Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
File:                     CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json)
Hash identifier:          Oj+LTMzcIn8z1SFInWTYFeFS25rCOA1BcwTFZc5JCas=
Subject key identifier:   44:C0:48:46:2C:47:E1:00:82:5F:BD:34:F4:3F:BE:55:EA:07:EC:29
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Certificate issuer:       /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial:       01962F069D41F101D082340F8D33C66721B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
Manifest number:          0D5D
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: NeFXKE3OzBYh9GquTRM94UFSMsGuEH1KJBxzpXa5H6s=)
                          2: v1PRoA5ebsh_hlHI-WdJ9oH7RYY.roa (hash: g731f8Kk7ZRmBzHdANv/XJyJm7Gc4rKXDwNwW3MJnpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9d:41:f1:01:d0:82:34:0f:8d:33:c6:67:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=44c048462c47e100825fbd34f43fbe55ea07ec29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:61:f7:62:5c:52:da:e9:f4:3a:42:8e:a6:
                    54:66:a2:c0:a4:04:f6:b0:78:96:8e:65:03:36:56:
                    c7:ca:fb:d2:58:3b:79:70:33:5d:60:20:ab:66:72:
                    8a:a9:c0:7b:f2:78:ed:14:74:b7:b9:19:66:96:2b:
                    df:a2:83:d0:10:8a:3d:80:80:1f:a1:be:aa:3f:b6:
                    56:70:91:b0:21:39:fa:c1:f6:9d:49:1b:ce:d0:95:
                    43:5d:07:76:a2:2e:41:fb:a1:c6:23:7d:15:10:45:
                    87:b8:c8:14:2e:41:ae:7c:f8:b8:4a:95:d3:cf:ff:
                    f9:98:70:44:25:ee:28:0a:27:88:0d:28:51:4e:99:
                    fe:e6:de:d4:e8:f8:17:81:3b:3c:06:14:7e:95:4f:
                    2a:fb:4c:e6:60:c8:23:f6:86:66:05:33:d6:2e:aa:
                    e4:d9:01:7f:2d:83:ff:39:01:60:eb:cd:c0:59:42:
                    c9:e0:07:12:b0:0a:69:25:11:23:bf:f1:4f:6b:9d:
                    a2:1d:73:cf:e8:90:f0:b4:70:7b:7a:6b:b2:bd:08:
                    af:fd:fe:da:59:7d:2f:8a:a0:76:16:16:a7:12:da:
                    c0:97:b2:9d:b5:c9:23:6b:1e:06:29:73:e1:a0:5b:
                    be:4d:e7:60:19:54:08:a1:b9:83:bc:9e:f7:a4:8e:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C0:48:46:2C:47:E1:00:82:5F:BD:34:F4:3F:BE:55:EA:07:EC:29
            X509v3 Authority Key Identifier:
                keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:3f:69:7b:91:9b:6d:b6:2a:80:a2:69:70:b5:13:f0:51:
         c9:b4:74:cb:ac:ae:09:e8:21:4c:14:77:37:a8:02:77:d7:8c:
         bb:c7:8a:ba:ae:f4:01:49:18:97:32:22:9d:78:6a:12:b3:af:
         0d:e0:67:52:fa:9f:73:86:01:b7:36:48:f4:af:2b:79:aa:2f:
         64:02:af:60:01:0d:a3:a4:0f:8d:f7:84:15:4e:25:47:1c:d3:
         69:54:e6:08:86:30:1d:8f:03:10:20:df:a8:7e:7b:8d:d3:a2:
         af:a9:bc:09:94:13:81:ff:a7:4b:a3:51:52:41:f6:b5:f5:9a:
         ba:f0:5e:d4:fd:50:df:c5:f8:85:c8:d3:e0:1a:96:12:60:86:
         f4:d3:f5:5a:4c:16:3d:bd:7e:9a:55:33:12:26:03:9a:bc:85:
         21:4a:1a:c2:05:40:fa:d6:8e:32:bb:19:03:d1:ec:6e:fc:14:
         8f:8a:6b:ce:db:81:6c:26:c9:88:50:44:55:09:dc:fb:e0:47:
         bf:1f:06:76:e3:f4:4d:71:db:5c:ff:7b:27:7c:3a:7f:5b:f6:
         53:87:b9:ec:6e:4f:09:9b:18:51:65:3d:b7:49:2c:f9:6b:80:
         aa:81:32:b5:b4:e6:80:1b:bf:4e:00:d3:c4:f4:06:d5:a8:1c:
         c3:db:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----