Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File:                     Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier:          i9cS06n4uz50f9/Dh/4B0eoZ1INuATzvl43OYqltS5Y=
Subject key identifier:   F1:61:D3:B0:59:46:E9:02:DB:BE:25:FE:72:35:EE:2C:8C:1D:33:10
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer:       /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial:       01962E98EDACC85F201D06800628A4B3ACAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number:          0B52
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: ygb6zb8rxqonf1HNfKWUJPHtfXSyrLPKYijWyHj/KjE=)
                          2: GWHlXKm0sM09h00CHS4OA90ZDEo.roa (hash: nINowmfDfKGL1Tvt7j8uTMeqVpzK8gUstL889w0cG50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ed:ac:c8:5f:20:1d:06:80:06:28:a4:b3:ac:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=f161d3b05946e902dbbe25fe7235ee2c8c1d3310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:f7:e1:85:61:10:11:35:41:a2:25:b9:ed:
                    96:ae:61:bf:d1:03:3e:dc:f0:68:f9:2c:c1:18:be:
                    a0:d7:18:6c:cb:a7:62:36:f6:42:69:7a:2c:cb:09:
                    16:cf:95:ef:d9:65:65:44:b0:c5:51:34:4a:b2:ab:
                    fa:31:75:28:cd:e6:75:cc:1d:bb:6a:91:8b:d3:5b:
                    5d:87:c3:c0:a6:9b:dd:c9:09:da:08:7a:fc:5a:30:
                    c2:b8:2f:d2:37:d3:7f:16:c8:e4:2d:8e:d1:47:fe:
                    68:f8:11:44:b3:50:04:59:25:25:1f:bb:5d:2f:5b:
                    47:f2:2f:fa:ee:2c:61:67:92:fa:02:d7:0b:86:80:
                    8c:aa:e2:48:95:d6:2e:cb:d2:4e:1a:d8:5e:e2:3f:
                    f0:59:62:3b:79:ee:ef:90:0d:de:f5:83:a0:05:3d:
                    8e:94:0c:c4:f9:f2:3c:f5:e5:29:99:70:d0:f8:d2:
                    f4:8b:cb:38:af:1d:dd:ec:66:44:b1:44:97:19:33:
                    36:6a:6a:6f:e6:41:75:89:81:07:15:23:5d:09:ef:
                    f3:b6:42:d1:72:d6:04:97:50:18:57:75:d0:71:62:
                    75:c1:3c:a2:84:70:77:67:c1:c4:c6:6e:71:7d:4e:
                    91:58:c0:d3:15:85:0e:f0:e7:2f:29:df:37:aa:d9:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:61:D3:B0:59:46:E9:02:DB:BE:25:FE:72:35:EE:2C:8C:1D:33:10
            X509v3 Authority Key Identifier:
                keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f7:84:d8:e1:36:a9:a9:90:76:1f:9e:d1:38:5e:52:ba:88:
         7c:7d:e2:84:f9:d3:85:02:9a:a0:90:12:28:44:a2:81:80:b3:
         a8:5b:31:60:09:83:bd:eb:fe:59:eb:1c:6c:1a:31:6b:a2:73:
         d4:f0:64:82:75:1a:77:94:0b:94:7b:6c:32:0d:1a:fc:88:58:
         23:97:d8:58:89:0a:73:29:9b:27:0e:a1:d5:35:b7:b9:b4:84:
         38:6c:aa:f7:9e:a5:2e:49:da:de:34:b0:0e:dd:97:c6:e8:ae:
         0e:df:2b:3c:95:62:c1:f3:48:d8:e0:f9:4e:ed:bc:e1:47:58:
         f8:b8:af:a3:ba:85:8e:b9:4f:b8:06:e8:5f:50:b3:f1:24:27:
         05:2d:7b:cd:2a:33:5a:b0:cc:64:f3:c4:e4:b4:c1:47:1f:5e:
         0c:4d:08:d1:eb:18:e8:7e:ef:be:9a:3c:5a:2b:77:82:aa:19:
         70:c5:0f:fe:3a:e4:4a:6a:9a:a4:62:0d:19:30:f4:9c:ef:4b:
         2e:e7:1e:9e:a3:75:0e:95:ad:9a:aa:1f:31:b1:27:94:c4:9a:
         17:79:f7:7c:18:d7:ea:79:ef:f6:54:84:fc:21:cc:4a:f9:62:
         15:9f:55:d6:c2:c5:f2:8f:65:65:f4:06:39:83:22:c6:b7:fc:
         06:35:fa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----