Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
File:                     cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json)
Hash identifier:          tkkw0hfDGYpGc5oGGh06ZO7Dc7MonraL2hHrfSJdlsM=
Subject key identifier:   1D:DB:3C:99:35:CC:C7:13:AC:54:2C:FC:40:DE:5B:FD:27:67:94:2C
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       01962E2B06DEC8AFD1429458AF5409D1B700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: 6-rA5MgZK44IjZPlgXpkxE7B8Yw.roa (hash: wuMAUh2Zz1xwb4YouTzXWPOq/mZIhjwk19/myb4Z5q8=)
                          2: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=)
                          3: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=)
                          4: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=)
                          5: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=)
                          6: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=)
                          7: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=)
                          8: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=)
                          9: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=)
                          10: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=)
                          11: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=)
                          12: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=)
                          13: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: pXE0NTm6TdtYiRF0h1HbnB9bseeQHmEmLeAkvRp+ZzA=)
                          14: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=)
                          15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=)
                          16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:06:de:c8:af:d1:42:94:58:af:54:09:d1:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=1ddb3c9935ccc713ac542cfc40de5bfd2767942c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:a7:e6:98:7d:98:e3:f6:d3:2e:bd:6d:cd:
                    5b:0a:da:ca:ee:fb:76:05:81:91:5d:d9:7a:17:85:
                    9d:ca:77:49:57:1b:69:d0:f9:37:57:d7:91:1d:26:
                    be:ec:a4:8c:8d:20:6b:c9:ed:cb:0f:d6:cf:c2:5b:
                    8b:53:30:42:5e:6d:a2:51:4c:cf:42:96:29:de:67:
                    0d:f6:be:63:10:2d:9d:ae:f5:04:2a:7c:55:46:52:
                    e1:2f:c5:b5:7f:ee:cb:da:15:29:3c:1b:7c:51:c5:
                    08:7b:0a:9e:c1:68:04:3c:5e:83:b4:2b:02:67:c8:
                    45:1f:9f:81:04:8d:98:ca:da:a2:e3:18:b0:37:b5:
                    e2:bd:a6:13:b7:3d:85:32:6f:47:43:53:98:11:fc:
                    cb:a4:3e:bb:72:b0:0e:43:3d:0a:4f:55:86:c5:b6:
                    46:1e:5e:a2:03:5b:99:00:26:37:60:06:4b:db:05:
                    e9:1e:bb:a3:c0:6f:06:b9:1d:5b:91:f4:29:12:86:
                    e6:08:57:a4:c1:fe:b6:71:b7:0c:65:43:b2:53:ee:
                    ea:ee:1c:4a:56:d0:a3:b6:6d:94:70:7c:f3:db:1f:
                    4b:c1:00:a9:92:e6:ab:3b:13:78:ef:25:06:a9:ee:
                    a7:9a:49:3a:39:8b:87:4f:b8:10:e5:1e:c9:9e:55:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DB:3C:99:35:CC:C7:13:AC:54:2C:FC:40:DE:5B:FD:27:67:94:2C
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:04:e5:64:6d:8f:b6:b7:7d:9d:8a:8a:c4:c9:dc:a0:01:72:
         7a:ed:60:8a:66:2e:bb:a7:6c:9c:cf:f4:16:0b:17:b2:a3:32:
         41:f9:c0:91:c9:2a:82:15:bd:4e:03:23:d0:39:19:17:82:c3:
         99:2f:88:92:dd:37:7b:ae:33:3f:44:f9:48:a9:26:85:46:cb:
         36:60:02:8c:f9:66:fa:fd:43:98:aa:65:15:13:c9:8a:4f:a9:
         09:c2:cd:d6:91:ab:fa:5d:a6:ca:3f:35:0c:b7:e8:94:5b:de:
         4d:76:05:d1:0d:07:59:df:b7:d0:fa:bc:6f:5c:39:d9:2d:ec:
         b6:e6:4d:da:1f:dc:cc:77:e1:35:8e:a5:fc:41:5e:2d:ea:c7:
         35:b5:f3:98:c4:8e:51:c6:a7:e8:b6:bb:7c:73:e2:42:1b:77:
         a3:66:b9:6f:ee:91:c6:91:da:5d:40:db:80:ec:4a:f2:ac:e9:
         4e:7e:2a:d7:d3:ce:24:f0:89:5f:1e:dc:8c:e4:d0:a5:df:db:
         1e:ae:e7:9d:f7:bc:3f:03:ab:a7:94:f0:61:ae:41:59:f0:4b:
         2e:67:63:e8:e6:54:39:99:3f:fb:40:61:8c:bf:7d:a0:d0:69:
         b4:64:fd:34:63:9d:23:c2:a7:86:f6:2b:a1:ed:a4:00:50:2a:
         84:ee:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----