Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File:                     CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier:          O0lVYEnT8EvNuAII77Xd47MaEm62/cEe6l1t2aiZNTI=
Subject key identifier:   7D:C3:48:30:00:2A:D9:29:7F:A8:BE:A9:E0:5E:54:49:B6:D2:75:A2
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer:       /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial:       01962E620A1C13224B03FCF0A28C552316DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number:          0414
Signing time:             Sun 13 Apr 2025 09:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:39 +0000
Files and hashes:         1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: kDvpleIGqGoNv7pT3RM9ZengsCAX696oXYwZ2TrVyYY=)
                          2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0a:1c:13:22:4b:03:fc:f0:a2:8c:55:23:16:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
        Validity
            Not Before: Apr 13 09:01:39 2025 GMT
            Not After : Apr 14 09:01:39 2025 GMT
        Subject: CN=7dc34830002ad9297fa8bea9e05e5449b6d275a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:53:1e:da:d7:65:ca:90:2d:58:2e:12:e2:f5:
                    74:e0:0d:57:e8:19:c1:93:10:b3:a7:b0:96:5d:bb:
                    9c:a5:6b:6c:43:b8:07:c9:8d:7d:5a:76:29:50:1b:
                    f4:44:06:f8:cb:34:d2:6f:15:85:e5:e5:02:6c:63:
                    05:fd:ef:78:61:82:12:db:90:7f:6f:f7:5e:63:50:
                    f9:d1:0d:7f:8f:1b:7b:b1:75:31:1f:e8:3e:d6:7a:
                    2c:5f:fb:c8:fd:75:7c:1a:b9:71:43:5e:6a:46:7d:
                    41:12:5e:d8:bc:d7:8b:24:77:8c:36:11:07:52:46:
                    24:99:02:6b:cd:20:78:ca:49:d3:60:47:a7:dd:95:
                    a9:74:e4:8d:75:e6:ba:a7:03:85:5b:26:a7:0f:9b:
                    c4:e3:f6:f7:de:ad:54:75:15:b7:3b:ff:61:b7:6d:
                    76:27:bd:ab:bd:63:a7:1f:f5:eb:67:0e:a8:e6:b4:
                    3d:c2:57:e7:2a:e1:43:35:1e:74:f9:09:35:ef:cf:
                    70:7b:84:ac:4f:27:d7:a1:9e:53:6c:83:7a:fb:05:
                    d6:ef:32:04:f4:93:ce:fd:4b:0d:ad:2f:4d:68:ef:
                    a9:84:64:b6:69:36:6e:9c:5a:ed:03:13:7e:30:88:
                    3b:07:c8:a6:48:d1:04:7f:b4:7c:b7:8c:f2:97:a1:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C3:48:30:00:2A:D9:29:7F:A8:BE:A9:E0:5E:54:49:B6:D2:75:A2
            X509v3 Authority Key Identifier:
                keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6b:d1:db:68:bb:57:a7:95:ca:67:47:bd:bc:36:f8:b4:4b:
         25:1a:9a:e6:b8:da:09:52:1c:a0:56:58:b5:15:78:8f:1e:22:
         77:91:03:26:3c:07:af:e8:38:10:3f:af:76:33:e1:55:d9:80:
         ff:19:6a:41:0e:72:54:2b:b9:6f:20:1b:27:f5:01:42:08:65:
         c3:97:11:5e:fe:80:68:1e:cd:e6:ec:61:01:2b:aa:52:29:bb:
         99:d1:35:36:64:da:6d:f2:39:1e:86:bb:55:3f:10:af:b6:92:
         43:b5:ec:17:66:b1:4e:8b:c1:b9:0d:d8:2a:71:50:09:9b:c3:
         fb:cc:c4:cc:60:4a:1a:3b:24:ad:ef:4c:b5:b2:54:d6:22:4a:
         f9:65:b3:9b:52:69:34:2c:47:7c:f9:86:e3:f8:30:ba:f9:02:
         e3:42:21:12:2b:4f:66:bb:bb:d5:ad:65:00:d0:82:f2:64:a9:
         52:ec:05:f4:2e:50:3b:41:ed:1b:04:54:4d:fb:0d:50:df:5f:
         fb:15:3f:79:03:8a:d3:0f:62:07:b9:81:7c:fd:fc:a6:b9:59:
         75:ab:85:28:2f:fe:fa:57:91:e2:3c:90:1b:b6:63:33:df:90:
         0f:38:1f:94:65:6b:0e:5b:53:fa:92:6e:ad:ac:b5:a2:62:ec:
         5a:ee:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----