Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File:                     Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier:          HeQ2VrDizLEsAbLF0u/tSB0z1e2A8u3dEUG3dRuXI2g=
Subject key identifier:   54:E2:99:AD:04:3D:6B:2D:35:B1:6A:53:BD:F5:5F:D1:11:A5:14:12
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer:       /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial:       01962E99616427F572101095D1CE23598BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number:          01DF
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: qJqXVgYDZjUN4Cpyho+tqzVwdYE8pbGIvLRdYb3jWjU=)
                          2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
                          3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:61:64:27:f5:72:10:10:95:d1:ce:23:59:8b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=54e299ad043d6b2d35b16a53bdf55fd111a51412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:40:c2:87:7c:ec:b1:18:dc:7c:08:4d:f9:
                    a4:f0:82:40:7b:a7:12:c1:ac:bb:26:2d:ee:9f:73:
                    e3:73:42:9e:65:f0:7d:73:5e:67:af:13:ee:24:a4:
                    eb:56:09:cb:dc:03:d1:01:d5:6b:34:b1:46:99:c4:
                    62:87:05:c8:eb:49:99:5a:f1:aa:12:b4:de:77:43:
                    22:ef:7b:31:dd:b3:0e:1d:99:dc:65:78:e1:21:d3:
                    32:db:6e:64:c5:18:df:4a:35:4b:65:38:23:c2:9c:
                    0c:6d:93:e8:46:c2:e9:27:2f:61:f5:bb:3e:d5:c3:
                    0e:08:90:d5:63:15:4f:20:54:c2:28:01:e6:a0:47:
                    38:61:e8:37:1d:75:5c:d5:01:a7:d5:9a:ba:18:b1:
                    2e:c8:9d:f1:6d:f0:2a:8c:39:a7:96:32:11:94:f6:
                    d0:fb:d9:46:83:a1:8c:16:fb:97:5c:0f:4c:f7:98:
                    bd:da:77:6f:67:1a:3f:68:7f:45:cb:b7:d9:b4:8c:
                    69:73:aa:2f:9c:de:86:e9:a0:0a:9d:bf:ac:47:8e:
                    70:11:27:37:bf:c2:19:bf:66:b7:6d:5a:71:d7:e5:
                    a8:51:cc:6b:4b:e6:84:55:a0:42:6a:7b:fe:3f:9b:
                    ca:b2:76:2c:7a:f9:27:7a:d4:81:97:f0:25:c0:35:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E2:99:AD:04:3D:6B:2D:35:B1:6A:53:BD:F5:5F:D1:11:A5:14:12
            X509v3 Authority Key Identifier:
                keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:18:bd:52:e9:ca:25:2c:63:0c:b6:be:69:6a:22:79:1c:73:
         4d:c7:ec:7d:f0:6f:14:0b:48:35:73:0e:f7:67:cd:3a:f4:fa:
         e9:9f:3b:85:d2:02:5d:7d:db:a7:f3:06:99:46:84:50:34:60:
         d2:b8:bc:73:fe:a7:bf:40:26:96:37:ef:e1:71:d3:02:74:e7:
         a9:0a:8f:0d:fd:ac:d4:88:c6:19:99:06:d6:b2:3b:ac:0d:7e:
         9c:6e:1a:be:f8:d5:e1:b7:50:c2:aa:c7:01:37:80:d9:bf:53:
         85:27:4b:6e:d4:b7:b0:a5:97:f8:7a:f1:63:f8:bf:68:05:d4:
         c8:eb:14:ea:e0:92:ca:26:d0:74:de:a7:9b:7f:c9:90:2f:a7:
         99:f3:ec:42:79:3a:14:e9:3a:15:5d:9e:ee:9c:4d:d7:64:64:
         8a:ac:33:0c:31:6a:38:a2:51:b1:4c:14:6b:b7:ba:26:05:8b:
         6a:0c:05:45:d0:64:2d:88:51:5a:e3:64:0a:ee:a2:ee:cf:6c:
         36:10:21:47:0b:01:aa:b5:3b:bb:e1:ec:0d:40:5e:61:e7:c9:
         e7:82:74:00:4a:44:5a:41:0a:3c:48:9b:8f:33:7e:1d:1a:8b:
         1a:9b:65:90:2e:11:65:8f:11:75:62:5f:d1:28:fb:78:c1:84:
         dd:5e:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----