Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File:                     CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier:          QazFMcS9YHU1LjJIBgZNRU0P771V7py8zsXiw8qJEqY=
Subject key identifier:   24:29:70:D3:DD:5B:C0:4C:7C:34:36:17:10:35:64:AD:AF:42:CE:B6
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer:       /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial:       01962F06A1E6D269DA7C515B30669FB01777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number:          01DF
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=)
                          2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: gF1SanLpHD6uWD6/xYeI3LGm3qe9pxZjK/yU3LUa/1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a1:e6:d2:69:da:7c:51:5b:30:66:9f:b0:17:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=242970d3dd5bc04c7c343617103564adaf42ceb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:36:66:14:51:34:10:54:a4:45:0e:03:58:
                    5d:8f:38:4f:55:56:ce:e0:36:2c:2c:a9:83:5f:b0:
                    a8:92:8c:ba:c5:d2:d2:ef:76:ee:95:2d:b1:a0:98:
                    5f:a1:e6:9c:19:16:ce:e2:10:92:0a:61:37:ed:ad:
                    95:42:04:13:c3:b8:2b:83:a1:0b:ae:8b:cd:5b:5d:
                    ff:e8:1d:c9:0a:b1:35:60:68:62:30:e9:82:f3:a7:
                    a3:12:fb:e3:14:61:67:7e:ef:19:56:02:00:ff:63:
                    be:0c:81:5c:ae:f4:a8:47:98:ca:84:aa:39:37:c8:
                    0f:d2:15:22:62:45:fb:47:8f:cd:7e:32:2b:16:f4:
                    7f:03:eb:84:38:7e:a5:dc:90:c6:99:4a:e6:ec:96:
                    d3:20:a4:97:4f:de:8f:a2:a9:0e:06:b1:45:83:7d:
                    5c:ff:b3:f3:fa:89:ba:43:16:1e:86:a9:d9:63:89:
                    67:a5:6a:94:13:2a:49:e1:b1:ab:7d:07:38:97:65:
                    22:fd:05:4d:18:5b:ef:9d:d9:a6:8c:15:e9:15:1e:
                    a3:45:e0:94:bf:f6:7f:7e:65:e0:0b:9a:1c:fc:d3:
                    2e:07:41:20:8e:b1:e3:ee:88:bd:1f:3d:83:d2:55:
                    93:ad:b8:4a:06:84:aa:fe:b4:4e:e7:1f:4a:fe:b7:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:70:D3:DD:5B:C0:4C:7C:34:36:17:10:35:64:AD:AF:42:CE:B6
            X509v3 Authority Key Identifier:
                keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:d9:52:bc:0b:92:46:ad:d6:aa:1d:eb:da:89:88:c9:f9:
         2c:1b:36:d3:f7:be:94:1c:5d:0f:cd:9e:21:45:65:30:84:b5:
         71:39:5d:21:1c:eb:5d:b7:47:7a:4a:14:b5:5e:14:83:19:0c:
         04:45:a1:48:07:cc:c8:78:7d:60:9b:22:e4:27:38:29:d5:ac:
         ef:72:16:b4:2e:4a:6e:fe:86:3f:f6:e4:40:b0:c4:7d:4c:8f:
         db:c5:da:a6:f7:cc:8e:0b:dc:28:e7:c3:8a:e1:42:5b:4d:c2:
         ef:e0:c9:fe:3a:de:2a:7b:56:1c:4d:9f:85:18:cf:62:5c:e4:
         da:08:31:03:49:e9:48:43:89:87:24:0b:35:2e:f9:77:51:5b:
         b0:2a:71:69:a3:1b:4f:d4:48:29:ad:ab:1a:c7:59:09:c4:d5:
         17:8a:7f:e5:a6:8e:83:30:4c:47:16:ce:21:78:47:69:9a:b2:
         8d:59:a4:3e:34:ed:e1:e3:5b:5c:64:84:0c:0f:ea:e4:1b:93:
         9d:78:f9:13:fe:34:3b:5c:6c:72:cd:f6:d8:76:23:76:b6:d3:
         97:5b:d3:dc:10:0d:c2:52:fa:87:81:24:68:c6:5e:72:89:0b:
         f7:06:32:74:a9:90:1a:16:13:1c:b9:d1:fe:5c:44:cc:ca:9f:
         6c:c6:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----