Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File:                     CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier:          MMS/j+Az5Y7Ja5TO65XC2YentwVkKvnrFVuvtkbrKOU=
Subject key identifier:   B4:AB:1E:3B:9A:49:50:5D:C4:38:AC:46:BF:D3:FC:DE:52:97:0F:D8
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer:       /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial:       01962ECFA064B93743576BA47E2A5DDBA282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number:          06AD
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: 4NykHTKnfSIJ0q7_RZtsAwpsqKA.roa (hash: w55fxLVLcagKRRaTKAUle3eBEN7JDI5LPLVo9zNJXVU=)
                          2: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: AbE7Ny/ydZjqeQBxzB6wxmnWnvf6o+ERmU7dXp6hxuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a0:64:b9:37:43:57:6b:a4:7e:2a:5d:db:a2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=b4ab1e3b9a49505dc438ac46bfd3fcde52970fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:78:d9:36:dc:db:90:63:be:4a:ae:9f:7d:
                    25:64:e1:f1:41:38:0a:d8:24:35:b3:6d:61:54:d3:
                    18:56:4e:7a:ea:e8:a5:b6:e3:ae:31:ec:94:d6:fc:
                    77:ac:72:0e:68:dd:b5:13:6d:40:69:21:ad:a6:b3:
                    13:42:ff:6e:41:c8:b1:7c:7c:8a:59:b1:0c:fc:12:
                    5f:86:bf:ac:50:73:78:da:05:a8:d4:68:17:24:b2:
                    95:0d:9a:09:f4:cb:ee:8b:17:09:8a:7b:28:4c:a1:
                    ba:8a:63:6d:89:96:19:e4:3c:4a:09:2b:94:71:74:
                    a4:6f:f8:1d:be:2b:ea:22:40:00:6a:f8:44:05:88:
                    70:4f:38:ee:f2:d6:1f:1f:70:56:01:c2:6b:50:2a:
                    66:56:8b:2b:15:03:bb:b8:da:a9:0f:d1:6b:70:cc:
                    bb:dd:8a:4a:7d:7c:fc:e4:3e:2f:44:bb:9e:84:16:
                    66:db:68:51:4a:24:d0:ec:4e:37:52:6c:09:fd:91:
                    ca:ac:3f:df:46:6e:9c:60:a6:7e:8c:e7:eb:8f:fd:
                    03:61:b8:78:a1:5c:bd:4c:a3:7b:f0:c3:6f:77:da:
                    2c:9b:da:e7:64:02:fc:5a:64:7d:96:30:a9:fa:10:
                    d1:6b:1a:e4:40:d9:5e:25:da:c5:59:2e:35:ad:d3:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AB:1E:3B:9A:49:50:5D:C4:38:AC:46:BF:D3:FC:DE:52:97:0F:D8
            X509v3 Authority Key Identifier:
                keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:dd:c9:36:3e:79:4f:2b:40:f1:0e:b8:4b:af:6c:7e:35:
         c9:8b:2e:46:32:e6:2e:04:66:65:76:ad:12:3a:6d:02:c0:82:
         1a:4f:ef:d0:3a:b7:95:3f:51:23:57:b1:39:1c:d0:c3:ee:b4:
         68:24:32:de:b5:b6:ba:bf:cf:94:58:1b:a8:f7:2f:c7:3d:d9:
         81:5f:df:de:d4:0f:5b:f4:e9:06:80:e8:66:79:3c:f3:b2:7e:
         18:8a:8c:2d:1d:3a:2b:02:d8:e0:35:55:08:f1:69:39:76:38:
         4a:cd:a2:3e:35:28:3e:49:57:fc:ac:0a:6d:93:64:39:aa:74:
         b8:6f:95:43:02:79:38:34:03:f8:e1:2f:26:0a:11:38:46:84:
         a6:0f:4d:86:ac:2e:fa:d0:9b:ef:2a:aa:3d:11:e7:0e:a7:05:
         de:33:07:1a:8e:bc:be:1e:22:27:ae:02:17:34:83:b5:29:43:
         8b:5b:22:e9:47:7c:47:53:54:81:ce:2c:c4:ce:e4:65:8f:03:
         14:a0:b6:99:45:ec:20:2d:ca:8f:fc:4c:b0:3e:98:ac:ea:8c:
         66:c7:ad:c1:9e:73:7f:cf:49:4e:7a:8f:a8:f9:92:85:38:29:
         b0:cf:c0:a2:f7:62:dc:e2:ab:7b:37:1c:e6:ea:2f:38:82:88:
         42:10:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----