Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d2749d-f773-471a-aca3-618d95fe3901/1/r39NEPAZQ0EHs7XcU6yakZjFxH0.mft
File:                     r39NEPAZQ0EHs7XcU6yakZjFxH0.mft (raw, json)
Hash identifier:          GgGVLR7urIsvm/0QNwovTRX9n5agxjguv7X6gDzrnxU=
Subject key identifier:   47:0F:4E:15:78:1C:E3:A3:1D:26:93:49:46:DE:8B:81:58:67:B0:A3
Authority key identifier: AF:7F:4D:10:F0:19:43:41:07:B3:B5:DC:53:AC:9A:91:98:C5:C4:7D
Certificate issuer:       /CN=af7f4d10f019434107b3b5dc53ac9a9198c5c47d
Certificate serial:       01962F3D4BF83F30FF0910F43AD4B517BA3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r39NEPAZQ0EHs7XcU6yakZjFxH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d2749d-f773-471a-aca3-618d95fe3901/1/r39NEPAZQ0EHs7XcU6yakZjFxH0.mft
Manifest number:          0CD9
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: r39NEPAZQ0EHs7XcU6yakZjFxH0.crl (hash: e1S+kaMFFdG2A+t1j4M4x/lZnQEM4HYYuoMsi/oJcDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:f8:3f:30:ff:09:10:f4:3a:d4:b5:17:ba:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af7f4d10f019434107b3b5dc53ac9a9198c5c47d
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=470f4e15781ce3a31d26934946de8b815867b0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:d0:d2:f3:10:db:ac:73:7b:84:ad:34:e4:
                    8d:41:3f:59:14:47:38:e9:33:d8:0b:57:36:89:a0:
                    52:5e:58:81:0f:92:74:cb:9a:39:b9:e5:11:66:65:
                    93:24:94:95:7e:d2:12:df:77:7b:1f:6d:21:eb:c8:
                    68:1c:99:48:55:9e:88:e6:d5:46:64:31:95:19:01:
                    f4:84:9b:c6:85:29:84:08:9a:17:b8:c3:79:96:87:
                    d3:71:85:18:b1:16:e4:8a:25:82:12:55:80:fb:04:
                    09:cd:00:95:22:86:92:ac:cc:ef:d3:ba:00:59:cc:
                    7d:ee:d0:a8:02:f8:65:1a:66:4e:f6:c0:b2:48:4c:
                    bb:82:be:91:6d:c5:e9:86:fc:3a:a2:ef:36:0e:64:
                    42:53:00:bd:a9:8d:0d:87:a2:77:35:9b:7e:ca:4e:
                    07:de:08:93:a1:1e:9f:5c:47:18:be:f9:fb:1d:9e:
                    0a:3d:29:2e:0d:93:4e:8e:b4:77:07:f0:28:d2:b7:
                    bf:e7:bf:40:74:2b:ed:1f:aa:c6:f6:20:bd:03:f2:
                    64:0e:33:5e:a4:c7:e9:d5:5e:6a:dc:9a:4c:ac:97:
                    22:b8:e2:2b:fc:8a:c1:c6:b7:b2:47:6c:e5:0d:4a:
                    73:a1:09:6a:0e:f5:50:da:24:2c:b5:2b:46:d8:77:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:4E:15:78:1C:E3:A3:1D:26:93:49:46:DE:8B:81:58:67:B0:A3
            X509v3 Authority Key Identifier:
                keyid:AF:7F:4D:10:F0:19:43:41:07:B3:B5:DC:53:AC:9A:91:98:C5:C4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r39NEPAZQ0EHs7XcU6yakZjFxH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d2749d-f773-471a-aca3-618d95fe3901/1/r39NEPAZQ0EHs7XcU6yakZjFxH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d2749d-f773-471a-aca3-618d95fe3901/1/r39NEPAZQ0EHs7XcU6yakZjFxH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d1:01:c4:d6:90:3b:9a:1e:7f:96:dd:8d:59:15:d9:64:a0:
         c8:cc:88:19:82:ba:82:86:b7:47:67:35:77:8b:79:52:05:29:
         17:af:7f:52:f0:07:c6:9a:cc:65:93:26:a6:37:2c:ea:6e:b9:
         ad:22:5b:34:b6:db:ff:ba:0b:10:64:ef:12:e8:df:25:ba:6a:
         46:15:f3:b5:53:a1:f9:51:5a:f6:ce:e9:38:2b:9f:ba:44:57:
         4f:5b:83:d1:60:49:87:b6:fa:38:23:5a:51:03:df:30:50:d6:
         96:e6:81:db:64:39:f2:86:e0:41:38:0a:70:17:44:ab:c9:10:
         26:0a:93:29:df:41:45:61:fa:e5:3e:e5:a3:72:b9:ee:90:8c:
         38:2d:42:bf:23:a2:ee:65:37:3c:a5:99:fb:3f:78:9b:ab:6d:
         14:0c:c6:f5:48:a1:99:74:cf:28:95:8d:51:0b:4f:10:c0:fa:
         b6:06:a3:6b:f3:70:9f:39:21:8e:cf:6e:c1:df:30:81:59:87:
         7c:aa:26:9f:0d:ec:d0:59:56:52:7b:0a:6b:ad:24:e2:99:d2:
         3b:96:3e:12:64:2f:c5:f5:b9:6e:f0:2a:25:ec:47:0a:8f:eb:
         b7:07:38:64:d3:eb:63:d6:16:c0:2e:c6:04:95:aa:e5:44:c2:
         c8:27:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----