Manifest

$ rpki-client -vvf rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
File:                     CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft (raw, json)
Hash identifier:          vBIS9Sa+f6EbI10G5uZbZvhfBj+spgiKhnJRGpN9uWA=
Subject key identifier:   11:97:44:70:6E:B6:D1:98:BE:E4:D5:93:D1:75:7A:37:D2:3F:1D:92
Authority key identifier: CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E
Certificate issuer:       /CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
Certificate serial:       027EB8CC7BA4AA3514901F4209D54D80AE24D34E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft
Manifest number:          0242
Signing time:             Sun 13 Apr 2025 02:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 01:56:04 +0000
Manifest next update:     Mon 14 Apr 2025 04:24:04 +0000
Files and hashes:         1: 323030313a3637633a3831633a3a2f34382d3438203d3e203437363839.roa (hash: x/hxHcA/aQlAo1iPgsy4Jh2r1BTX/Wthrb2Uj5QOozw=)
                          2: CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl (hash: nYcsZJyohLdazkJr8MF7K/Of706locdyN5+QeN8ZNNw=)
                          3: 323030313a3637633a6238633a3a2f34382d3438203d3e203536373632.roa (hash: HDxF7hNoMhDooYDhqYU0gRysAV3DSlAetCZCA2P/OrM=)
                          4: 323030313a3637633a6239303a3a2f34382d3438203d3e203437363839.roa (hash: iKc4ECL2JmgsiMS1/8l/kZ4VwxF3G7vNp9tnnFsm2u0=)
                          5: AS56762.asa (hash: z/f8SG2no254oa3H2iKxhhbZKCFLEwS03yF8In9fInM=)
                          6: 323030313a3637633a6238383a3a2f34382d3438203d3e20323130373631.roa (hash: euqERIaydVEUOproacKsvcNALWGfqD3MIzlY2rRigCk=)
                          7: 323030313a3637633a6238383a3a2f34382d3438203d3e203536373632.roa (hash: zYzJPuGPFstVSD2hm0i4MaCQSWoM5NZ4u9+bJKzcdv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7e:b8:cc:7b:a4:aa:35:14:90:1f:42:09:d5:4d:80:ae:24:d3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7dc5a4f702d3dc9d56ea35b9ee202ec549647e
        Validity
            Not Before: Apr 13 01:56:04 2025 GMT
            Not After : Apr 14 04:24:04 2025 GMT
        Subject: CN=119744706EB6D198BEE4D593D1757A37D23F1D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:ce:aa:8a:a5:f1:36:5c:f6:64:ee:02:02:
                    c8:e9:c8:94:ea:6b:db:2b:49:a7:74:6e:3b:ba:b9:
                    8e:b1:65:04:1a:bc:ec:82:bb:88:70:25:4d:af:9d:
                    f4:8e:39:90:37:9b:4c:c9:4a:1e:e4:af:3e:20:70:
                    98:e7:6b:55:b9:d7:84:9f:6f:9c:a9:6a:55:3b:9b:
                    f4:e7:7c:be:a7:93:47:3a:77:30:b8:e3:42:75:e7:
                    e1:b4:ab:11:be:96:b0:3a:11:68:26:83:0c:0b:e9:
                    a5:31:87:7b:92:21:32:49:13:e3:5b:66:40:5b:83:
                    64:9d:26:b8:3b:c3:d7:5e:be:c3:2a:4f:4d:ce:b8:
                    32:52:42:a4:23:1f:4a:57:36:f6:ac:16:ae:f2:74:
                    9a:11:2e:fa:5d:5a:91:68:e8:6f:3d:1b:b0:3e:e1:
                    d7:cc:a2:20:0e:63:8a:5d:c7:e7:9c:bc:56:e5:37:
                    6d:00:78:cd:8c:e8:d9:25:11:a3:c2:55:d7:41:95:
                    fc:ea:c2:5d:72:17:11:d1:4b:31:6c:12:26:5f:ff:
                    a8:56:ce:bf:e6:8d:98:8b:5b:dc:c0:d8:ec:f1:33:
                    93:70:91:ba:03:e5:a9:0e:d8:b2:e5:67:5b:15:60:
                    eb:8d:ea:36:e7:c3:4d:01:50:e3:0a:de:78:1d:5f:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:97:44:70:6E:B6:D1:98:BE:E4:D5:93:D1:75:7A:37:D2:3F:1D:92
            X509v3 Authority Key Identifier:
                keyid:CF:7D:C5:A4:F7:02:D3:DC:9D:56:EA:35:B9:EE:20:2E:C5:49:64:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z33FpPcC09ydVuo1ue4gLsVJZH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/1/CF7DC5A4F702D3DC9D56EA35B9EE202EC549647E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c9:6e:be:b9:4f:1d:7a:37:de:82:92:58:d6:55:2e:cd:74:
         fe:d2:8a:8f:af:4c:5c:58:c2:34:1a:ab:fc:80:35:9c:ca:26:
         ad:6b:47:cf:23:fa:53:4f:63:32:a9:12:5e:b1:1a:d4:94:68:
         ed:bc:1f:13:d5:6d:b1:b0:6a:1e:14:d8:84:7e:98:52:d5:7d:
         d1:7e:9e:81:0b:20:3e:81:19:b8:2e:ec:36:53:a8:44:21:55:
         03:e9:66:7a:f0:6b:0e:70:7f:57:dd:97:98:2a:98:42:b5:55:
         ba:0b:37:05:6c:cb:4a:dc:2a:45:94:bb:1a:3f:ca:63:4d:d1:
         6b:b4:e0:fc:fb:f0:0e:5e:b8:4b:c8:12:06:69:a2:2e:2b:b3:
         ff:df:75:03:7f:64:68:cc:e4:09:c2:03:7a:1e:fe:c3:26:72:
         e4:5d:82:88:d8:a9:9d:01:8e:64:02:9e:7b:88:43:05:a2:60:
         95:ac:f6:45:67:60:e1:24:51:d1:58:9e:c4:34:4d:8e:4c:c8:
         c5:df:3d:25:ac:b4:e9:4d:fb:fe:01:d2:fd:cf:db:6e:5e:10:
         49:b2:df:96:41:77:6b:35:ca:ad:6b:1d:c1:65:98:46:67:3c:
         2e:3f:b2:03:60:af:42:c8:d5:b6:e8:2e:d6:4b:78:4d:e4:e8:
         00:da:eb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----