Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
File:                     cnOYybFuqY0iKkwpyvey68mE8oI.mft (raw, json)
Hash identifier:          3GCasBTriMo4t0izN1CcCVD9ieYX6K7PMdSqahodvLw=
Subject key identifier:   40:C3:67:53:D9:B9:65:DA:B6:8E:B6:0F:60:C8:5F:DB:E0:BA:35:ED
Authority key identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
Certificate issuer:       /CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Certificate serial:       01962E618414BBE3F3B514748533ABFD7420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
Manifest number:          82
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: cnOYybFuqY0iKkwpyvey68mE8oI.crl (hash: NHaLeRSy0URHep/9pnnNS07LSlM7x9BL0Tk4tftbU7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:84:14:bb:e3:f3:b5:14:74:85:33:ab:fd:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=40c36753d9b965dab68eb60f60c85fdbe0ba35ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:64:73:1a:8b:26:41:a1:d6:3f:a1:ab:94:
                    46:59:2b:1f:06:2f:f7:2c:ff:f5:48:96:56:c0:6e:
                    db:76:95:e0:e0:f3:7a:43:b0:cb:c5:5d:16:f8:40:
                    1c:4c:93:a0:af:48:ca:da:05:08:93:b5:c0:46:a0:
                    e8:d1:da:60:07:f5:ca:95:78:a7:ba:54:80:e0:5b:
                    64:a8:08:df:51:35:15:a8:b1:eb:04:c0:fc:bb:d1:
                    8c:9e:d9:4c:75:ba:b1:e3:0d:f9:3c:6e:c5:0c:6a:
                    30:bc:0f:52:86:e1:30:f5:89:4a:ae:aa:e6:d0:96:
                    71:d4:10:a9:ca:34:cc:7f:01:04:6b:7a:da:d3:75:
                    cc:e1:74:8d:30:1f:0f:7e:89:fd:70:01:c2:68:75:
                    6b:b6:9f:27:12:5c:de:bc:d1:4f:d2:cb:9f:75:22:
                    f5:e1:35:ec:75:f6:57:ac:d0:77:c6:e8:c9:02:f5:
                    8d:88:d5:46:ca:61:f1:03:c9:75:d4:58:15:3e:72:
                    c2:e9:ee:7a:19:62:af:2f:ea:eb:ac:6f:b5:9c:c6:
                    a8:22:66:d8:f7:f6:5b:fc:fe:b4:01:96:df:78:53:
                    7a:33:72:13:9a:7d:9a:c9:59:af:fb:86:6c:ce:f7:
                    70:63:62:6c:b3:df:0e:c6:10:e1:d2:2c:6f:6a:ea:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:67:53:D9:B9:65:DA:B6:8E:B6:0F:60:C8:5F:DB:E0:BA:35:ED
            X509v3 Authority Key Identifier:
                keyid:72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:75:b4:d7:3d:25:f0:83:f7:49:f6:67:07:66:d3:b5:f6:f8:
         99:70:10:75:02:78:08:c1:7d:d0:8e:84:7a:dd:b4:88:c4:f9:
         87:f3:cd:ce:bd:38:ea:87:25:c7:a3:e8:41:2b:e8:51:fb:91:
         a0:af:34:cf:5b:5f:ca:22:49:d5:eb:f9:04:38:6b:e8:b6:ba:
         a6:88:51:b3:85:e8:92:b8:7e:54:15:1f:ba:07:d4:8b:6e:03:
         96:0f:a3:0f:1d:b7:69:4e:e4:fa:bd:ab:4c:0e:28:bb:28:f1:
         14:02:da:54:90:2e:bc:a8:b9:4d:db:b4:04:4c:37:ec:b7:f3:
         ad:e0:80:bf:95:e9:6c:f4:41:28:cc:95:24:ce:1b:8c:39:1c:
         20:49:c6:b8:f0:8b:a0:dc:40:8c:d5:d4:80:e0:3e:c9:33:8d:
         e3:14:2f:88:72:ff:dd:f2:0b:6d:6b:97:9f:07:71:b2:a8:07:
         74:1c:77:10:3c:f6:d8:02:16:ea:1c:ef:02:11:cd:db:6f:fa:
         79:2e:69:f0:0a:f3:72:7d:94:55:21:ab:0e:5d:a9:a2:d0:7f:
         43:0f:15:68:f6:3a:94:87:45:bd:3d:21:ad:77:31:56:93:1d:
         ca:d7:0a:de:90:bb:c4:6a:08:d3:70:2b:0d:c2:da:4d:92:d0:
         5b:7d:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----