Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File:                     1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier:          AVgD0Nhah+gdmniv26hyfexS2ftWF23crppbYNBp4ts=
Subject key identifier:   8F:6A:55:2D:2A:D4:9F:38:8F:3C:E6:68:30:CB:24:C2:4A:03:D6:72
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer:       /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial:       01962F7502BBC84C123BF13E9E821DE702BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:59 +0000
Files and hashes:         1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: H8RFo1KbG7HQQJdPdMeChJlCmHJwkeQwl8T/asqtLLM=)
                          2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=)
                          3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=)
                          4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=)
                          5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=)
                          6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=)
                          7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=)
                          8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=)
                          9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=)
                          10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:02:bb:c8:4c:12:3b:f1:3e:9e:82:1d:e7:02:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
        Validity
            Not Before: Apr 13 14:01:59 2025 GMT
            Not After : Apr 14 14:01:59 2025 GMT
        Subject: CN=8f6a552d2ad49f388f3ce66830cb24c24a03d672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:d9:c8:12:cd:4b:ea:ef:05:8a:11:d4:06:
                    51:3a:d7:4a:44:ee:5a:93:1f:19:5e:a2:1f:09:d3:
                    13:ab:f0:0d:0c:86:8d:5c:97:cd:4e:f3:54:8a:b3:
                    5d:ab:42:da:ac:48:86:fe:29:7c:27:ab:22:60:28:
                    05:6b:4f:8d:db:48:52:fc:8e:70:fd:45:8b:2b:93:
                    af:a9:3c:d9:fc:80:13:b4:91:6f:10:5e:0c:72:4c:
                    b2:3d:3f:1f:a2:fb:c8:c2:e6:4a:f4:46:71:a3:ca:
                    09:b4:2e:75:ee:98:5d:db:cd:01:8a:09:49:21:66:
                    2a:f7:86:9c:0c:09:5f:a8:3e:bf:09:69:69:2e:5d:
                    29:16:2b:80:fd:cb:b9:94:79:f8:4d:4a:69:7e:48:
                    89:95:bc:f0:2c:41:3c:dc:87:a3:ce:8c:df:fc:a8:
                    03:b9:5e:91:fb:9d:96:1e:d2:db:8f:a8:b8:dc:ab:
                    66:00:01:cb:32:1f:f7:75:ac:18:0a:da:c8:d9:1c:
                    30:98:c4:50:c8:23:d0:a0:0d:ef:8b:74:7d:0a:07:
                    ef:6e:71:46:21:93:63:3c:fa:77:42:ff:ec:fd:38:
                    67:9c:21:b2:c5:4b:0c:cc:e7:49:6a:52:62:71:2f:
                    08:83:03:71:05:4b:47:de:23:64:33:10:4e:b5:f9:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6A:55:2D:2A:D4:9F:38:8F:3C:E6:68:30:CB:24:C2:4A:03:D6:72
            X509v3 Authority Key Identifier:
                keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:21:b0:08:08:e8:6b:38:8d:36:31:dc:4c:88:15:91:ed:bd:
         b5:cd:9c:7b:b0:bd:28:8b:76:28:fa:3d:c9:0c:58:9a:38:d2:
         c4:60:bf:74:34:9d:8b:26:3e:60:b0:cb:c6:51:1d:a6:e9:9e:
         ca:c7:ae:77:be:99:14:c1:5d:c7:91:88:94:ba:66:64:6b:95:
         73:f9:47:c2:63:e0:58:5d:97:23:86:c8:8b:eb:bc:66:9f:6a:
         75:3a:05:3f:17:6a:60:96:35:4e:7c:e9:23:44:58:e2:eb:1d:
         5c:06:10:5b:75:60:77:61:59:1a:47:48:ff:fa:0f:d0:09:c2:
         c3:da:eb:f6:94:5c:cd:be:d3:39:ea:ac:7d:86:f1:4f:aa:f7:
         56:9c:af:a4:ee:ef:30:b0:0e:d1:49:1f:f6:ee:d7:e7:55:55:
         f2:f0:5c:de:88:76:40:37:32:0d:a5:3c:48:18:57:65:2f:d8:
         21:b6:70:c4:26:27:e7:f8:6a:3c:66:ea:d1:09:5e:24:97:f8:
         de:88:0b:3f:cc:7f:23:4a:92:a7:76:35:da:6a:85:75:a2:d5:
         a0:88:94:c3:c0:c6:92:2b:ac:1d:25:2b:9d:f5:1b:24:71:c6:
         7f:d0:ed:af:c3:04:ab:64:2c:97:5f:f8:93:68:d4:d1:00:4c:
         82:5f:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----