Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
File:                     Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json)
Hash identifier:          C6vlxJFdARX5KxLqe6pFbV1qxvv9rL9xVHbmN999QUY=
Subject key identifier:   92:E0:29:7A:3C:28:F3:9C:A6:11:8F:FA:21:45:43:76:CA:B6:57:E6
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Certificate issuer:       /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial:       01962E61EC7D50D9CD0405AD4AEF294D6634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft
Manifest number:          1229
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: 3QIHHzxl8osyxnL754KJVtl4CIGtZqvTcBhI6XChc70=)
                          2: rbzHYHanwggYI2O2PyN_ccDQ8To.roa (hash: ZzfYYIwcl7wz/PiBDA2nkdbr3LCq3ECUyDagAbAOmJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:7d:50:d9:cd:04:05:ad:4a:ef:29:4d:66:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=92e0297a3c28f39ca6118ffa21454376cab657e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:71:e0:1c:a2:14:c8:cf:91:2f:fc:bc:c9:
                    1f:32:6f:de:e6:50:ab:50:7d:90:85:44:1d:f3:0e:
                    86:e8:1e:54:55:22:1d:0b:52:62:15:97:f8:cc:93:
                    1b:54:a2:16:0f:c6:bb:fa:a4:4f:e3:22:61:ef:c4:
                    ee:4a:2a:b9:91:56:b3:93:86:d4:86:90:93:4f:5a:
                    a7:01:66:c4:8f:83:3b:24:c6:66:38:28:b5:fc:cd:
                    4d:64:05:d7:6d:db:da:2c:1f:33:a8:84:11:f4:c9:
                    53:90:1b:4a:65:dd:36:bb:d6:b1:f0:35:b3:ce:0e:
                    bd:3f:28:4d:83:3d:a9:cb:39:c8:04:ae:8d:df:03:
                    c2:14:cd:1c:72:5a:ae:88:4f:fd:96:03:b8:aa:1f:
                    a5:c9:88:b2:3e:c1:a9:be:fc:70:af:08:84:57:5d:
                    d5:19:b7:e4:a3:e1:e9:60:3e:f1:37:8e:9e:cc:25:
                    0d:44:80:cb:6d:a1:3e:09:04:ce:48:82:64:e9:77:
                    44:0f:a7:25:36:a7:42:d3:dd:01:06:f5:ad:0b:f5:
                    47:1c:e5:70:2d:1f:af:45:05:a0:3a:6a:89:fa:0e:
                    8d:a6:d1:ef:6e:84:43:a4:7f:4d:ff:0c:33:48:07:
                    93:02:93:dd:f6:67:5a:c5:3e:51:ee:7f:f3:cd:1d:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:29:7A:3C:28:F3:9C:A6:11:8F:FA:21:45:43:76:CA:B6:57:E6
            X509v3 Authority Key Identifier:
                keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a1:76:3d:c4:83:71:48:8b:17:c0:ac:5e:a6:56:d0:68:64:
         f8:0a:36:c6:3f:29:7e:bb:74:22:4d:6e:df:04:cd:1d:ca:d0:
         1f:34:8c:a3:cc:20:29:df:60:e4:75:a4:29:1d:9d:b0:2c:cd:
         e7:ef:8e:dc:db:16:47:b8:53:b5:bb:e1:3a:59:a8:cd:d6:15:
         07:96:46:6c:1f:52:69:c1:d9:28:8a:d0:c9:6f:2c:0a:cb:00:
         54:ff:9b:de:96:34:43:cf:98:7e:44:fb:de:ac:a5:9b:92:42:
         cd:69:bb:c3:db:0e:6d:55:a9:b0:88:c6:17:3b:c3:9c:18:9e:
         12:a2:11:f7:d5:6a:b4:7e:6d:c1:1e:8d:3e:1c:06:4c:27:5e:
         26:29:bd:5e:1d:ad:a1:29:98:13:f3:35:2f:25:07:c8:36:4c:
         f2:2e:fc:08:cf:26:b1:88:23:45:3b:cd:41:35:ad:67:fd:c3:
         51:73:ad:81:d6:94:38:c1:e3:27:65:b8:1e:b4:a5:93:10:f9:
         ad:aa:7b:15:0f:78:e2:a2:b8:e2:70:b4:34:8f:32:cb:f7:06:
         95:00:d9:20:02:97:0f:09:c3:d9:80:f1:24:b5:20:ec:80:a3:
         17:4b:7b:13:1b:51:bd:75:dd:eb:f2:fc:b6:67:11:62:27:e0:
         7c:38:d1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----