Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File:                     cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier:          elHDv12HhQAa59qcSQbNRJegXmfA0ROKZNssFquN3fo=
Subject key identifier:   57:D6:5F:41:16:B2:7C:12:AF:5C:C8:01:15:8D:42:F2:AB:5E:D2:21
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer:       /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial:       01962E2B2654171AD0598E42E3FD8F83DB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number:          0E74
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: KBPUUs1tHww9wT16uHk9whpy2b2mmT+YklE4fjrO2Lk=)
                          2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:26:54:17:1a:d0:59:8e:42:e3:fd:8f:83:db:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=57d65f4116b27c12af5cc801158d42f2ab5ed221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:26:ee:a2:49:db:e7:43:fa:a1:06:0b:47:f7:
                    e9:74:0e:03:2d:05:25:a1:1c:92:16:c7:9c:01:5f:
                    34:e6:5e:b8:69:7b:40:58:23:c1:7b:b8:1d:6e:8d:
                    88:4b:b0:97:3d:e8:51:32:1b:21:21:5f:ca:9c:51:
                    1a:90:dc:10:40:47:9a:b7:53:3b:22:fa:92:35:fe:
                    38:04:fc:7f:57:d6:15:f6:7e:db:f8:a8:de:cf:e7:
                    1f:57:09:99:5e:06:04:79:66:19:09:9b:bd:9d:05:
                    5b:21:39:8d:03:a8:51:d8:c8:92:06:75:86:d7:f3:
                    22:bb:6b:c1:4a:00:82:09:cd:15:39:c8:fc:b1:e7:
                    56:07:29:75:62:ed:db:c1:3d:77:7e:dc:ae:cd:65:
                    2d:6d:71:34:6b:7a:ef:e9:e8:0e:1d:81:31:e9:b3:
                    a5:ec:3f:03:79:64:9d:a6:cf:bf:05:84:47:44:8a:
                    fb:3b:93:d4:8d:35:68:1f:7d:30:66:0d:d9:05:aa:
                    f8:73:fa:a0:13:e7:ee:55:08:15:82:48:cf:14:7d:
                    b7:47:b4:bb:24:85:8c:55:79:9d:84:aa:27:c5:dc:
                    b7:c2:3b:15:43:3d:f9:25:ab:87:05:24:28:71:a8:
                    04:60:91:da:74:96:dd:15:c0:bc:b7:75:4d:8f:26:
                    98:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:5F:41:16:B2:7C:12:AF:5C:C8:01:15:8D:42:F2:AB:5E:D2:21
            X509v3 Authority Key Identifier:
                keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:80:10:ed:44:cd:9b:1d:20:5c:8a:3a:04:0a:ab:a0:b7:
         9d:02:f8:71:7f:27:42:cb:00:0f:42:31:69:38:0b:ef:d7:a1:
         b3:be:7d:c7:f4:e4:6a:7e:49:fc:ce:52:21:6e:f4:28:71:31:
         63:02:ca:3c:73:a7:c1:d4:af:b3:39:24:25:85:71:c5:b4:a4:
         24:0f:70:8b:df:4d:8b:a7:d2:dc:1a:6f:d1:bd:4a:db:e1:f7:
         3b:4a:cf:13:39:32:b4:11:01:e2:30:96:3e:a4:9c:30:3b:f1:
         84:42:0a:c6:68:3d:7e:c8:64:b4:da:5b:fe:f6:e7:20:e2:c0:
         0c:50:bd:6f:f3:76:f0:68:c9:46:b3:d2:a0:6f:a3:ea:67:08:
         e1:6b:73:b1:82:50:3a:09:2a:45:d4:07:04:de:22:98:da:3a:
         30:83:80:c4:ee:09:99:58:cb:f4:07:17:5d:53:af:95:6c:d0:
         9c:31:0e:10:04:03:0a:e6:77:b2:dc:f6:4f:99:3b:cf:c0:7d:
         db:f5:17:b0:af:98:d9:8a:ab:14:28:63:47:28:4e:ed:41:52:
         07:88:92:db:1b:1d:13:0d:bc:cc:6a:c2:82:24:63:bd:89:d5:
         71:de:f7:8f:dd:a1:e2:32:33:83:ab:10:78:ae:56:9e:b9:94:
         b7:6f:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----