Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File:                     CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier:          mC8nZu4VQcVbu5forbZmlmhrT/B5bjoClylguAmAlbQ=
Subject key identifier:   50:E5:38:EE:1B:B7:B6:15:AD:74:7A:C1:73:16:23:01:C6:E9:BC:13
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer:       /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial:       01962F06E2D85C2B1A75CF67DDFEFEDB1E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number:          0A4D
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
                          2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
                          3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: tx3MyJZy3Qs5SsbPbyioYFRqpcVj33g6CxvIg+q0mgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e2:d8:5c:2b:1a:75:cf:67:dd:fe:fe:db:1e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=50e538ee1bb7b615ad747ac173162301c6e9bc13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:e5:eb:b3:52:a3:46:f2:ae:46:84:71:d7:
                    4b:eb:61:c6:35:d6:ff:89:22:9b:2a:c7:0c:27:8d:
                    2d:5b:78:18:c8:ee:8f:7e:19:ce:96:4d:cc:e0:7f:
                    3b:5a:5d:45:16:86:82:df:18:b4:30:8b:01:8c:89:
                    bd:7f:3a:e2:57:47:60:e9:f5:56:89:cb:ec:4d:b1:
                    3f:09:69:7a:42:28:28:a0:7b:0a:9a:40:b2:d6:46:
                    0b:78:04:13:2d:c0:12:1c:bf:b4:82:e0:71:70:af:
                    e4:f7:ba:be:d6:6f:a1:fb:eb:68:de:11:2b:f9:2e:
                    be:59:df:7d:63:b0:e7:4f:7d:2c:39:64:63:72:7c:
                    30:37:9c:b3:e6:11:a5:97:64:68:b5:90:13:79:30:
                    db:09:51:b8:24:d6:c8:85:86:72:ce:c7:8e:c5:0b:
                    25:c5:fe:84:53:74:7a:a1:62:98:01:df:f4:ad:2f:
                    64:49:28:3f:45:30:47:c9:9f:28:02:10:1a:98:4f:
                    6e:11:83:07:39:00:51:5b:17:9a:1e:67:bf:4a:1b:
                    d7:f2:e0:91:85:b9:25:dc:32:c1:9d:65:aa:e7:0e:
                    76:4f:eb:c1:75:52:88:a7:7f:fc:a5:c1:7e:ae:d3:
                    d5:12:da:f6:ba:52:bd:89:f1:d3:16:37:c5:ff:ad:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E5:38:EE:1B:B7:B6:15:AD:74:7A:C1:73:16:23:01:C6:E9:BC:13
            X509v3 Authority Key Identifier:
                keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bd:d1:56:f9:51:d5:0b:f3:78:91:a3:ca:20:a5:d9:d6:f6:
         64:d8:67:15:e4:60:8f:a3:66:7c:90:b0:17:cc:88:93:88:31:
         f9:f9:56:77:cb:83:b0:5e:cf:32:25:1a:0f:7f:f2:53:22:ec:
         29:e7:eb:2d:b5:07:f7:81:f7:91:b5:16:4e:0a:3f:69:5c:2c:
         7a:e9:0e:35:cf:25:e5:30:c7:e3:cf:3d:8c:91:82:8f:36:6a:
         fa:25:e5:ca:f0:c6:00:48:a4:8c:88:45:40:5a:19:23:3c:d5:
         2c:ec:75:cd:18:54:a8:3e:5f:b3:a3:23:0c:0a:f4:66:d6:cc:
         58:cd:92:b7:6c:d5:a5:20:43:22:4e:65:c6:03:a2:3d:81:3f:
         ef:3f:81:92:30:f6:2b:fa:a4:bb:33:4c:77:2d:32:ea:47:12:
         4f:3d:8b:81:de:90:7b:cf:4e:30:a0:40:a0:ed:6c:2e:a6:15:
         d1:cf:51:f1:81:62:30:de:8e:f0:f5:15:e5:09:91:dd:56:1d:
         a3:e7:55:7e:51:8e:dd:06:6b:eb:92:b1:f0:f8:a2:e8:be:34:
         eb:f7:53:a4:d6:74:15:ff:9e:d4:b3:74:42:03:ff:76:30:e1:
         99:b3:2d:ea:6e:d1:d1:f9:34:64:e6:21:e6:f4:c7:4f:05:11:
         82:8a:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----