Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File:                     CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier:          dAXOUIcFb3s82IxwT0YrFZnuy8QSo2+vUR2w03N3cn0=
Subject key identifier:   B6:DC:EB:7D:4C:D1:76:97:19:58:CE:71:6E:22:E0:EC:2D:75:18:2D
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer:       /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial:       01962F0685EF74194A2D50FDA16BEF589593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: tgRQ++JyEJftZjUDOLl5KuxN/Scy1NDKEeMaHB1/LLk=)
                          2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:85:ef:74:19:4a:2d:50:fd:a1:6b:ef:58:95:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=b6dceb7d4cd176971958ce716e22e0ec2d75182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:c5:53:ca:ea:ba:b9:e2:8b:e6:0d:cc:c0:
                    06:22:f0:57:bd:27:26:71:48:41:ad:89:88:9c:07:
                    05:cb:b8:88:f5:96:02:82:9d:60:05:e1:a4:2b:a1:
                    62:26:33:98:63:5e:44:15:78:af:14:37:fa:26:3d:
                    81:d4:0b:b7:1d:48:41:e8:33:73:5d:82:e7:ab:22:
                    08:a9:8f:b0:8f:44:3c:f0:5f:f7:a3:d9:1a:85:c1:
                    00:bd:2e:4b:49:67:32:06:e4:e9:43:48:4f:31:fb:
                    b7:6b:fb:d7:ef:80:d7:c8:83:61:5a:cf:d3:5d:40:
                    15:07:fc:ff:30:cf:0b:6d:e6:cf:a2:ea:89:2f:18:
                    4b:95:4b:33:7e:20:45:0a:07:07:28:0a:39:c7:b0:
                    1d:d4:55:bc:a2:50:b9:3a:4c:66:7b:cd:f5:d7:b3:
                    27:89:4e:87:40:2b:56:5a:8f:33:b4:09:1f:3e:4e:
                    51:07:2c:a2:5f:98:7c:c9:cd:32:63:b7:e3:6f:48:
                    84:7a:7c:dc:15:5d:8e:e2:08:cc:31:b5:9c:fb:2b:
                    fe:98:9d:4c:ed:e6:e7:6e:47:e3:c4:da:d1:50:a0:
                    7e:af:85:45:c0:a6:57:c6:3b:bc:17:3f:dd:ef:98:
                    36:a2:52:8a:22:0b:f3:17:3d:6a:72:21:9b:98:72:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DC:EB:7D:4C:D1:76:97:19:58:CE:71:6E:22:E0:EC:2D:75:18:2D
            X509v3 Authority Key Identifier:
                keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c8:8b:de:dd:67:54:e6:9b:50:8c:8f:0e:d4:24:b9:2a:47:
         5f:27:e8:22:94:b4:f8:e1:54:3e:e9:36:cb:f8:cb:a9:d8:10:
         fb:ec:d6:1d:5b:c9:a1:bd:ef:27:b8:93:f8:d6:44:3f:cd:e5:
         5b:8b:67:ae:cf:53:e8:7a:c0:8c:a2:ec:78:32:68:bf:a8:cf:
         94:d0:cd:38:73:7a:11:5b:47:20:98:ee:bd:a8:99:b5:3d:89:
         18:3a:40:4e:6b:1b:16:9b:8c:f6:7c:a1:c3:6d:06:e2:93:d8:
         fa:ab:5e:d0:d6:94:db:01:65:26:29:22:da:2f:9a:fe:3d:70:
         f0:5f:ee:c0:2c:94:dd:f4:05:36:3e:b5:57:2a:7c:dc:c2:6a:
         7e:8f:fb:49:fb:08:25:61:44:5a:b2:5c:25:d2:2b:ff:55:e3:
         ec:a9:8b:cb:a9:29:46:4f:1c:a0:c1:22:97:d8:da:d7:8f:54:
         bd:a6:7a:7e:23:1b:63:90:01:97:cb:22:4d:58:05:12:11:41:
         e8:33:74:6e:8c:5b:84:a7:e8:fc:53:e2:ff:1a:27:46:c3:d2:
         23:66:96:89:39:21:a6:44:a4:31:ef:05:26:13:fe:e8:87:b4:
         00:4c:50:43:af:d3:fc:15:13:ad:d1:75:33:9f:bb:2a:e0:b4:
         1e:3d:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----