Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File:                     cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier:          E3IaL4gurNvLw5S8cFBboXpLmHUVngNFnW7HqLFnJXE=
Subject key identifier:   48:27:8D:3C:6C:19:0C:AE:DF:C4:6D:18:30:D0:49:87:D3:67:F5:42
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer:       /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial:       01962F748E02EBA2C3D44DE34D55EE955449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number:          103E
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: +6yh1/LrVz5WkAZawubORx4rm6mzesMjPijiKWT4mW4=)
                          2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8e:02:eb:a2:c3:d4:4d:e3:4d:55:ee:95:54:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=48278d3c6c190caedfc46d1830d04987d367f542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:52:94:df:cb:40:de:b5:bf:e4:40:cc:bd:ef:
                    36:bc:8f:06:6a:ed:a6:3e:ef:5b:6d:c7:1b:01:31:
                    d3:c0:10:b7:83:3c:b6:a9:b7:9c:5d:fd:2d:18:09:
                    ee:a6:f6:db:0e:a2:04:31:78:03:46:f8:85:24:d2:
                    40:0f:42:6e:3c:7c:a0:de:ed:f8:e8:5f:06:49:8c:
                    0f:99:bb:6a:eb:92:c5:56:2a:bb:53:55:b0:46:6e:
                    a6:82:10:04:45:f3:61:69:eb:d9:67:28:59:3b:41:
                    e7:b3:e4:c0:7d:fc:e2:f8:9a:3e:69:41:3c:64:b6:
                    7b:ae:3f:31:89:19:a2:7a:af:1d:18:9e:79:22:51:
                    a3:12:62:d0:39:79:b9:66:8e:d4:be:46:ea:ae:83:
                    92:57:ac:bb:a6:ed:98:4d:30:27:03:2a:fc:48:23:
                    4c:86:4a:96:c6:e2:86:10:d6:bd:34:3a:7d:9d:38:
                    cc:3f:92:a7:b5:ad:d5:84:d7:a2:70:3c:96:9f:bc:
                    0c:8e:e5:80:3c:90:1b:b8:4b:7a:62:a6:de:7d:79:
                    19:bf:ad:15:14:44:d7:f5:91:f4:88:69:2a:cf:f6:
                    67:92:60:33:b9:d3:47:15:76:61:c8:be:b9:dc:47:
                    c9:03:20:e8:38:ac:b4:da:0e:ef:f2:85:aa:24:86:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:27:8D:3C:6C:19:0C:AE:DF:C4:6D:18:30:D0:49:87:D3:67:F5:42
            X509v3 Authority Key Identifier:
                keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:a4:af:99:e3:4f:40:55:73:e1:b8:ed:83:bd:4a:7b:36:
         dc:fb:63:b7:c6:e6:4f:67:72:b1:19:7e:13:ad:2d:19:4f:ff:
         31:e6:88:18:67:c1:27:5c:1d:3b:23:e8:d0:ba:d9:58:2a:2b:
         dc:f5:be:09:21:c9:8b:0e:78:0a:9f:32:a4:c0:e9:bc:8f:c6:
         c8:92:0f:3e:48:69:d4:93:5d:7d:95:69:bc:b4:c8:4f:d5:36:
         13:c9:2a:91:ce:5b:b7:05:dd:11:41:18:48:82:37:c7:c7:9f:
         5b:61:3d:1a:8a:83:d7:24:ad:36:f2:77:70:89:9c:f5:b0:25:
         18:19:43:08:b9:b9:15:db:c3:6f:5e:45:ec:63:e8:48:50:5c:
         3c:0b:7c:14:0e:e1:7f:33:2f:7e:5e:30:f3:96:29:70:a5:8a:
         49:5b:ee:30:79:2e:a6:13:14:ab:aa:03:25:ca:e9:a4:6a:eb:
         a8:40:ee:2a:a5:a7:67:d1:38:da:bd:16:6f:5c:2a:7d:5f:10:
         21:26:08:44:39:03:1a:cb:a9:7b:83:2a:de:40:ee:38:24:61:
         8c:0d:69:9a:07:d0:f7:a9:35:c2:ab:88:58:b1:ba:14:12:a4:
         b7:cc:5c:16:49:8a:33:1b:af:02:03:95:8c:f7:53:d8:8d:52:
         32:2b:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----