Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File:                     CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier:          /tBfudO9hOTl6M8FYeOBlaEB+MmvG3teEnaec42hpms=
Subject key identifier:   F2:1F:92:74:74:6D:45:61:64:6E:C2:B6:26:1C:A4:02:B1:5C:83:1D
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer:       /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial:       01962F3D89B2F7F74304AACFF6FDAB2A94FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number:          1389
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: xIJb4JbUYJYrCI2jyRN4tPLeucsdwqw8q5etBivA1pA=)
                          2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:89:b2:f7:f7:43:04:aa:cf:f6:fd:ab:2a:94:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=f21f9274746d4561646ec2b6261ca402b15c831d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:a8:19:f0:2b:66:f8:a4:27:79:89:0f:a4:
                    b6:7d:86:0a:78:a5:98:22:e6:f6:e9:49:e4:42:ce:
                    10:bc:c1:6e:5e:54:2b:81:07:71:25:64:19:e9:b2:
                    49:ef:20:4e:dd:b6:f1:b7:29:17:18:de:a4:a3:12:
                    86:c0:ba:69:9f:93:98:60:a4:c6:c9:eb:70:d0:c2:
                    ad:46:87:35:ff:23:27:58:b7:de:de:5a:f6:f9:25:
                    de:02:40:fe:ab:46:89:6c:df:0b:56:3b:ef:8b:c3:
                    93:33:1d:75:d2:72:2f:e6:bf:ff:4e:d5:6c:6a:d6:
                    7e:57:50:4d:85:6d:e7:d6:2f:6d:7d:0f:95:7a:13:
                    55:8d:05:81:31:75:ed:26:60:86:48:0f:00:cb:99:
                    2a:60:26:ff:ef:2e:32:d1:5e:72:b8:cc:41:ea:48:
                    6d:9f:02:53:4b:52:7d:a2:3d:01:16:76:48:5a:73:
                    68:b3:29:6c:07:84:ff:d6:66:f8:09:fa:53:12:94:
                    a0:b8:4d:57:99:b7:e5:ed:89:0f:14:2c:47:4f:23:
                    7f:d6:ce:b7:3d:7e:b2:72:de:de:4c:c8:59:bc:ad:
                    3d:73:09:90:5a:bf:1d:2b:ca:b5:bd:d4:82:fe:4c:
                    38:9f:78:82:9c:30:2a:fb:aa:c0:76:ac:d5:8d:b2:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1F:92:74:74:6D:45:61:64:6E:C2:B6:26:1C:A4:02:B1:5C:83:1D
            X509v3 Authority Key Identifier:
                keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:49:c1:90:94:33:5e:5d:d9:52:cf:e1:87:cb:93:00:bb:
         c7:70:a6:e1:e6:ee:92:6b:89:c5:0b:df:1a:d1:ab:31:14:88:
         5e:f1:ab:d0:03:42:a0:d7:8b:2d:41:73:09:5c:8d:2c:89:9f:
         76:0b:e1:fe:8d:73:3d:0f:c2:d8:ad:ee:4d:ba:b7:17:42:91:
         47:38:53:13:ee:0f:b6:7b:2a:b5:7b:90:c2:a8:14:8c:ee:c4:
         23:7a:d1:ba:19:51:57:f8:e4:82:00:3d:8c:c7:b8:e6:f9:17:
         94:d3:1c:d6:b7:e5:be:76:6b:28:29:7b:b4:12:0b:56:1e:19:
         74:f8:d2:25:ed:36:6e:42:c9:4c:44:df:7e:81:92:38:30:78:
         7c:8a:49:a4:24:5f:38:24:f8:67:45:45:6a:ff:b3:80:ec:69:
         7a:9c:29:81:c0:02:d9:8d:76:5c:82:09:99:6f:a4:06:4a:92:
         69:42:e7:bd:c7:5b:b6:40:fa:08:b8:d2:09:35:12:18:d2:40:
         6c:3f:cd:bb:fe:e5:14:0d:72:70:59:93:14:3e:da:f1:96:24:
         57:5f:3c:ca:04:4d:7b:b2:5a:ae:6d:05:00:8c:53:7f:04:6d:
         9b:a3:86:76:a1:18:f2:68:ed:98:0e:d6:1d:34:cd:db:02:78:
         b0:2b:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----