Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File:                     CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier:          /6XSEutz5Nu2E8mxfrnaGHL1umJUwHdRh6UJxsqMri0=
Subject key identifier:   4A:0B:9A:31:DB:AA:0E:44:26:AD:DE:23:3E:F4:02:AC:C2:EC:9C:A1
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer:       /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial:       01962DF39E5C5A0620300490B5D670D4F871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number:          012D
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: Qmw3E0af3vAgHmwi3uUqGIyps21basykGDzr4En+mmU=)
                          2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9e:5c:5a:06:20:30:04:90:b5:d6:70:d4:f8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=080702932802c2743d335f67d47a4238c3324533
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=4a0b9a31dbaa0e4426adde233ef402acc2ec9ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:8c:28:1f:f7:0f:06:ec:1c:5b:a6:8f:24:
                    b1:4d:7a:69:bf:05:0a:23:4a:20:42:7e:a8:f2:5b:
                    53:e5:1d:ad:e3:62:fd:b4:f3:c0:64:ea:74:83:a8:
                    98:53:1e:af:c8:1f:dd:e9:49:25:88:72:76:fb:4d:
                    b8:83:77:4a:0d:76:f2:b2:0f:c4:1f:31:53:7f:5d:
                    8b:39:e5:22:7d:f9:a7:1e:28:fd:24:50:bb:06:4d:
                    ec:33:e0:30:4a:e8:2d:f6:58:69:23:25:0f:c4:be:
                    f7:46:d0:83:35:93:4a:a2:9f:ae:ae:e9:37:44:be:
                    a8:f2:e7:92:1f:e5:97:1a:e1:09:fe:7e:b4:31:c2:
                    93:51:0e:5d:f4:a7:f6:46:59:56:79:62:5b:e3:d0:
                    24:e8:29:dc:5a:9c:57:c7:be:06:e8:bb:44:26:44:
                    b9:04:a2:64:1f:16:4b:83:53:9e:85:fd:b1:6b:2f:
                    dc:12:6e:af:4b:28:22:ec:07:f1:22:e8:83:4f:01:
                    de:af:f8:60:f7:c5:50:81:78:22:a7:e1:1f:54:0d:
                    d9:8e:42:5f:04:19:e6:d6:ac:74:11:2d:2b:36:1b:
                    27:0d:04:f5:d5:eb:3b:8e:e7:7d:5f:a4:9a:ef:f9:
                    b4:bd:19:d7:a9:77:5b:4c:37:9a:d8:75:8b:06:f6:
                    72:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0B:9A:31:DB:AA:0E:44:26:AD:DE:23:3E:F4:02:AC:C2:EC:9C:A1
            X509v3 Authority Key Identifier:
                keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:59:73:13:c2:3b:83:c4:a0:61:b2:8f:87:7c:03:d3:e6:33:
         0f:6a:20:6d:99:63:bf:d0:57:91:b6:e4:2e:15:ab:73:76:b1:
         02:35:c1:7b:23:14:af:1c:35:04:59:0d:03:3d:df:d1:c5:68:
         59:d1:57:c4:b2:cb:80:d6:ae:5d:5f:fc:18:c0:e6:f6:dc:3c:
         ec:57:5d:6a:a9:96:7e:f5:6c:a1:65:ce:ff:c8:14:83:ee:c2:
         5a:23:82:b0:56:7d:24:90:1c:34:98:4e:ee:b6:ad:57:c4:c6:
         eb:41:c3:6f:78:f0:a3:cb:cf:fb:de:0b:43:77:a9:01:ca:03:
         d8:58:95:2c:be:d9:16:17:a4:71:60:b4:4d:b7:c9:a9:b5:83:
         4c:f0:e0:bd:f2:a3:12:c1:81:1f:38:bb:a0:d9:e6:59:27:64:
         d0:28:19:b6:f9:5b:cf:f1:dd:ad:af:6d:ad:38:f0:a8:5e:ac:
         92:ff:6d:a4:5b:8f:5c:f3:e9:08:d5:95:52:41:b4:d9:01:80:
         81:89:02:47:d9:7f:f2:fc:2d:fc:b6:83:13:a4:00:db:d5:86:
         b2:d3:b8:61:b7:7f:8b:6e:2c:a7:e5:90:e3:8a:e9:6b:5c:6b:
         9d:a5:c7:5d:1a:80:73:af:6c:57:1f:51:e5:3e:7b:d6:d7:10:
         13:ac:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----