Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File:                     uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier:          qlX9EFNSIMz2IJ6/Ws8V0ZVNqh9tZEU0qBUxL0+1oj8=
Subject key identifier:   AE:0F:7F:06:6C:72:37:C9:01:FD:32:E4:B4:B5:A7:EB:62:D4:2F:45
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer:       /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial:       01962F7428DEA558EBC17AE01CE248030005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number:          0CF5
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
                          2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
                          3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
                          4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: dNjpkDqHIr9Kvmi3IFu3A2AmAMqdnIqkYAdPjrBbONo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:28:de:a5:58:eb:c1:7a:e0:1c:e2:48:03:00:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=ae0f7f066c7237c901fd32e4b4b5a7eb62d42f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:42:1e:ba:c7:ba:3d:2b:d1:f8:d3:98:53:
                    ef:8c:d1:a2:6d:30:83:71:1a:fa:c7:f5:df:54:cb:
                    82:de:bb:fe:46:9b:2b:ac:b6:21:85:cc:73:d9:ed:
                    46:34:21:8e:d7:bd:0d:94:a9:d0:72:21:8e:f8:8c:
                    2d:1d:b5:23:91:f9:85:f9:38:c8:db:d5:49:9f:39:
                    c3:3f:75:ce:76:1d:fb:a1:e5:56:95:ff:2e:ff:3c:
                    4d:7d:2e:46:ba:63:48:6b:a4:a3:5e:da:da:75:91:
                    d7:9b:72:d3:61:21:f7:f8:5b:43:0c:ca:d1:4f:ae:
                    57:94:3b:83:22:23:fd:5d:c1:8b:f2:0f:e5:71:d6:
                    8c:36:df:15:82:46:df:e0:a7:f8:a5:1f:9d:36:ef:
                    88:e0:b9:ce:56:66:36:cf:30:81:f8:7b:4e:6c:bc:
                    2d:9d:a7:bc:f5:88:94:71:59:5a:a2:d5:59:1b:05:
                    b8:ae:6c:d6:1d:6b:3d:16:b8:ed:43:db:53:e2:e3:
                    e9:16:e4:2d:b3:23:f7:c1:41:f7:01:98:5d:30:0e:
                    89:d2:35:e9:40:19:a8:bc:8d:76:48:1f:51:e9:b1:
                    5d:8a:ce:4a:c1:e3:1b:b2:fa:45:2b:9d:b6:75:c4:
                    7d:81:ca:7a:ec:70:62:1d:14:15:82:36:4f:b4:8b:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0F:7F:06:6C:72:37:C9:01:FD:32:E4:B4:B5:A7:EB:62:D4:2F:45
            X509v3 Authority Key Identifier:
                keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:d1:cc:8d:3b:a2:61:65:95:fe:91:5d:77:2d:0f:13:f0:
         ff:88:ba:0a:a2:d5:cd:31:90:83:a9:2b:2d:64:a1:fa:cb:c2:
         ea:50:93:7a:e8:76:32:68:0d:b7:2c:a4:2b:d4:e1:b6:2f:4c:
         fb:08:17:5a:5f:5a:8c:7c:9b:10:81:87:44:a4:a8:2c:ea:a3:
         c1:d0:ec:ed:62:f1:17:a2:47:b5:c8:40:80:6a:12:15:c2:61:
         39:ee:8c:28:70:98:07:36:1e:6b:7f:79:13:f7:dd:60:03:9f:
         f8:71:ca:6b:9a:07:d9:95:25:18:4c:ab:e2:9c:91:84:90:4f:
         68:c7:54:83:c7:7d:53:2b:0b:ec:2f:d6:e4:e1:2e:b0:ea:5d:
         a2:91:bc:5f:7f:7f:b5:3e:94:8f:dd:7e:cd:7e:20:be:16:48:
         12:f2:e8:94:dd:74:d6:85:f5:22:5c:21:bf:a7:5e:5e:61:23:
         6d:86:61:cd:81:e6:e4:68:f1:be:3c:7d:93:e5:f3:9a:b8:12:
         b1:5b:31:f4:6f:06:f7:4d:75:ff:26:b1:be:e5:cb:70:ed:4e:
         62:ef:47:20:f3:b0:bd:be:de:5e:99:ee:dc:6e:5d:0c:18:bb:
         dc:7f:5a:b5:14:0b:04:28:fa:a7:8e:51:1c:f4:aa:f7:6c:9c:
         9c:ea:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----