Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          V8Srhs5AE9CwC+genqZMk75rjCH0zQMeEqU6esOzJ6Y=
Subject key identifier:   F6:4F:12:E6:1D:9E:BC:A8:37:34:0F:A7:7D:DE:C4:84:2D:B1:5B:F1
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       01962DF42277EE31A260DA73464DFDE49F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          09BF
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: ccBQuJ5sAdOEqWNzJVm9AoJPi35TpK5EDB6mOXgeduI=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:22:77:ee:31:a2:60:da:73:46:4d:fd:e4:9f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=f64f12e61d9ebca837340fa77ddec4842db15bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:f0:28:62:a7:73:1e:f0:0a:c9:6a:fc:25:
                    a8:87:8d:a6:bc:e2:c5:0d:aa:cb:6f:ea:3b:eb:9f:
                    86:db:c9:b0:2d:09:fb:df:1f:b3:2f:97:18:e1:8b:
                    18:1c:2e:e8:fb:21:81:bf:ff:6c:05:e5:b9:cc:1b:
                    72:fb:2b:1e:1f:a3:6d:81:4e:3d:6f:e9:d3:e0:6f:
                    67:2b:5f:08:fa:c6:21:ae:55:d3:c8:aa:51:95:cd:
                    13:03:93:7e:3e:09:14:30:2d:e9:f5:a5:29:1d:09:
                    6a:27:e6:1b:bc:b7:c8:40:cf:cc:e7:94:4c:19:54:
                    d6:6e:c6:2d:6a:93:ff:a2:da:85:20:bf:d9:f5:3d:
                    f2:34:ee:8e:02:9d:eb:b3:7b:bd:67:bd:53:28:7e:
                    48:7e:4a:82:af:98:fb:a7:f9:31:40:20:4e:41:60:
                    34:a3:10:53:69:28:bb:12:33:ef:58:86:88:12:83:
                    b2:35:d3:19:04:38:35:91:de:36:92:7b:62:26:0d:
                    3a:a8:0c:8c:0c:37:85:79:37:c6:7e:d9:a9:04:4c:
                    b9:44:12:e4:2f:01:60:a7:15:15:90:c5:b6:fe:af:
                    43:3d:93:77:11:95:a0:bd:06:eb:da:b3:48:2d:75:
                    8d:74:f2:71:9f:be:87:20:49:c2:e2:7d:82:1a:5a:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4F:12:E6:1D:9E:BC:A8:37:34:0F:A7:7D:DE:C4:84:2D:B1:5B:F1
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:3b:96:1e:7e:79:42:95:b1:57:83:0a:72:ab:7a:f5:82:
         65:56:01:9d:1a:52:4d:c6:07:42:63:f5:12:13:73:dd:ba:00:
         00:8e:d2:0b:be:3c:4d:5e:df:78:5f:39:74:ca:f1:ff:37:d6:
         9a:b1:5e:fa:7e:22:72:a0:27:09:25:c3:c5:29:82:1a:b6:9a:
         33:e2:3b:56:f9:4d:27:9a:da:d9:26:47:e5:05:a4:80:86:9a:
         c8:8b:6e:ed:87:cf:39:b7:57:a8:c7:71:4d:9c:2a:49:dd:ef:
         12:51:7e:eb:80:45:3c:0e:38:c2:e5:85:27:c8:d8:dd:e5:e0:
         f4:86:1e:f3:a8:17:52:e8:08:3c:28:d0:91:b7:b7:66:7e:8e:
         83:ff:3a:d9:3a:15:a2:34:da:12:5a:13:86:db:33:5e:d7:40:
         7e:27:0c:15:6c:c6:69:12:d8:2a:2f:ff:69:84:02:15:e2:fd:
         6f:82:fd:d9:8d:aa:e6:21:2c:9f:d2:7a:a4:f1:e8:40:77:87:
         0f:d8:4d:16:e1:e7:31:95:ee:7f:6e:35:60:0d:78:7c:de:0e:
         f9:cb:39:3c:3d:cc:0a:fc:36:db:51:7f:41:bc:3a:78:70:fe:
         43:cb:1f:35:49:e5:be:4a:41:3e:c5:da:de:7a:c0:55:e1:6a:
         6b:5d:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----