Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File:                     Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier:          w6JgD9LXuRWgMTxK3T53O2lfdf+6EHSKgqUNPi9reG4=
Subject key identifier:   E6:0E:25:E9:26:C2:FD:17:62:7B:94:6A:63:73:8F:FB:65:7E:CB:74
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer:       /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial:       01962E2AD09710BFFD1C8D52DA311175DE59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number:          1332
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
                          2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
                          3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: aZuhMCQU+JE9yOR9CVhXSxnAJg1o4uSm9w0WN5o6MDU=)
                          4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
                          5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d0:97:10:bf:fd:1c:8d:52:da:31:11:75:de:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=e60e25e926c2fd17627b946a63738ffb657ecb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:28:db:40:f6:ee:b8:46:38:a3:07:6c:a4:
                    d6:6f:25:c4:74:75:7c:78:7b:28:cf:74:3a:16:38:
                    0e:33:0c:60:9c:c3:5a:4c:42:f8:fd:1d:a8:de:78:
                    6a:56:6a:78:f2:3f:86:d3:5a:f0:ea:50:66:a2:5d:
                    f3:ac:5c:bb:67:e1:85:33:a6:ab:48:52:c0:bf:c9:
                    d8:60:d8:2a:f2:ff:98:df:7f:be:c6:22:56:45:a1:
                    c0:8f:e3:36:35:1e:e9:07:1d:b7:50:47:5f:2d:70:
                    d1:db:83:1c:d1:d3:da:53:a8:73:92:f7:ca:96:86:
                    13:38:2f:b6:83:31:79:80:8c:62:cc:9a:17:6c:03:
                    94:f4:c3:d6:68:36:5e:b1:80:2c:08:72:36:d1:c8:
                    35:03:9e:cb:05:93:a9:d6:8f:19:20:10:28:97:f1:
                    dd:9a:1b:7d:af:73:f4:a9:99:40:67:56:47:c3:06:
                    db:02:fd:a8:e8:43:76:8e:47:4b:87:63:18:1a:12:
                    ad:6d:48:b6:5c:48:4f:e9:c8:2c:21:5a:5d:9d:c2:
                    2e:c1:5b:ae:6e:7a:4e:d0:5a:ab:06:3d:00:d5:1e:
                    ea:a6:49:85:63:92:0c:2b:1b:1e:38:93:17:d6:3d:
                    94:76:07:ab:52:e2:06:c2:5f:27:89:5e:73:13:e4:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:25:E9:26:C2:FD:17:62:7B:94:6A:63:73:8F:FB:65:7E:CB:74
            X509v3 Authority Key Identifier:
                keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:62:39:ec:36:df:c0:e3:a7:5f:99:9a:1c:a2:36:35:be:73:
         f7:45:0a:ae:04:35:92:c0:39:06:96:8e:07:77:9f:59:34:61:
         e0:2d:71:4e:c9:09:47:37:95:0a:d7:67:b8:b6:db:df:1b:aa:
         53:8d:af:0d:e1:0e:33:dc:4b:9d:34:a8:67:cb:72:fa:c2:c0:
         b2:d8:83:b8:e9:c0:b5:ae:ec:8d:4f:70:66:65:f7:a4:56:40:
         3f:2b:f8:90:67:46:53:89:7f:3d:9e:2e:dc:34:40:9b:8a:c7:
         15:1a:4e:0f:b1:26:97:a5:3a:3f:b1:5d:08:bf:44:33:b7:46:
         e7:35:b6:e8:77:55:19:12:b1:51:b4:80:9f:27:ab:f0:51:3e:
         55:53:b0:9a:05:bc:a1:e5:8f:53:5f:5f:ee:78:a2:19:6d:84:
         57:d2:1a:53:95:af:c9:30:a9:da:4f:c8:84:c2:5d:74:0b:4c:
         2e:a9:a2:23:96:c2:72:bb:e2:85:00:71:8e:d0:b4:24:22:73:
         cb:ba:c3:a3:13:5c:5d:b9:93:44:a0:b1:bf:a1:80:bf:91:38:
         80:67:bc:2b:99:27:38:51:70:3e:89:20:aa:48:66:ec:4d:fa:
         0e:5d:77:2b:11:7e:36:0c:d4:da:5c:25:3a:5a:c8:e2:0d:e4:
         de:3c:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----