Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File:                     Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier:          ToicdaGeeGEzP+y/rhGsrJSYsKbLiayFi1Id9vVlSEs=
Subject key identifier:   39:25:F2:3E:97:55:8B:98:C6:75:BE:C8:C8:1A:39:B5:6B:04:40:F7
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer:       /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial:       01962E98DC0F6582427487F5E429E612EC7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number:          0501
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: BqKeLQZDGnl4OtyWUs2Cx/MoyyHHe4hCCKUnvg5sQq0=)
                          2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dc:0f:65:82:42:74:87:f5:e4:29:e6:12:ec:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=3925f23e97558b98c675bec8c81a39b56b0440f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:a8:97:72:06:69:d1:66:7b:1d:10:90:d9:
                    2c:36:35:d8:02:93:e8:ba:c0:bb:7f:c7:c3:9b:77:
                    26:6f:dc:61:45:1e:1d:8a:ce:9a:1d:53:51:d6:9e:
                    91:cb:b5:75:18:2b:ec:24:cb:5e:52:a3:71:d4:73:
                    a6:e9:31:23:7b:8c:ce:25:e1:45:9c:5e:d2:23:5d:
                    ff:bf:01:e2:f8:a1:1f:22:e8:b5:23:1b:ba:6c:2d:
                    3e:e7:27:bd:5b:3d:c0:12:b2:ee:0e:a2:64:b5:b7:
                    76:c0:9c:c1:72:e6:15:f5:78:4d:3d:15:0c:c6:4e:
                    d2:97:6e:c8:6c:3c:3d:88:b2:6f:da:05:80:a7:68:
                    d3:b1:40:19:12:a7:a6:10:1a:d6:c0:3c:6d:65:38:
                    70:c7:0a:74:67:e9:9c:86:0a:4f:e5:5f:b3:0c:fd:
                    00:0a:1d:4f:f8:a3:96:f1:00:0f:9f:b2:be:2d:e7:
                    af:de:10:b8:c2:cb:e5:af:7f:04:4a:d2:84:d8:03:
                    ff:2a:ec:1a:7a:e2:72:70:51:2a:2d:1f:00:39:ee:
                    64:2b:34:48:ef:2d:9a:5b:c5:bc:a7:23:31:6f:1a:
                    d4:75:cc:e1:83:0d:99:3c:00:21:d2:ca:5a:4e:1a:
                    8a:22:e5:c9:08:14:2b:a9:27:93:c9:4e:c2:90:5e:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:25:F2:3E:97:55:8B:98:C6:75:BE:C8:C8:1A:39:B5:6B:04:40:F7
            X509v3 Authority Key Identifier:
                keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:3b:dd:84:07:00:65:0d:11:2b:17:6e:95:79:74:09:41:
         e5:6e:21:94:45:d1:d8:50:a1:90:13:ca:63:c2:25:4d:8a:0a:
         e1:9e:f8:c8:a4:f3:05:06:fc:5c:48:fb:07:44:d7:8a:c1:cf:
         ae:3b:8b:9b:25:f3:59:4a:41:62:f7:d3:49:10:62:df:46:a4:
         b4:89:08:7a:4f:4b:7d:36:c7:0b:28:a3:38:9d:93:c4:ca:01:
         02:d6:bb:01:b2:00:3b:3b:3f:06:b8:4d:da:aa:3d:64:55:b7:
         f5:62:42:01:04:d9:c7:39:9f:e1:c9:0e:66:ca:55:14:5d:dc:
         63:3c:36:45:1d:5c:06:81:d0:24:fe:84:3c:d2:21:8a:f6:7d:
         01:ec:43:6d:b1:bb:bd:ea:44:56:ec:89:fa:81:b5:af:a3:6f:
         95:9a:9b:5f:d8:21:b9:f1:27:39:dc:61:64:fe:ce:2b:47:63:
         1e:9d:21:71:c0:91:65:61:a7:3c:30:65:bc:53:01:0c:ce:65:
         f0:20:d1:42:66:29:b4:7a:85:1c:24:a3:3d:8b:12:b7:aa:fa:
         f8:6f:43:f1:a0:18:e9:f7:56:8e:97:cc:62:0c:16:d7:32:b9:
         5f:8f:a9:03:b9:51:2a:33:da:ab:d4:26:46:dd:91:ce:bd:ed:
         67:56:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----