Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File:                     CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier:          yc/bYsy7gek2mNVY4QZCgRtoujHFSVtN4H2AawjcZYE=
Subject key identifier:   6A:F9:5F:AC:6B:0D:31:1A:E1:9E:48:85:70:67:85:DC:6D:3E:DE:9A
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer:       /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial:       01962E995783214DFA486D5B6CF3D9EF9DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number:          11D8
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 9g2oNKMWPHaY3ypyN3GFZxzPfs4.roa (hash: 8RtD/0fyq33fqE6JUFidi2A+LQMWPIgnaxTCC9bjGS0=)
                          2: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: vp59leysIl9xW44kj+GRHuJklJ4PxMmUoxnizerHlF8=)
                          3: HtV3FEKPYRYDY8G-1hRWsnLwlC0.roa (hash: Fe1/XdGKNSuTPZCZpZdJHVC5upZbn8MH26YO1cQpOgY=)
                          4: MK8eqrMP3j5ymuZ4qk999b-iSkQ.roa (hash: nNhLpGCxsknDRkcaORpA6GPvezr0Frk5rCO7fQ7CtRw=)
                          5: R8GgH67MzGYrmtUBlZ44LYdM_44.roa (hash: eNGVD5qiBokWARwlEPYWPW2sMCzs8hQrScOks2RkSK0=)
                          6: Ybcq71LggwVgyEjZGj3f3dEpdkk.roa (hash: f0t7i7gDS9zIIPu03BEE6WGbhFMn5Zbnq+bqTPfH+j8=)
                          7: bKr8UWW3-RF_D0B7S4TpF3ssvtc.roa (hash: kYFW2by3SyFaWc3VlVXDw0SIgIp3P05RN26zndjXy/k=)
                          8: mtdclY8O-xs5gcnHoOhafDFUgKI.roa (hash: rbz7XQGehDM4qlCCC493lW8PFTdkUVLafneGpzVymQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:83:21:4d:fa:48:6d:5b:6c:f3:d9:ef:9d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=6af95fac6b0d311ae19e4885706785dc6d3ede9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:00:63:d5:4c:9d:a7:6b:f6:d5:13:f5:74:
                    f1:d2:75:f0:a5:df:7a:aa:d0:a1:10:b1:0f:75:e4:
                    ca:1e:d4:39:cc:d6:f5:a7:27:55:c5:0f:04:6b:7b:
                    10:f0:ce:ff:11:8e:09:e1:9f:f7:b5:e2:a0:f7:ff:
                    49:34:21:33:0d:de:d1:10:7f:b6:33:f0:d2:f8:7e:
                    28:d1:53:22:e5:be:0f:1b:01:1c:2f:af:2e:81:14:
                    8b:18:04:61:a5:52:27:0c:1d:42:b8:a8:e7:dc:35:
                    18:4f:66:44:c5:73:06:77:c7:04:1a:8a:25:ad:cb:
                    a6:e5:60:e3:b1:ba:c0:38:c6:0f:27:5d:6d:6a:87:
                    c1:c2:8c:70:59:d2:a3:74:f4:08:d7:af:06:af:4e:
                    14:2d:d5:d4:7c:08:97:30:87:c5:ca:ae:11:e5:86:
                    6d:f1:94:7c:7d:e7:ef:b1:b0:ea:07:82:74:0f:eb:
                    f9:de:30:10:dd:3b:2f:ce:a9:6a:3e:49:4c:f2:ca:
                    71:12:5f:cf:c4:fb:3f:d2:28:dc:83:92:68:58:20:
                    e1:f6:7a:4d:e3:83:2d:c4:b2:1a:e1:87:6b:c3:92:
                    7c:a7:70:6e:12:26:aa:ea:33:ab:1c:97:0b:9f:8f:
                    8d:8c:c8:01:6d:0e:d6:da:bf:01:34:c6:c7:3c:b5:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:5F:AC:6B:0D:31:1A:E1:9E:48:85:70:67:85:DC:6D:3E:DE:9A
            X509v3 Authority Key Identifier:
                keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:32:29:bb:de:5b:6b:11:e0:d7:38:ce:a9:8c:bf:a5:80:73:
         38:31:5d:6e:a1:a1:05:fc:8b:fc:eb:3f:f3:24:69:64:09:83:
         87:ca:6e:38:a3:1a:60:e9:b5:fe:00:98:a8:b9:d2:5f:b7:25:
         08:b6:02:74:b4:28:77:28:fd:73:aa:2b:a6:2d:6d:a9:53:44:
         11:e3:b4:e1:77:5c:af:ac:6f:54:33:db:93:f3:07:9c:12:4e:
         b5:fe:bf:8a:01:f0:5a:c6:09:0e:4e:50:6f:57:80:aa:75:c3:
         c7:24:3c:e8:b7:0d:49:62:5c:81:4b:34:79:20:d5:8e:54:f0:
         85:17:b5:e5:d2:b7:0b:e0:51:e6:be:f3:35:16:f9:d7:7d:76:
         00:27:ec:46:f1:99:5d:98:8e:64:3d:ec:f6:9d:60:b5:f0:36:
         9d:4c:b9:94:96:94:c2:a7:64:31:26:73:f0:52:a9:11:1d:55:
         6d:f1:a5:e8:9d:23:c2:eb:8b:3a:7a:29:1d:db:2b:54:f5:da:
         84:1a:07:13:e9:9a:51:31:58:ed:3d:f3:64:0a:24:89:1d:40:
         69:6f:8b:e5:90:f7:a1:0c:a8:7e:2f:85:28:af:29:df:d7:4f:
         4c:cd:61:cd:10:be:4b:e9:fb:f8:31:b3:66:56:d6:7d:8f:f0:
         0d:0e:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----