Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File:                     v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier:          +N8roWuCPQKwf8PTLrO6b5buRcfizTIwKHVOW7QUlx4=
Subject key identifier:   45:4C:6A:98:49:5F:1B:BD:A0:34:F5:F1:39:A1:B0:CE:97:E8:15:5C
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer:       /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial:       01962E98ECB04EDD99854FD56492B10AF872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
                          2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: 7xUZqvGPZdjlJXB/umG8TW0NGWEjrPKxL4XLV47fHOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ec:b0:4e:dd:99:85:4f:d5:64:92:b1:0a:f8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=454c6a98495f1bbda034f5f139a1b0ce97e8155c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:91:24:3b:34:fa:8e:76:eb:f6:2a:ed:45:
                    4e:1d:56:48:e3:fa:d3:38:94:10:7c:6a:2d:4e:0a:
                    66:df:29:41:c6:63:f0:25:f8:fa:a8:60:7c:ee:c5:
                    1b:16:34:bf:96:73:f0:57:fc:91:e5:21:73:d4:ec:
                    ed:97:d9:e7:f9:67:04:ba:a9:1a:85:bc:a4:11:01:
                    0f:1b:64:26:7a:dc:2d:7d:7a:ee:84:56:c7:4e:46:
                    a6:52:c1:b2:d1:67:92:87:99:fb:18:96:5a:6e:99:
                    32:0f:70:2d:bc:d6:8d:a6:a4:8a:20:30:73:a0:b2:
                    e1:0b:a6:87:37:15:09:45:09:c4:a2:20:37:22:59:
                    a9:3e:f4:8f:04:f9:b8:66:46:ee:ea:07:df:16:b4:
                    42:10:e0:01:7d:2d:e5:f1:38:17:50:9a:78:95:5e:
                    61:fc:e6:5f:a3:3e:4e:29:dc:d1:99:56:f1:d5:c3:
                    43:ad:be:32:1d:b1:62:5b:7d:6c:d1:5d:7c:66:3e:
                    a7:d0:7e:54:25:32:be:69:bd:e4:a0:77:8b:db:fa:
                    d2:31:f5:5e:1e:12:99:b3:c8:c4:8a:fd:7c:c5:e9:
                    9a:4f:25:f8:41:2e:b3:d1:7f:e3:a9:b2:4e:1d:5d:
                    38:aa:5c:df:48:ee:1d:c2:50:92:31:4f:db:fc:f0:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4C:6A:98:49:5F:1B:BD:A0:34:F5:F1:39:A1:B0:CE:97:E8:15:5C
            X509v3 Authority Key Identifier:
                keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c6:40:9f:03:ca:dd:4c:cf:49:f2:7c:8e:63:36:ae:58:d0:
         85:7a:b9:c8:0f:97:03:60:bc:ce:e0:f2:e0:66:a3:bb:15:b9:
         e1:27:fa:86:d8:f5:6a:8a:a6:27:e3:68:53:00:7e:18:a7:80:
         1e:43:27:f1:aa:c6:86:aa:de:14:a7:6f:59:4d:ff:4d:3b:2b:
         81:f2:cc:77:79:09:97:f9:2d:d6:d6:a7:de:a5:e5:38:95:98:
         a3:0d:67:62:2d:31:7c:58:d7:d1:2d:f7:d7:30:cb:99:7b:e6:
         1d:3d:d3:3a:f9:b2:ba:85:b3:69:40:84:fe:1e:6b:73:b3:5b:
         29:1f:a2:61:c4:85:8b:54:6a:9b:06:02:d7:84:c8:af:95:54:
         b1:eb:7d:41:64:7f:a9:c6:29:bb:bd:c1:52:31:19:b8:19:b5:
         18:e3:c8:43:b0:88:a8:f8:5c:8e:df:79:42:11:48:c9:bb:68:
         15:6a:2f:a9:f0:c6:26:db:6c:c1:71:c6:fe:66:cf:8a:ab:c3:
         88:79:79:d2:8d:24:5f:71:ec:98:1a:35:0b:ed:14:1d:d2:de:
         40:0c:4f:40:c9:81:e8:47:9d:57:6e:d5:cc:b3:b8:aa:12:07:
         e1:41:ad:e6:f5:59:f8:3b:10:c4:b2:6b:6a:00:2d:3f:41:fc:
         25:54:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----