Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File:                     cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier:          tkfDRFrdqktSQ09qAHwX+Yg9nFOJsjGa2C8IafYKpS8=
Subject key identifier:   95:68:93:8A:F9:B1:77:DB:BA:FC:20:D0:39:43:18:0B:F4:4F:FC:97
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer:       /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial:       01962F07364D0DE3FC9C6115CEF2ADBDD188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number:          07E3
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
                          2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
                          3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: lbmKz9FoK6dhQOAsCaQuYrtZvArYPru1Fy8/U/Tox/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:4d:0d:e3:fc:9c:61:15:ce:f2:ad:bd:d1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=9568938af9b177dbbafc20d03943180bf44ffc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:52:83:5e:23:05:19:f5:b5:2b:1c:33:f3:
                    ef:e0:26:91:17:ce:72:69:cc:3f:39:f3:d0:01:7a:
                    3c:b9:0c:13:e0:5e:6e:28:e7:1d:7f:38:0a:f5:d6:
                    63:a2:3d:0a:6d:8d:6c:b8:46:67:7b:87:30:f3:8f:
                    a9:01:70:35:ad:00:54:f5:46:b1:24:ea:25:4d:23:
                    25:5a:e7:0e:45:a9:b6:80:1f:5b:4b:77:39:5e:5e:
                    8d:38:b5:ad:a2:ff:87:d1:ed:a5:11:f3:c6:1f:37:
                    94:98:44:32:3d:c5:28:43:e6:19:9e:dd:bd:a0:4d:
                    eb:98:6b:e5:de:f6:23:22:4b:f1:59:5f:6b:f3:b6:
                    54:e5:6a:ba:72:bc:d1:7a:00:3d:7a:b3:56:f7:41:
                    1b:6b:9b:3a:d9:b3:46:cf:f3:b4:67:3c:9a:fd:6f:
                    c2:b6:c5:3c:4b:82:b1:06:14:97:e0:f8:eb:e8:c6:
                    b9:3c:4b:9f:72:8a:3b:98:e8:cc:e7:78:d0:3d:95:
                    cd:0c:03:b3:8b:dd:b2:4d:58:32:41:c9:28:cc:58:
                    58:19:66:d1:a5:9f:6d:e0:75:cf:9e:6b:41:30:00:
                    17:7f:aa:df:68:ab:8c:7d:1b:35:fb:bb:ef:b2:b1:
                    a0:06:ee:11:f0:f6:ed:ca:f6:a9:48:b8:52:b2:75:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:68:93:8A:F9:B1:77:DB:BA:FC:20:D0:39:43:18:0B:F4:4F:FC:97
            X509v3 Authority Key Identifier:
                keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:8f:be:32:9e:1b:f0:13:f1:b6:b0:8a:09:f7:71:22:38:
         3a:92:0f:49:55:52:fb:a3:49:28:10:a8:30:92:4d:99:9f:35:
         78:0a:d2:6b:f0:a2:e9:fd:d6:e0:89:9e:b5:00:e7:a2:7d:44:
         15:27:a7:10:f4:48:d9:1c:76:39:e1:af:76:94:b1:ae:a2:ae:
         fc:66:29:fb:21:67:b6:cf:5f:64:80:66:31:92:73:cb:80:bb:
         5d:f9:65:60:d5:b9:ef:1d:9c:b4:56:ce:2b:34:7c:57:26:8b:
         47:1b:69:b6:7d:80:bf:7f:0f:1f:8b:f2:c8:44:7c:13:e8:42:
         a0:ac:23:f1:2e:78:43:45:ab:1a:34:ac:4d:8e:b2:3d:1d:f8:
         2e:bb:88:86:32:22:0d:ee:ae:64:45:ac:ca:02:34:83:94:5c:
         8c:50:67:3b:49:a1:73:14:41:64:8b:90:72:cf:0b:e3:e3:1d:
         9a:06:74:48:b6:e2:87:33:9b:55:5b:cf:ca:ad:c4:66:52:18:
         3c:74:98:be:03:7d:3e:35:6f:33:d4:86:63:58:86:22:21:41:
         b3:d6:5b:2d:dc:f0:e8:bd:c9:fd:fc:d4:d8:06:05:b1:b5:2e:
         42:a2:99:1f:66:c0:bd:3f:eb:25:4c:24:a8:b3:45:af:40:5a:
         54:30:0e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----