Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File:                     CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier:          7T5LpQLivTzOBg7GFIUlObxkrLGRYpHGNApzpvCtRoo=
Subject key identifier:   76:5B:3A:F2:5D:2E:88:E8:99:02:AD:C0:4F:2F:C1:20:FB:D7:06:68
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer:       /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial:       01962F3D9F5D194367E615A82F7D722085D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number:          14A4
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: zAdEBwyJIpg4Yq65cZLfBkGkpW9PgxMc/m2NEIIUs28=)
                          2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:5d:19:43:67:e6:15:a8:2f:7d:72:20:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=765b3af25d2e88e89902adc04f2fc120fbd70668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a0:b5:6d:3a:c2:fb:21:c9:50:19:fb:96:2c:
                    33:49:b8:30:42:71:12:8e:ae:8c:6a:4d:f6:a1:d6:
                    6f:4b:a3:07:10:bb:b6:5f:89:fc:3d:c8:ea:e5:77:
                    1f:49:15:f6:4c:97:e1:68:57:34:9b:85:71:50:77:
                    87:4e:d3:86:d5:80:6a:38:89:aa:88:68:35:6d:35:
                    e5:d0:44:1d:81:9e:42:3f:64:73:7c:a3:57:1a:5d:
                    fa:fa:f6:64:8b:23:29:a4:6d:a1:c2:0f:ee:5f:39:
                    93:65:fa:21:e8:e8:04:9a:0f:7f:7d:b0:e0:7a:70:
                    57:24:c1:31:d8:ae:3e:34:b1:b9:ee:a8:47:1b:a3:
                    31:58:07:6e:45:52:5f:fd:79:3a:ac:45:91:51:6d:
                    72:18:83:e7:ca:2d:b8:96:de:5c:e7:de:05:2e:48:
                    e9:be:a3:5f:8f:4f:2a:5b:41:29:09:53:f0:11:01:
                    ae:ea:c4:d4:11:5a:bc:98:83:5f:35:43:88:cb:a2:
                    aa:53:f8:fd:e9:85:ce:12:7e:9e:c3:95:08:77:83:
                    2b:2d:00:48:af:1a:5c:c1:06:f4:a1:f7:98:b2:57:
                    2d:8f:14:2e:84:68:2c:7c:ab:7c:4f:ef:89:4b:89:
                    ff:72:60:93:47:89:5c:f0:c4:03:c9:55:6d:0b:cf:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5B:3A:F2:5D:2E:88:E8:99:02:AD:C0:4F:2F:C1:20:FB:D7:06:68
            X509v3 Authority Key Identifier:
                keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:17:24:0b:4d:85:78:62:af:69:6c:c5:18:8e:3b:62:2b:12:
         64:20:53:bc:4a:c1:d3:d9:5e:1c:8e:0f:51:0b:c6:e6:0c:8e:
         81:0a:c5:72:8b:5d:9e:a6:e7:05:9e:bc:43:d9:73:69:a7:09:
         22:d9:e5:ae:f5:fb:24:fb:32:9d:ae:a4:41:07:88:a4:4b:ef:
         09:d0:a8:57:46:df:24:88:e4:b7:f1:a4:2e:c1:24:cd:1b:d1:
         44:4b:e9:77:a9:09:92:9d:5e:8b:c1:da:71:a0:99:4a:07:0b:
         31:e6:da:ea:ab:fc:33:57:56:36:bd:cd:f0:9b:7f:fb:9d:48:
         bd:6f:e1:d3:93:03:9e:a3:f2:04:98:34:87:d3:bc:b9:1e:e3:
         7e:7a:a4:24:55:46:28:27:d0:5e:dd:a8:fc:69:cb:fa:a3:c1:
         e2:42:71:c9:82:bb:72:37:12:48:46:38:c3:e2:7f:5d:19:8c:
         82:3b:66:d0:66:6f:30:ca:6d:83:98:3d:6a:c9:29:c1:b0:19:
         3b:a2:3e:dd:fe:4a:a5:41:ca:61:1d:59:1a:f9:7d:43:83:f6:
         30:aa:ae:dd:a6:79:b2:67:bb:f2:bb:85:92:61:eb:4b:09:7f:
         90:0d:72:e0:22:7d:a9:0e:46:33:00:f5:a2:27:a5:65:1c:27:
         ab:36:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----