Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
File:                     cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json)
Hash identifier:          VjWuwYp/PoisuniupgI6lSwD9R9PD7jPxDrdX9vFwQA=
Subject key identifier:   C1:81:AF:E5:D4:58:93:E3:DB:1E:9F:B5:EE:BE:35:9D:81:45:9F:20
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Certificate issuer:       /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial:       01962F74759381C7A3F7CF50FF7C472BFE9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
Manifest number:          0AE6
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: 8wknUCvN7dL5Ngyq2oYeYw2qKaA.roa (hash: 2x+7TMLohOium2m4btHhUYg1HhvZTp1KUAyfNFsWp/s=)
                          2: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=)
                          3: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=)
                          4: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=)
                          5: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=)
                          6: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=)
                          7: Rg-rwznqAAZZCpXiUsH9yNT4n6M.roa (hash: R0tTH3SJW7iuGtYToatlEGOWh2QhWznFnYDn8BYzsO4=)
                          8: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=)
                          9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: yQG2aoiaot3C8GmvnOI+5SoWKVRgv/XvwfkNFvGAzXs=)
                          10: ecGl7SXxfvzyrf_IROWG6PeXN6I.roa (hash: BeofmFT3DEwetEcQFY4kjdzbj6TWwwJHMUHk5ZEuYcY=)
                          11: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=)
                          12: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=)
                          13: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=)
                          14: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:75:93:81:c7:a3:f7:cf:50:ff:7c:47:2b:fe:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=c181afe5d45893e3db1e9fb5eebe359d81459f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:cc:2e:82:53:47:1c:39:8d:00:33:2b:b6:
                    00:c5:f3:22:78:4a:84:7a:83:6a:a6:dc:a3:66:35:
                    eb:ad:76:d2:e1:82:a3:3d:21:9b:c4:f4:b9:03:d3:
                    23:9f:fa:d0:25:6a:c2:05:5e:28:93:c3:c8:17:cc:
                    e3:ef:8b:b2:08:1f:d6:23:51:78:38:51:81:38:38:
                    c9:ff:b2:c2:ae:57:cc:fb:66:71:bc:f1:2d:ba:4d:
                    62:55:9e:91:12:16:ca:88:38:4c:97:75:d0:78:42:
                    f6:d6:8a:12:75:33:e5:e4:e3:89:b1:f1:08:ed:f2:
                    b2:6a:7a:45:bc:3e:a7:43:e0:0c:65:bc:1f:a7:34:
                    70:df:ed:0c:5a:ff:72:61:06:0c:33:a6:41:55:e2:
                    d3:0f:50:59:de:20:7d:91:be:3c:54:f9:d1:e1:d9:
                    11:dc:f4:cc:c2:0e:a0:d3:57:1d:4f:c7:50:d1:e9:
                    b7:c3:68:48:1d:9c:4a:26:9e:8a:ce:f2:86:64:46:
                    54:4d:d0:d9:6a:0d:d4:89:d2:77:d0:a0:3b:3e:05:
                    3b:b8:4f:36:42:17:07:3c:ef:88:2b:e7:71:8d:b3:
                    6a:f2:24:a4:76:43:b7:39:27:de:d2:22:e0:47:76:
                    0b:7c:d7:76:8f:bf:db:84:af:4b:b8:28:4f:93:53:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:81:AF:E5:D4:58:93:E3:DB:1E:9F:B5:EE:BE:35:9D:81:45:9F:20
            X509v3 Authority Key Identifier:
                keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:6f:be:df:37:63:5d:72:b4:bb:86:a5:aa:67:22:78:ba:1f:
         5e:ba:78:82:58:ce:f8:3f:ee:f4:dd:40:e2:0b:3c:62:37:9f:
         21:73:38:bd:9d:b7:de:d3:fa:83:f2:1f:65:dc:52:1b:2b:2a:
         00:45:a5:c6:c1:89:1f:a6:a3:3f:0b:fb:3e:1c:ae:5d:a8:b5:
         d8:60:8b:a1:ef:31:ef:c7:4d:9a:78:e7:0f:db:e1:3c:29:1c:
         1a:04:06:2c:67:97:9c:ea:00:f6:12:43:07:45:0a:37:4f:9f:
         96:d9:87:0f:68:fc:b0:1f:be:65:d7:bf:91:98:2f:d5:eb:07:
         ef:f3:6f:50:32:ac:4b:c2:a3:0a:9d:e9:f6:87:a2:35:ac:69:
         80:b6:35:4c:9e:a9:38:f3:16:48:49:27:6f:70:aa:a0:f4:e2:
         92:f0:14:7e:bd:14:0e:7d:1a:f0:ef:df:09:e6:8c:0b:0c:92:
         61:97:43:02:03:04:71:41:31:94:63:a9:3f:f3:f0:a0:90:c2:
         96:ec:13:a6:7a:de:24:40:85:a1:5a:9f:db:92:21:37:df:51:
         09:04:0b:bd:55:53:04:a7:31:35:5f:77:4d:6c:f0:ca:8c:94:
         56:2a:8d:48:97:db:7d:70:a6:c5:71:41:e6:71:c9:d7:66:a4:
         a3:bd:aa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----