Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File:                     CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier:          dMY2ZiazZppGZ+GzfYkKRxSoI3UrO0G7LFY5zEDu5Uw=
Subject key identifier:   E2:C7:88:40:63:51:9A:42:5C:3E:AF:F0:7C:13:5F:14:BE:B3:69:5A
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer:       /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial:       01962DF3CBF3475D4F7CC035FDA234C167ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number:          1069
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: 8ITxB78YhL6iyevfDD4DRjmhHIuhm5MhdMh+4YM5HhQ=)
                          2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cb:f3:47:5d:4f:7c:c0:35:fd:a2:34:c1:67:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=e2c7884063519a425c3eaff07c135f14beb3695a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:35:05:6f:b9:a5:cb:9e:8e:4d:ec:bf:b5:
                    0e:9f:26:42:32:2e:a1:2b:53:f2:e3:6a:6d:08:ee:
                    4e:e8:ff:6c:42:d1:d7:86:4b:a9:8a:e9:10:8d:8a:
                    7b:76:fb:24:08:4b:ee:9c:1e:1e:66:f7:98:12:95:
                    69:1d:c9:d0:82:a6:d2:4f:79:58:04:d8:7d:48:15:
                    ad:6a:f1:23:32:3f:e8:03:3d:f0:2b:39:ed:2f:e1:
                    d4:d5:0e:38:58:b9:5d:3d:f7:93:d3:03:96:85:7f:
                    7c:6a:25:e2:28:05:07:bd:07:8c:96:87:d9:45:63:
                    a7:4a:e3:76:ac:11:4b:11:9f:08:ff:f3:17:b0:2f:
                    d6:db:39:d5:4a:21:bf:35:e4:c5:e0:33:5e:02:eb:
                    c6:5b:9d:70:f4:ac:aa:52:ac:b8:f0:29:e0:5d:e3:
                    81:f0:f9:5f:b2:1d:f2:6a:e0:48:83:34:ee:d3:ff:
                    44:61:66:50:36:22:62:b7:67:b4:b8:0c:ee:fe:03:
                    74:d8:a3:03:35:77:25:cf:70:c5:dc:53:17:e8:7b:
                    5f:c9:f2:c7:d4:cf:1f:c8:9e:1d:93:0b:e9:08:10:
                    ad:da:6c:34:e1:e7:dc:46:a3:14:56:e5:e8:38:ce:
                    d8:35:f1:77:80:20:20:f4:41:5b:f2:30:e8:c1:e5:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C7:88:40:63:51:9A:42:5C:3E:AF:F0:7C:13:5F:14:BE:B3:69:5A
            X509v3 Authority Key Identifier:
                keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:7e:e7:c2:6d:18:0b:1c:05:28:7e:89:66:51:f5:a7:4c:f7:
         f1:d8:b7:23:da:6b:a0:df:1d:66:70:0b:66:e4:c4:b1:1f:96:
         7c:46:ff:4c:d3:f9:12:47:a7:b8:66:43:e3:7c:ab:69:7a:73:
         9c:8f:5e:ce:15:56:59:dd:ee:77:f0:3f:4b:c3:0c:97:9c:06:
         b5:3e:c6:52:7b:ae:c0:90:80:d7:92:51:bf:d5:88:66:38:fa:
         b4:c9:21:21:28:c3:2a:ef:af:03:7e:76:43:2c:d6:08:c4:a8:
         2a:75:cb:84:60:06:af:40:a4:f4:d1:41:39:2a:75:66:f2:20:
         86:07:a7:38:62:3a:2d:87:bc:37:4e:1b:90:79:b3:97:ca:56:
         87:be:55:e5:0b:12:77:e9:9c:eb:ef:55:95:47:79:d5:af:3d:
         c5:41:bc:68:56:6a:26:a2:1f:2a:0b:68:0e:41:7d:4e:93:5b:
         bf:e0:aa:bc:65:11:d1:ea:ce:8b:52:fa:5c:f0:08:e2:9c:f5:
         51:7c:f7:e5:e6:e2:cf:ae:ed:cb:81:6b:65:b3:90:57:a9:64:
         01:57:7d:c3:84:bb:21:42:0e:0a:12:d7:9d:2e:44:e6:f8:41:
         14:01:7e:a8:75:8c:ba:0b:eb:d1:34:a0:e3:57:ff:5f:3f:fc:
         58:2f:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----