Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File:                     cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier:          0OUhxh1Jy2ko2SS+aEKHSnlI80FO9s2/JRrQuSh5aCI=
Subject key identifier:   0A:F7:BB:9E:47:C1:84:AA:3E:CE:25:D7:83:56:B2:4E:E5:3B:5A:41
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer:       /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial:       01962F3DC91F8CFD481B78CAA2E931691D4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number:          0348
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: XGvXolDseg1YugpBqFmsVC5vpbQ.roa (hash: 8a1LI50NpHMYU4J+v/T9i7ox43+U6tlzxIDHs0QOPT4=)
                          2: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: xgrMKDW8jy8cL0M1SreukTXBSMroA/uH6rtBb9K9+ZE=)
                          3: eBlI5fYlwU-hqPNae0UC9cusTO4.roa (hash: 3AE3XHL3YDzuuqRVxicnDD9A9BkMYu4bqpc83LOUodY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c9:1f:8c:fd:48:1b:78:ca:a2:e9:31:69:1d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=0af7bb9e47c184aa3ece25d78356b24ee53b5a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:b2:84:28:5b:25:ec:67:5e:26:f4:64:7b:
                    2b:8c:81:a0:8a:ea:d3:3d:95:27:ae:9e:f2:62:cb:
                    ef:0d:04:33:f3:7f:ee:c0:5a:3a:f4:17:31:b8:40:
                    81:6c:84:80:da:da:f1:5a:da:05:c8:07:2f:6e:33:
                    65:ae:c7:f9:74:d4:e3:e5:99:6e:36:3f:7c:db:d5:
                    ea:dd:f1:e5:a0:f3:71:c7:e2:11:15:e3:af:4b:bf:
                    ca:57:c7:07:82:94:ee:38:ff:88:4d:05:e0:25:d6:
                    18:10:ac:f0:78:74:a1:79:49:f1:06:67:5c:7c:5f:
                    f4:9d:f2:bd:b3:9e:0e:6a:65:31:09:2c:c9:50:be:
                    2c:ea:85:ad:75:33:01:5e:b2:d4:04:be:66:f2:98:
                    6f:c9:ba:ea:43:e3:cf:03:4b:e2:00:fb:19:d6:a6:
                    43:65:58:c6:82:39:5b:79:26:08:bc:32:95:3f:48:
                    66:fd:eb:62:5c:7d:ea:61:44:eb:07:50:c2:db:ca:
                    b5:e2:3a:06:0f:f7:84:c6:ca:e7:28:60:88:43:45:
                    42:0c:54:b4:bd:eb:6b:ec:50:b8:91:3d:50:8a:10:
                    3e:40:c8:55:7e:6b:8d:84:8f:31:be:71:24:37:82:
                    27:76:e8:45:b5:3c:c2:26:5a:81:30:fb:c8:d3:e0:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F7:BB:9E:47:C1:84:AA:3E:CE:25:D7:83:56:B2:4E:E5:3B:5A:41
            X509v3 Authority Key Identifier:
                keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:73:e7:94:d0:08:f9:25:6f:10:cb:9d:9a:60:55:3a:2b:
         45:39:f8:45:10:ce:8d:fd:74:25:8c:0c:b0:77:b1:29:af:d2:
         25:3a:af:83:fe:ac:bb:60:66:85:5c:3c:63:a6:95:36:fd:72:
         a9:cf:f6:89:05:a7:ad:76:e4:f5:9b:4e:98:fc:4e:9e:97:31:
         65:39:5d:dd:7c:46:51:92:e3:7d:bf:fd:03:50:8a:fd:5c:29:
         f2:b3:16:4d:17:39:75:d7:87:3e:00:9f:3c:a2:e9:ae:b4:a5:
         cc:3d:c1:fb:6f:59:72:42:f3:df:1b:5b:f3:67:d9:b6:c9:dd:
         ae:cd:81:43:62:0a:85:44:51:c5:8a:4a:cf:0d:27:4d:18:dc:
         92:c9:ae:31:b0:0c:71:c2:cd:d0:27:36:9a:24:8e:69:ba:79:
         cf:ac:35:55:e1:ca:8d:63:08:86:33:b0:02:57:00:b0:fb:2f:
         a4:a4:4f:aa:a2:2d:c7:8e:74:76:7d:8b:cd:bb:87:fa:de:18:
         f8:ed:91:46:7c:54:3d:22:c1:0d:20:bf:8d:2a:a7:da:81:82:
         c4:bf:2b:2f:57:82:56:6b:c8:1d:25:57:94:0b:d2:5a:9b:a3:
         c6:2d:49:dd:ad:cf:1a:d8:59:7a:4c:a6:01:dd:47:ed:69:3a:
         58:96:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----