Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File:                     cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier:          sMnOWMraI+iEZFr2OtV09Q1KWL7h7S8rTTBsApTJPlI=
Subject key identifier:   FD:02:58:60:FC:EC:D3:7F:32:68:AA:5F:1D:4D:6C:A0:D3:E7:02:AA
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer:       /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial:       01962E61B1C1F8C97A1BCF08EDC41B6C13DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: MZI2cVctUvj9OGLzHSnkJfh2G+r3w8Ww6zzOsjjCewU=)
                          2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b1:c1:f8:c9:7a:1b:cf:08:ed:c4:1b:6c:13:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=fd025860fcecd37f3268aa5f1d4d6ca0d3e702aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:5a:d4:69:a8:0c:15:ae:f8:87:1a:62:df:
                    41:2d:c2:5e:e8:df:c4:11:42:7c:4c:3d:23:5c:82:
                    98:75:a5:67:d4:3b:1f:ae:ae:88:02:98:f9:18:58:
                    d1:26:3d:f4:bc:9f:ea:7a:cb:74:95:fa:30:9d:7e:
                    40:a2:08:8c:9a:09:11:f4:81:07:d2:7d:cf:5b:9d:
                    36:98:bd:85:ac:37:aa:12:1b:fd:0d:a1:f7:4d:dd:
                    b7:4b:57:56:76:31:43:62:30:b5:e4:24:e0:af:4b:
                    04:dc:9f:94:13:20:81:08:76:41:41:55:32:7c:46:
                    fb:f3:b4:9c:4b:dc:29:57:d6:0f:81:f3:7e:c3:82:
                    5f:ef:9c:99:94:d6:4c:da:fb:2f:5b:62:ce:1b:8e:
                    8f:71:a4:22:17:10:50:64:81:2a:79:94:2c:a0:8e:
                    b4:55:f6:41:ca:00:df:d4:79:f9:64:9c:c1:76:60:
                    c1:6b:44:5a:01:02:f3:af:26:d6:bb:96:97:8c:f3:
                    36:45:7c:85:47:0b:00:1e:a4:83:62:85:fe:b9:49:
                    d9:9d:62:5c:91:5f:46:ba:9b:4a:77:57:94:5d:d8:
                    2a:cd:17:33:4a:9d:75:9c:c3:ab:13:39:94:9e:fa:
                    e8:38:1b:b9:37:fa:7d:be:4f:d9:db:3d:87:8e:67:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:02:58:60:FC:EC:D3:7F:32:68:AA:5F:1D:4D:6C:A0:D3:E7:02:AA
            X509v3 Authority Key Identifier:
                keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:00:74:34:59:2e:94:3d:8b:b2:48:ba:1c:c6:29:66:14:34:
         16:ce:5e:9d:c9:40:e8:10:09:7e:c3:44:f8:81:4a:90:f4:18:
         28:75:fc:2c:02:2e:ff:49:e5:0a:91:18:66:d9:8c:cd:58:6d:
         6d:f6:0f:05:54:89:db:61:e9:4b:64:33:86:1e:71:b3:ea:57:
         8e:29:ba:ba:6a:1c:3f:22:db:df:26:ad:ae:6a:52:30:ec:bb:
         81:a0:ab:a3:b8:90:6b:52:de:22:b4:96:9b:b2:b1:97:5e:d9:
         c2:5d:11:15:9d:55:b9:a5:e2:91:fd:60:ed:62:b1:bc:a3:60:
         70:d4:9c:2e:86:85:40:ab:8c:a1:e9:99:08:7a:a5:56:89:3f:
         d6:7e:df:fe:b5:90:e2:33:47:3d:fa:0b:f6:e4:24:21:b0:92:
         cf:f7:d8:87:d1:4e:8a:45:94:b1:0e:fb:f4:3a:b3:8a:06:d0:
         b0:b5:cc:a2:17:85:a5:b8:6f:f6:bc:1c:de:37:4a:e9:4f:59:
         8d:f6:bb:89:c7:f0:3f:d9:e4:e4:ab:86:65:cd:9e:f8:27:4e:
         67:ea:d0:33:92:ca:15:19:b7:d5:e9:df:19:93:6c:ca:0b:b7:
         64:15:78:95:ea:70:36:1e:b2:fa:30:45:de:b5:a5:fc:5f:fc:
         7c:cd:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----