Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File:                     73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier:          YKPK7NwSRqkRxhtMpWwOAwisChtGvPnx0o+hVdNkzek=
Subject key identifier:   B3:E6:FA:FE:92:F9:D6:A0:0B:80:E7:22:D0:0D:53:CD:5F:CC:8D:C0
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer:       /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial:       01962F07399FA097B812E6AC0425420D294C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number:          0CAF
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: LA5TYsGU6tyAQbZ/Aunlo4ngHParWqZMO6pUnJEWSBU=)
                          2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:39:9f:a0:97:b8:12:e6:ac:04:25:42:0d:29:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=b3e6fafe92f9d6a00b80e722d00d53cd5fcc8dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:8c:7f:f3:78:26:e4:f4:d5:33:b9:cf:67:
                    95:5d:87:14:ab:63:38:22:34:0b:e2:a4:55:7f:9a:
                    f6:c7:70:84:85:8e:04:2d:1f:75:94:ae:db:59:8b:
                    07:71:14:64:5f:d6:c7:a5:a2:eb:62:00:cc:6d:9e:
                    0a:0b:6a:9f:e6:f3:58:bc:a2:6e:09:4f:b2:db:6d:
                    38:14:ab:5b:0b:9a:6e:45:45:64:b6:59:0a:c1:31:
                    21:09:a4:e0:7a:a5:1c:fc:8a:28:b7:d2:18:33:fd:
                    0a:41:a5:0f:76:5b:b4:81:bb:c5:f7:14:ab:15:6e:
                    d6:96:be:0a:a5:6b:82:4a:5a:84:53:3e:8f:c6:bc:
                    8f:3b:13:40:7e:f3:fa:20:9e:33:4f:7a:3f:b5:2a:
                    92:84:27:9a:80:b3:56:1b:c8:b1:94:48:1e:84:c7:
                    9d:a6:af:2b:08:59:dc:8b:23:f8:ee:46:15:64:41:
                    8f:e5:43:f5:1e:a5:f2:27:87:36:1f:ef:f7:6e:26:
                    e9:08:59:81:c3:9a:41:7e:fa:88:df:c6:a3:46:00:
                    03:80:a1:22:01:67:f8:76:08:e9:fb:03:82:e7:55:
                    8f:33:49:95:d2:e6:b0:d5:37:26:b6:35:d1:65:d6:
                    b9:c1:89:bd:bf:04:ff:19:ad:b7:5f:56:df:9f:5a:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E6:FA:FE:92:F9:D6:A0:0B:80:E7:22:D0:0D:53:CD:5F:CC:8D:C0
            X509v3 Authority Key Identifier:
                keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8b:3b:9d:9b:37:0b:3b:26:cf:ca:1d:ab:84:6b:39:2e:6b:
         1e:33:78:4e:b9:f8:0f:b9:a6:3f:ee:62:5b:79:ac:17:73:bb:
         d2:72:17:a0:34:f1:8a:b5:2c:ba:46:ed:96:d8:94:37:a2:35:
         9c:6e:0a:b5:98:e3:0e:75:92:22:b4:de:f5:3a:46:51:e5:79:
         ff:40:1e:4e:78:33:7e:5e:93:28:31:e4:6e:45:9d:e0:80:de:
         f7:1f:0f:d6:1f:a9:5d:9d:8f:30:a2:7c:00:37:d3:c3:8c:86:
         7f:d6:b4:95:d8:36:61:e9:b9:74:bb:e4:c7:97:b7:77:cd:9f:
         3d:0f:64:a3:27:b6:f1:bd:d4:68:74:5b:ca:43:64:75:5f:df:
         c1:0d:67:9a:91:35:f0:ae:6f:a2:50:d6:29:87:04:c2:e3:83:
         0a:23:a3:e4:51:9a:fe:1c:8e:9a:9c:b1:95:bf:b5:13:12:d5:
         d2:51:98:7b:fc:0a:23:36:db:74:76:4d:9d:2a:29:5c:79:85:
         3f:ce:3f:df:15:1d:25:c8:60:0a:20:6a:25:82:79:d7:23:10:
         fa:f0:f6:8a:a4:d1:5b:63:a7:40:c2:d3:58:0b:8b:b4:24:97:
         87:c8:17:42:b7:21:52:9e:d5:3c:85:81:7c:ec:eb:c4:90:57:
         c7:39:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----