Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File:                     cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier:          srRBOL+7J4L/L/ReRaLH1NsKX/dzN0KwcnW0ks/eNSQ=
Subject key identifier:   03:89:21:61:0B:95:04:95:2E:90:D8:E3:D3:68:3B:85:38:61:05:5F
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer:       /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial:       01962E2B20651D6F8B1292A485ECC4F5D9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number:          0331
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: YGqpN3K7qoku4d1ucurJlG9A28g.roa (hash: vV+QkChEXM7aBJKALX0tUZfW7qPTcVJsY+rKECbz5Kk=)
                          2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: 5M+VpZDow+4xea2K7xIF3CcRojzcG4ezpCOwGbrgnjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:20:65:1d:6f:8b:12:92:a4:85:ec:c4:f5:d9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=038921610b9504952e90d8e3d3683b853861055f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5a:60:39:97:f3:f0:46:8a:58:ac:a5:79:18:
                    65:63:53:de:8b:91:67:38:4a:e7:18:30:31:5d:b1:
                    51:1e:8e:5a:b0:d1:f6:f3:e4:c1:8d:08:8d:b0:9f:
                    16:92:60:7b:d5:a9:ce:b6:37:f8:8e:ee:c8:93:37:
                    25:45:58:d7:80:82:fe:ea:a0:b1:73:af:72:f7:bd:
                    20:f8:0c:fa:51:04:b4:75:a0:63:96:5b:41:cf:db:
                    29:94:48:85:be:bc:d5:9b:c3:1f:ee:0d:cb:18:26:
                    7f:4a:66:df:cd:21:cf:b5:4f:76:9d:e0:d3:97:f3:
                    23:5b:65:61:73:d6:6c:b9:38:a2:96:09:ea:69:28:
                    07:d1:2c:84:df:13:7c:75:ca:75:0a:2a:be:b6:9e:
                    25:9a:2f:1b:5e:eb:c8:73:49:7e:af:94:f3:73:ce:
                    8b:94:7b:3d:ce:8a:ec:3e:a3:8f:10:de:45:0d:93:
                    19:f8:c6:bb:1b:f1:69:db:dc:fc:8c:f8:5f:8b:d6:
                    90:79:64:05:ca:e7:90:0c:d6:a4:4b:4b:02:b3:e1:
                    ab:f2:a8:ff:87:e7:ad:92:93:32:f7:88:eb:9b:bd:
                    1b:d0:62:29:2c:3a:f9:33:ea:ba:ca:35:10:af:c9:
                    4c:2a:97:f6:fa:05:f3:e1:47:d9:4a:ae:78:99:11:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:21:61:0B:95:04:95:2E:90:D8:E3:D3:68:3B:85:38:61:05:5F
            X509v3 Authority Key Identifier:
                keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:02:60:0f:73:c4:0f:f6:3a:18:67:0b:33:9d:88:95:a3:e3:
         77:47:a4:15:b7:f1:2f:86:56:28:98:07:0e:54:a1:f6:56:e5:
         7e:42:8e:a5:5e:c2:10:71:6f:a2:f1:18:2e:92:b2:62:cd:53:
         f4:62:f1:d3:f1:fd:e4:8f:3c:79:b8:3a:2f:76:8b:df:40:9c:
         97:b9:8c:00:fb:ac:1f:0e:bd:31:ea:e7:6f:b7:99:e0:3f:cf:
         e1:19:de:96:c1:c8:4d:37:c2:5d:bd:3d:45:47:1f:80:ad:fc:
         a2:fa:02:78:df:df:83:86:4b:0f:0b:23:8d:25:4c:d0:cc:35:
         61:76:bf:9d:17:09:81:a6:93:cf:6f:af:20:40:62:88:91:b7:
         1c:f5:9e:b8:34:7d:57:98:56:3f:24:f6:ce:14:4f:47:5b:ad:
         e8:7d:68:2c:29:19:61:1d:0e:bc:d3:5c:d7:9e:b0:21:c1:f3:
         ee:89:ed:9f:88:70:e9:4f:49:7c:80:82:d9:e6:71:69:35:fa:
         9a:35:59:fc:c8:74:71:79:1e:27:a2:8f:ab:93:f2:cd:1f:5e:
         dd:95:ee:96:2d:4c:a5:59:eb:30:13:36:65:e4:61:fd:61:71:
         53:22:88:69:a3:af:aa:0a:ef:40:20:30:15:6c:c5:eb:12:5f:
         d6:36:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----