Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File:                     CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier:          VBtXY6W5UmomoRQPZckise2TuU5KyfmxuMrVHR3QyFs=
Subject key identifier:   8E:14:75:F6:F3:14:C8:68:3F:0A:4C:F3:FB:E1:F4:B1:8B:B4:99:55
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer:       /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial:       01962E9961B4E8310CF4392EE951349CCBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number:          07D9
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: qL6ZJBzGvQvFueHtrOciPc8mszsiJflG+oZkUp85Z5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:61:b4:e8:31:0c:f4:39:2e:e9:51:34:9c:cb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=8e1475f6f314c8683f0a4cf3fbe1f4b18bb49955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:fd:43:45:7f:51:95:ae:10:2c:4b:69:e0:
                    64:1e:3e:57:4f:db:47:7b:26:33:4e:d7:97:b8:45:
                    45:d9:82:70:20:4e:f0:43:4d:39:e9:71:00:c1:1a:
                    87:01:d2:82:cc:14:04:81:4c:7a:19:97:0e:6c:46:
                    41:ad:36:1b:64:57:6a:f9:cd:0b:be:1f:81:2f:de:
                    a2:11:bc:7f:a8:30:9b:6e:1f:a6:f0:e1:3d:af:78:
                    73:0d:4a:bb:cc:69:f2:04:c3:92:00:82:ee:28:4c:
                    2c:26:dc:cb:ed:6e:18:f8:34:8e:3f:dd:e7:1a:33:
                    8c:45:63:96:60:ac:66:84:db:8a:65:73:4a:90:25:
                    af:4d:91:ef:b9:25:66:ec:f1:56:fa:a4:74:07:99:
                    b9:86:7c:82:fd:2e:34:34:b1:e3:e7:92:9d:f4:fb:
                    2d:91:c2:47:dd:a4:1f:be:53:b6:39:f3:75:d6:2d:
                    cf:d9:22:3e:05:71:e6:35:7f:d9:cc:51:89:7e:50:
                    fb:75:32:57:f3:48:d7:6d:aa:1a:26:0c:15:eb:c1:
                    bb:39:c6:af:a6:de:56:b9:cc:ef:06:ff:d8:d8:f2:
                    51:b7:a9:e5:47:ec:03:1b:23:0d:d4:35:4b:1a:fd:
                    57:f3:e8:cd:b5:8c:e9:5c:10:a8:36:24:7b:92:4c:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:75:F6:F3:14:C8:68:3F:0A:4C:F3:FB:E1:F4:B1:8B:B4:99:55
            X509v3 Authority Key Identifier:
                keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:60:4a:cb:c9:6e:10:fb:60:78:63:f1:05:86:41:9b:07:e9:
         45:f8:80:fe:58:e3:f4:b7:82:17:eb:07:b1:d9:5d:17:f8:ad:
         f4:cb:53:fa:85:06:13:bb:58:7f:24:9e:b5:89:6d:62:2a:22:
         53:b3:d1:f5:c6:2d:f5:6f:ed:7d:44:47:8a:b9:8d:5c:3a:d1:
         53:06:e4:80:7e:87:15:15:f0:af:e4:61:e4:73:7f:60:28:1d:
         ca:a6:c6:a0:cb:9f:df:1e:61:d7:40:b5:b5:86:63:db:8a:5b:
         8e:e3:32:d2:92:87:03:0e:57:5f:c9:e7:fd:51:4a:8c:94:3f:
         ae:7a:e1:d7:4a:6e:9a:1d:87:37:01:4e:0d:f8:53:16:16:85:
         fb:be:f0:60:0a:0a:26:e5:6b:95:37:ac:68:6c:34:d8:f5:49:
         40:1c:c4:6c:d8:13:f3:3f:bf:0f:a9:a1:94:24:a1:02:2c:7d:
         50:d5:62:7b:6f:54:76:f1:ca:83:d7:3b:ab:01:9c:17:3f:5d:
         cd:22:aa:a1:77:4b:df:48:6a:01:77:2a:4f:74:23:e7:b2:59:
         6d:2e:5c:28:1d:95:53:6f:25:b3:72:52:06:7d:69:fd:f0:45:
         c5:28:55:95:9a:ab:d7:40:66:95:a8:b5:03:62:ed:4d:d6:49:
         41:73:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----