Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File:                     CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier:          aY/SVoMYQ4skPLxQ/9RM5SHPrTFKdgARPcAIcTTPV9A=
Subject key identifier:   9B:2E:82:94:1B:D5:97:BE:6F:77:65:4E:33:FE:8D:0D:BA:EE:CB:62
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer:       /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial:       01962E618757A02F153B2F73942BFE120996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: 1KRQcOVuhUSWP4gtZxj3ynVOplVx5qumt65WxyFxux4=)
                          2: GP2HIzJfCfnGM2MVlkSHwUHaN84.roa (hash: ETW1pgFwQtTKE9AFyJGtQ+Xl0Zj/E5KZv9xhDaWW5T8=)
                          3: qfVV9jSGkUSpTVAmIfthWu05Cnw.roa (hash: UbRHP3L39dp/ZkCYjMy0IuUuv/BT0urLDu7xXNtiXsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:87:57:a0:2f:15:3b:2f:73:94:2b:fe:12:09:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=9b2e82941bd597be6f77654e33fe8d0dbaeecb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:30:6c:63:ab:78:7f:f1:1a:13:e6:89:5f:
                    8c:dc:9a:54:f8:1b:43:ae:b4:d7:b2:17:d9:34:ab:
                    aa:f7:18:87:76:71:35:93:29:ef:d4:4b:19:a2:d2:
                    ae:1c:a6:2c:06:7b:bd:b8:19:08:d5:4a:a6:7d:be:
                    c2:34:e7:20:17:2c:fc:57:d7:6b:8e:5e:24:18:d0:
                    a2:79:29:7a:bd:14:18:8d:57:e1:fa:90:28:ad:34:
                    b9:c9:a6:e2:39:38:72:8c:30:9f:d9:76:1e:97:ed:
                    da:98:c1:df:40:6b:18:7d:bc:34:f6:01:67:c1:2d:
                    c4:d1:d2:10:ff:88:1e:68:1b:5b:fd:b0:75:1e:01:
                    d8:13:0e:21:8e:51:69:27:30:b4:42:0d:c4:fc:89:
                    58:e9:20:51:7f:03:c5:6b:a8:f9:63:6e:fb:29:38:
                    d6:2a:15:68:d0:3c:67:dc:3b:f8:36:eb:79:1e:78:
                    ac:90:c9:aa:8d:64:db:ee:9e:65:e6:6a:e4:e6:60:
                    98:24:8f:6d:48:32:10:f6:08:ef:fb:56:d4:99:87:
                    4d:82:97:19:d9:e5:7f:93:65:1b:92:9b:75:56:bb:
                    5c:51:c9:8f:ef:4d:19:46:3a:c6:63:4e:ef:8b:f8:
                    7b:af:dc:98:61:49:b1:a2:30:91:60:99:c4:9c:1f:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2E:82:94:1B:D5:97:BE:6F:77:65:4E:33:FE:8D:0D:BA:EE:CB:62
            X509v3 Authority Key Identifier:
                keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:e2:f0:99:fc:7a:f7:4a:49:d3:57:70:b1:85:8c:2e:98:
         b7:35:29:3d:d6:e5:40:b4:6f:b9:cb:a0:ff:9e:d1:e4:50:24:
         84:66:e2:3b:34:e5:9c:d6:49:f8:77:01:23:07:bc:be:cc:8e:
         6a:d8:76:c5:ae:c6:87:60:0e:72:51:b5:8e:60:a1:97:9c:9d:
         9c:10:b0:b2:03:98:11:61:05:0a:f6:f8:b1:99:7f:a9:bf:28:
         ec:fe:cd:e0:88:d0:b3:a8:5c:c9:f5:d1:0f:e5:2b:21:4b:e9:
         1a:10:f7:59:43:09:f6:51:28:2b:06:11:01:f8:62:9b:e6:62:
         dd:76:0e:e2:0b:bb:94:3d:f3:80:28:3d:22:0e:ba:bd:4c:ab:
         59:a7:b0:35:0d:3d:2b:bb:1e:fb:a6:71:42:29:d7:1a:8a:87:
         09:57:95:a5:85:65:88:b7:5f:24:df:40:d9:7d:65:e6:b3:59:
         7c:59:dc:2a:93:ed:ad:47:39:93:d3:b9:1a:e1:1d:79:d2:a9:
         fc:0e:04:08:17:8b:d7:0e:67:cd:47:2e:e3:16:68:e8:f9:2e:
         a4:ff:b8:b8:ed:ae:1e:72:a9:53:5d:be:d1:ec:79:d3:ce:0f:
         6f:fa:78:75:03:7a:44:a6:f7:f4:91:19:c6:43:cf:c0:87:be:
         21:b3:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----