8:cb:c8:53:0c:c8:a5:32:0d:68:47:
                    4d:2c:e0:01:05:33:f2:6d:14:56:0d:e9:83:ac:b4:
                    9d:25:ed:d9:33:5a:b1:05:5b:49:07:d1:a2:93:64:
                    d8:da:b4:f6:dc:cc:3b:57:3f:b8:17:c3:c0:07:1a:
                    f1:86:dc:02:a6:2c:5b:51:72:26:69:a0:c1:f0:a3:
                    e4:95:95:5e:af:4e:fb:5b:23:de:aa:fc:68:20:5d:
                    20:73:94:88:f1:4d:80:b2:8c:48:32:9f:25:58:79:
                    c2:a8:34:6d:57:67:cd:bd:1f:fc:c3:68:05:f5:69:
                    43:10:8a:40:a7:0a:14:22:59:6d:d0:96:98:a1:83:
                    08:9f:5e:e4:07:b3:8f:5d:ec:ce:bf:23:43:5c:52:
                    0e:ba:bc:ac:2a:66:53:c9:65:ac:5a:ec:8f:fd:2d:
                    6c:9b:4d:33:77:1f:32:3c:c1:2a:d4:91:98:83:22:
                    18:53:fb:a8:c5:e1:9a:9e:a1:f0:cc:e3:24:0d:8c:
                    db:d2:19:3b:f2:87:64:63:b5:88:fc:53:07:5f:61:
                    5b:23:e5:a8:b0:80:00:b6:29:78:7b:0f:d5:4f:25:
                    2b:99:24:d9:c9:d4:34:22:e3:9e:52:99:1f:9a:ed:
                    30:30:32:5e:d0:ad:15:8d:d3:b9:03:34:45:3b:aa:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:C0:83:62:31:F4:6D:7A:00:D5:DB:D3:80:95:1A:BE:09:3E:59
            X509v3 Authority Key Identifier:
                keyid:C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b5:9f:eb:89:8a:37:dc:7d:9b:a2:2c:f5:bf:64:73:a9:bb:
         6b:c4:22:cf:41:07:d9:6e:73:12:1f:b4:7b:16:68:97:10:59:
         d4:1f:69:36:09:10:32:9d:ef:0f:b1:a2:08:16:1a:d0:47:30:
         2e:d3:dd:d7:73:f6:04:be:09:84:31:c5:94:ad:08:36:06:99:
         09:03:8c:c8:de:2a:c8:ee:b7:42:c9:8b:c0:ef:6e:3d:fe:cf:
         13:7e:70:29:cc:ec:35:df:57:f7:41:5c:9f:57:71:23:0f:e1:
         2d:29:40:fa:f7:7d:de:08:93:43:13:b1:53:55:2b:4f:d2:34:
         1b:89:6f:61:bb:37:f8:a4:22:31:c4:9f:bf:e7:92:01:33:1f:
         f6:c2:ea:f5:0f:48:15:bb:90:e0:ca:28:f4:e2:1a:ac:dd:da:
         90:40:bb:28:b7:51:36:e9:f3:aa:bf:76:e3:15:46:eb:5c:d7:
         eb:2c:be:a4:6f:6c:7e:25:60:f3:a9:94:a3:24:04:af:a6:4f:
         d4:02:70:35:3a:51:a7:6f:87:95:c6:cc:9f:8f:41:ff:28:c0:
         59:d6:52:5f:51:ed:fd:b1:dc:6d:d6:a3:76:9e:a8:ed:9f:3f:
         27:b0:bb:64:61:c3:b5:5f:49:b7:a3:dd:53:6d:cc:a9:fa:65:
         6e:78:6c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----