Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File:                     CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier:          QbxvDaMlCRlvk+MkjHXdDi0mwMfE5NzoS16d0N4q3qw=
Subject key identifier:   08:93:6E:17:FE:C4:51:48:3A:6D:8A:07:C2:0A:28:AE:7C:5A:90:4B
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer:       /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial:       01962F064B2844C437A581932A0CE997B1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number:          05A8
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=)
                          2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: C2EggsJjDFVmnI4w6ppvWJdYsTXuihJ94dPkLwD/smg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4b:28:44:c4:37:a5:81:93:2a:0c:e9:97:b1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=08936e17fec451483a6d8a07c20a28ae7c5a904b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:d8:c9:80:f2:54:b3:bb:d6:01:38:66:8b:
                    15:74:1e:1d:49:de:52:32:7c:d5:77:e7:4f:59:fa:
                    d3:f6:dd:4b:c6:15:de:29:88:d2:06:58:a2:91:8e:
                    45:c2:80:77:f4:19:2b:15:ba:05:0d:6b:f3:17:28:
                    16:6f:96:d9:ec:b6:12:25:df:62:91:45:97:d0:fa:
                    7d:07:73:77:07:88:86:8e:77:19:4a:68:93:43:02:
                    04:8e:8c:8c:e0:69:4f:84:33:ae:0a:c5:f7:9f:c1:
                    de:ee:70:1c:a3:5d:2d:d8:3e:97:d9:8c:cf:c6:cc:
                    2c:1a:fd:db:82:26:6a:77:dd:b5:9c:61:5b:27:86:
                    77:df:e6:10:00:14:64:2f:4c:ef:8e:68:a1:39:f0:
                    74:bf:2e:de:16:74:7a:4b:3f:09:9e:69:3d:57:de:
                    08:8b:ec:8b:6e:29:34:d1:5f:03:cb:64:4f:51:6d:
                    6e:f9:c7:ab:01:74:ff:3e:42:32:fe:a5:08:4f:ae:
                    c7:96:02:a3:95:0a:e0:26:e0:0a:86:32:b1:57:bd:
                    58:7d:df:eb:17:86:15:3d:5f:e0:f0:0e:10:c3:aa:
                    cd:fa:c3:e6:52:44:48:30:5c:11:fb:d7:b2:18:21:
                    cf:e2:83:06:a3:6c:c5:42:c4:85:5b:38:05:00:7f:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:93:6E:17:FE:C4:51:48:3A:6D:8A:07:C2:0A:28:AE:7C:5A:90:4B
            X509v3 Authority Key Identifier:
                keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:78:99:0c:e8:42:64:6b:ea:3b:78:b0:5e:3d:42:b2:aa:
         74:82:37:71:89:e1:05:9b:5a:fa:1a:b6:67:aa:10:e4:e2:d0:
         a9:8d:8c:6e:e7:6a:8f:63:2d:b1:04:08:42:ac:6a:12:72:60:
         99:8b:d8:10:ae:c6:0e:8b:49:75:67:b1:e8:be:63:5c:15:3c:
         fe:5d:16:85:30:f5:9d:29:f1:91:ae:f7:ec:8d:ee:6e:f7:cc:
         51:ca:9e:c4:09:92:8e:36:e0:1f:a7:74:27:a8:7b:10:75:54:
         9a:3f:52:17:b9:4d:06:4a:15:8d:1b:0c:29:07:d2:ad:42:e9:
         ed:13:bd:e2:23:5a:84:a0:0f:48:d9:57:bf:d5:b2:0e:e7:bf:
         bb:d7:bf:18:51:8d:be:70:db:72:94:81:3c:5f:45:f2:30:53:
         ab:07:4f:79:e4:67:04:ee:19:8d:f3:49:62:5e:de:02:80:41:
         9a:a0:b9:44:3d:1a:cd:61:e0:01:43:1a:cd:9d:b3:a8:ce:63:
         06:6b:17:0b:08:1b:54:27:59:ca:2b:ef:f3:8d:ff:7f:9a:25:
         34:02:21:5e:59:7f:f5:b7:2c:53:1e:32:f1:1d:ad:b5:06:b9:
         5f:f1:99:f2:c1:f3:b4:5d:d0:fa:3e:c0:0a:fd:fc:69:af:ba:
         eb:5d:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----