Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
File:                     CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json)
Hash identifier:          JH3kObvxle1+5ZNFXaUCZTMdAlC6ciXhnWCrXvCRTb4=
Subject key identifier:   B4:86:E0:17:A3:24:DB:87:8A:D5:34:81:8E:63:D8:86:67:AF:12:A1
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Certificate issuer:       /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial:       01962FAB47E6D63ED1CA466591A375C89806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: RV9VNGzYhd4EUqjgfB613XARyu9d+EFvrfMFe6UilY8=)
                          2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=)
                          3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=)
                          4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=)
                          5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=)
                          6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=)
                          7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=)
                          8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=)
                          9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=)
                          10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:47:e6:d6:3e:d1:ca:46:65:91:a3:75:c8:98:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=b486e017a324db878ad534818e63d88667af12a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:c9:81:20:e6:3e:d4:99:be:4d:e9:09:c5:
                    61:0b:54:c9:fc:b8:77:a7:8b:8b:67:47:82:89:1c:
                    70:85:22:2d:8f:b0:39:9c:db:57:51:3f:fb:90:8d:
                    e5:71:5f:d0:85:39:57:33:40:d9:2d:6d:7d:6b:09:
                    d3:9a:87:76:c0:54:fe:33:45:3b:50:b2:85:34:6a:
                    1b:9b:06:08:8c:8a:2d:11:ba:8c:14:d6:0a:f3:36:
                    64:4f:4a:5f:7f:7e:69:16:a8:6a:d4:ae:8a:88:fa:
                    bf:a9:a6:60:18:d2:d8:7b:10:bd:1e:96:b0:4c:f0:
                    aa:fb:43:40:f9:8a:e6:d3:97:87:a1:65:69:a0:3e:
                    ff:b3:dc:a6:cb:a9:e1:cf:53:47:52:7b:e9:30:1a:
                    71:b4:ab:de:d4:f1:3a:f9:34:22:f0:1d:69:11:c9:
                    96:87:fe:0a:b7:a9:30:a6:db:98:11:d6:2c:a0:dd:
                    34:a0:76:4b:2d:0b:be:c7:1b:a9:5f:07:73:73:e7:
                    9d:71:9a:45:f9:28:03:4e:c0:92:b8:03:8e:14:76:
                    b3:eb:a1:3c:b4:f0:e3:0c:3d:70:1e:e9:fa:60:6d:
                    bf:dd:02:68:0b:d1:6a:15:d7:d7:a2:fa:d9:a6:59:
                    6a:cb:86:d8:b8:22:52:43:7e:17:a9:1c:fa:a0:9d:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:86:E0:17:A3:24:DB:87:8A:D5:34:81:8E:63:D8:86:67:AF:12:A1
            X509v3 Authority Key Identifier:
                keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:d4:e8:72:03:d4:55:6e:01:2e:10:eb:6d:01:a8:57:b5:
         65:63:d9:a5:1d:26:6d:ca:40:dc:c8:d1:2f:7b:c5:45:2b:3c:
         dc:60:1e:f9:e0:4b:cd:e1:01:63:a3:e7:f4:ec:bd:4b:bb:bc:
         09:42:e9:5a:74:b1:ff:86:72:96:1a:9c:78:9d:30:f5:92:26:
         63:97:83:b3:b9:e6:98:ec:f9:ff:8a:76:98:ce:ba:35:b0:be:
         22:55:2b:2b:80:ed:58:bb:6d:fc:c0:3c:6e:45:58:e1:fd:10:
         32:99:9d:8e:a6:e7:c5:60:27:07:a9:7a:14:e5:38:b5:15:d7:
         0b:f0:79:4b:cd:e1:55:e0:bb:1f:c1:63:08:04:34:e6:7d:1d:
         c5:45:45:5f:74:50:22:09:86:2c:77:71:6c:7d:d2:ee:93:0d:
         3f:2e:62:c2:67:df:c3:a5:e0:55:05:ec:64:10:8e:58:f4:e8:
         ec:e0:0b:7e:a5:ab:79:85:ed:10:c0:77:74:06:be:98:8d:05:
         aa:30:3c:5a:f6:ed:0c:a1:45:06:66:91:a8:cb:cc:91:2d:37:
         8a:0a:d5:60:ad:7b:ee:3a:d3:ba:86:ca:a9:69:d0:e9:1f:31:
         58:b4:2e:83:78:cf:57:84:c9:f0:d8:35:00:c2:5f:f3:6c:5f:
         48:60:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----