Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File:                     CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier:          Ze3lAExI7IUF+9vk3DPqxoJc2ZjXudM4rTJ5Sco12EU=
Subject key identifier:   CF:89:72:F2:93:4D:74:73:02:BE:F4:4A:0F:5A:26:47:21:0C:87:68
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer:       /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial:       01962F3DA30376EA21E9BEB6456DB73641C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number:          1232
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: blnfnNpTg/yywNSPCQYS7vIJLu/LYGVupSgvoQQpqyU=)
                          2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a3:03:76:ea:21:e9:be:b6:45:6d:b7:36:41:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=cf8972f2934d747302bef44a0f5a2647210c8768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:5f:c5:fb:83:83:c2:30:e1:4d:e4:56:e5:
                    40:1a:ce:7b:47:d4:a5:54:e1:4d:f0:84:a9:3d:01:
                    d2:75:04:74:4c:7d:9c:48:07:3c:21:6d:ef:bb:aa:
                    e4:f5:92:76:30:9b:c2:ea:cd:24:22:d4:9a:c7:64:
                    a9:ce:fd:b1:f2:70:77:3b:ac:0e:45:c0:49:a3:b9:
                    65:a0:63:c1:08:6d:ef:dd:61:ac:fb:c3:d0:57:9a:
                    87:77:65:b1:26:53:29:5a:c7:f1:6f:15:07:e1:11:
                    b2:a9:61:b4:bd:6d:29:da:e0:f5:45:8a:7d:4d:00:
                    bb:dc:ed:cd:8b:3d:ba:55:c3:9a:3b:5d:0a:1c:5c:
                    02:c5:3d:79:55:25:4d:42:19:18:6f:62:5a:1a:f9:
                    4a:9a:81:f1:2b:2b:30:da:3e:16:5c:f4:5e:0d:b3:
                    76:63:b6:cc:3d:5a:4e:b5:bf:ef:18:16:39:2c:54:
                    e8:14:af:2e:61:7d:e4:91:49:9b:af:12:ac:6c:f5:
                    b6:ec:f1:26:8c:43:f7:96:38:eb:0d:55:c9:55:f5:
                    a2:42:8d:85:f3:14:1a:a1:b4:fb:6e:a4:b0:e8:fd:
                    d0:7e:f6:2f:ee:da:7e:c8:03:e5:5c:40:2a:81:1a:
                    0c:82:ed:9f:9c:45:cd:84:26:9e:16:cc:fc:d0:9d:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:89:72:F2:93:4D:74:73:02:BE:F4:4A:0F:5A:26:47:21:0C:87:68
            X509v3 Authority Key Identifier:
                keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0d:c0:6c:56:10:04:7a:82:23:6b:ed:47:63:50:9a:91:5f:
         20:6e:08:85:50:95:d5:ec:14:d7:25:e9:02:75:48:96:0b:8c:
         0e:ae:ed:cc:9b:fc:51:3b:69:e7:fe:84:a4:c2:c7:f2:f2:69:
         7f:43:ff:75:08:d4:a4:fe:22:76:9f:77:54:67:0f:15:14:81:
         78:b4:67:82:1f:92:47:c4:ce:55:d8:ef:73:81:06:d5:25:b1:
         50:94:28:25:26:5c:6d:8c:53:cc:23:40:3c:a0:2d:60:05:5f:
         ff:06:ac:50:c9:9b:7d:af:b8:3a:fc:26:2a:a8:b2:b3:fb:05:
         4c:42:55:ef:96:5b:9a:e3:01:97:09:da:07:c3:b8:08:b9:ab:
         a2:6e:18:86:98:32:2d:e0:e7:4b:59:03:19:c3:c3:16:45:98:
         39:34:89:5d:6d:df:15:6d:88:67:a4:99:7f:a3:73:1f:18:d3:
         c0:aa:84:35:93:a5:ba:0f:6a:b8:11:7b:e5:70:bf:44:ff:6e:
         c4:7d:d8:2e:a1:a6:eb:1c:9a:25:88:60:34:b9:27:3c:76:9c:
         3a:6d:e6:14:c6:86:f0:2a:4f:4a:4d:da:e5:b3:d8:9f:80:cf:
         47:d1:ac:43:19:c0:aa:ef:be:b2:4d:4b:f1:75:e4:6a:17:d5:
         19:22:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----