Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File:                     Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier:          oU/9RXIeeE6Ek4mfuuoWd2Ht6PVtsOwdOfhHsBMiIQk=
Subject key identifier:   F3:CD:30:7F:9B:3F:54:CC:9F:9B:47:90:C0:05:E2:BF:8E:8F:C8:04
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer:       /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial:       01962F74285EFC7ECD459CAD4CF684EE3956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number:          0900
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: gWwo51Q0q0qyduGrTqdB/yXqwic1vSJcqcusyNn0pus=)
                          2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:28:5e:fc:7e:cd:45:9c:ad:4c:f6:84:ee:39:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=f3cd307f9b3f54cc9f9b4790c005e2bf8e8fc804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:4b:ca:50:f2:78:7c:c5:3f:4a:17:df:b1:
                    94:98:ea:95:e4:c0:7e:7f:05:7f:e1:ac:e3:72:b1:
                    9d:d9:39:e3:f2:ca:ec:0f:92:98:53:56:5c:c0:93:
                    ef:df:1b:80:57:1e:4b:f4:fb:b7:d1:71:58:66:76:
                    00:fd:4f:ae:05:79:91:85:86:87:8b:17:ce:31:62:
                    49:e6:64:28:d5:f2:4b:61:8f:d2:01:d7:c6:56:b9:
                    9a:16:a1:f7:23:ac:a0:32:f4:82:79:0e:53:77:cd:
                    61:7d:5c:b6:38:5c:f1:b9:c8:e6:ca:43:ad:6b:00:
                    58:d4:04:99:41:74:b4:d0:9a:d7:8d:d1:65:34:4a:
                    ad:66:1c:63:c6:68:6a:c4:ec:7a:45:07:1b:77:60:
                    a0:d5:3e:7f:2d:6f:fb:bb:ca:42:64:8d:99:30:5a:
                    6d:24:72:0b:6a:c2:88:0d:aa:0a:6e:75:8a:19:58:
                    85:8a:c7:68:ca:bf:17:2f:df:dc:c3:a1:ea:c8:0a:
                    1b:dc:df:08:96:ae:be:a5:a8:03:8a:c6:d2:85:4f:
                    66:2f:c2:8a:20:ba:9d:44:39:b0:03:ba:bb:21:72:
                    37:db:6b:56:7d:8a:a0:ad:0a:56:45:c1:31:dd:e3:
                    72:fe:2c:c0:a3:7a:0e:c9:f7:4f:6b:87:a2:52:a0:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CD:30:7F:9B:3F:54:CC:9F:9B:47:90:C0:05:E2:BF:8E:8F:C8:04
            X509v3 Authority Key Identifier:
                keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b6:d9:78:65:41:2c:ce:b4:cb:9b:81:67:12:f4:25:e2:83:
         5a:1c:f7:ab:a7:14:03:a4:07:47:1f:c2:d1:bc:b1:9b:aa:5b:
         a6:ee:90:38:b2:85:ec:87:d1:29:5c:f4:10:dd:49:ea:0e:83:
         89:d8:1c:ce:ef:94:2a:59:fc:de:23:2b:e9:d3:67:73:55:c4:
         8e:12:9a:63:03:4f:95:04:cb:cf:16:00:34:e0:61:c3:b6:27:
         87:a4:7c:ee:39:dd:29:94:bc:f8:5a:e3:46:d4:a8:3a:5b:88:
         cf:20:7a:88:7c:19:4e:91:6b:41:0e:0b:ed:e4:87:ac:26:95:
         95:8e:e8:15:8f:cf:6f:7a:bc:8e:12:82:a6:a9:53:d2:af:21:
         6c:73:33:29:6c:cd:74:1d:f8:91:46:d0:51:d9:76:1d:08:fc:
         76:e2:7b:07:88:01:a2:ca:6d:b6:c6:73:c7:d1:b1:59:d6:9a:
         7a:b0:f8:f5:9b:d2:07:6c:11:a6:ba:ba:0f:8a:f6:e1:36:24:
         59:66:6d:28:b4:74:58:3c:e3:35:1a:23:de:86:4c:87:61:68:
         e0:f3:a5:e7:a6:f0:8c:aa:43:2b:08:d7:da:ce:5e:e9:1c:ba:
         00:8b:ef:64:b6:9d:0a:c8:88:15:1f:ca:49:00:93:6e:72:80:
         4e:66:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----