Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File:                     CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier:          ILVICMAuVwT4HPl0MRgN4kqVQsRtPmlW4X3izPHWF74=
Subject key identifier:   CC:B2:47:70:AD:C0:25:58:19:A6:7E:82:A8:21:9A:1C:9B:DE:E3:CB
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer:       /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial:       01962FAB961B4CE746E5B96B40C4F5F7CD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: JiDOx1CsWjnr5/EBTSQov5ogdK87aCyv7/0oGeCL2is=)
                          2: QEhnuw8ud1j9n62qQluLx43WHjQ.roa (hash: 1M0hr4yzSJjpoSUF2lAkNTs362XypkDSGbasmLEH2gU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:96:1b:4c:e7:46:e5:b9:6b:40:c4:f5:f7:cd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=ccb24770adc0255819a67e82a8219a1c9bdee3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:f7:be:f4:b5:c2:d1:cd:d2:35:82:d4:17:
                    da:f4:6f:5d:a5:bc:f7:aa:02:ec:af:9e:76:58:63:
                    0f:3c:a4:4f:2c:bd:ff:c2:f7:8a:44:9d:83:ed:d5:
                    a1:61:f8:37:38:3f:a7:91:5e:b1:59:65:66:59:c6:
                    f4:34:f5:c7:33:2f:3e:91:a3:d4:bd:61:7f:4a:3e:
                    bb:35:f9:c4:68:2e:84:6d:eb:fc:76:ac:15:1a:08:
                    92:d3:c1:6d:a9:90:54:a5:92:5c:78:33:71:a0:99:
                    5b:90:53:f5:9d:21:1b:f7:a9:f8:b3:aa:db:31:ad:
                    92:f7:79:b7:c6:e4:f2:61:e4:08:9b:08:d8:c8:62:
                    20:04:c3:b7:26:13:14:04:1f:7f:af:53:2f:7f:61:
                    5a:5c:21:22:99:f4:1b:d6:fe:99:7a:44:f7:eb:db:
                    46:b5:1c:ac:6c:b6:2a:19:e6:84:b5:13:ec:a9:c9:
                    fe:7b:0a:3b:ba:f0:69:c3:a8:ec:4a:b4:b7:32:eb:
                    7a:02:6f:35:29:ec:40:02:61:53:e1:a8:d6:35:74:
                    2c:ab:26:e4:a3:4f:52:91:1a:3b:7e:4e:ae:e0:08:
                    22:52:26:87:24:be:2c:36:a5:de:77:2d:19:36:6d:
                    98:01:81:21:a8:63:49:70:74:a6:d8:be:d1:b7:2e:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B2:47:70:AD:C0:25:58:19:A6:7E:82:A8:21:9A:1C:9B:DE:E3:CB
            X509v3 Authority Key Identifier:
                keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cf:94:c0:c3:20:95:ca:7f:48:52:45:2c:70:ac:b8:32:ea:
         ea:d4:58:29:70:b3:90:ba:a9:fc:9c:56:a6:f7:52:bf:36:9b:
         15:8e:76:fe:a5:8d:9c:30:cb:26:01:5a:07:69:43:2a:37:bf:
         d2:f2:1e:cc:96:63:eb:f4:0d:7e:83:26:2c:42:29:ef:fd:92:
         e0:ff:80:28:36:67:99:84:74:2b:5d:1e:b5:b7:1d:1d:f8:2a:
         bf:6e:1d:4e:31:bb:bf:81:c4:a9:0e:60:c8:af:24:e6:a5:06:
         a6:01:6d:0d:92:59:d7:44:a3:2c:ea:91:4c:16:bb:a8:c9:35:
         25:76:a1:dd:ba:6a:b2:cd:cf:50:be:4f:05:40:bf:68:70:be:
         64:23:c6:84:43:50:ad:56:42:fa:5c:df:f1:24:f0:f7:00:21:
         b7:bb:98:71:5d:ca:78:0d:87:32:6b:70:16:09:a2:94:a8:86:
         86:f6:50:43:a5:24:84:65:67:b2:ae:94:a4:dc:98:37:4c:aa:
         cc:2a:b1:bf:ea:0e:2b:ce:d9:de:3f:92:3f:61:1c:98:b6:3e:
         88:42:6b:1a:81:a8:b3:37:c5:03:66:06:d0:66:78:b9:fc:49:
         9c:c7:ef:af:07:32:c5:c6:a5:26:67:df:56:c9:4b:3d:86:29:
         d8:9a:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----