Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File:                     ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier:          gR6NtTom1SD0Qda6c7gAGRwR7gFEf/ZHCHwGxiAZxyY=
Subject key identifier:   77:9F:6C:F3:5A:C6:6B:69:94:4B:25:95:41:37:52:23:9D:EE:FF:CF
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer:       /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial:       01962DF3CE236423B25F90871EED0258A2F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number:          1142
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: UUQ1ajz0a5rYuWqiVK0a380aqxrzilG97BgcOos7dUs=)
                          2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:23:64:23:b2:5f:90:87:1e:ed:02:58:a2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=779f6cf35ac66b69944b2595413752239deeffcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:0f:ca:da:fa:06:27:a0:d9:95:f2:fb:28:
                    4b:ca:01:9b:7b:ae:a6:9e:4c:1c:59:51:f5:e9:81:
                    fb:0a:5c:14:65:79:ae:ae:28:55:91:bc:d1:e9:98:
                    b4:69:f7:20:a2:e8:93:a0:ff:81:b1:76:9e:84:c8:
                    40:f7:81:e9:6f:f3:ab:e6:78:f8:66:e6:a1:c4:34:
                    38:83:55:22:ae:fa:f3:5f:6e:eb:fb:41:ed:a1:5e:
                    ae:c8:3c:ab:cb:8d:a7:7e:b6:50:d3:f9:48:d4:f2:
                    8e:a8:97:83:84:86:5b:4b:02:b8:d9:f2:dc:e3:d0:
                    c4:29:01:24:b4:a8:ac:2e:43:44:01:29:fc:94:82:
                    09:6e:91:af:c1:52:db:9d:b9:90:3b:a1:25:68:53:
                    d9:41:69:80:3d:0c:71:a6:12:8c:87:99:cb:42:bf:
                    c8:b4:77:85:3a:bf:11:e3:4d:83:51:89:05:6c:90:
                    2c:56:c1:d0:0f:86:89:48:74:d4:e7:55:02:67:42:
                    9b:1d:c6:cb:80:b8:6c:a7:2b:0f:bf:43:d8:6b:9c:
                    60:d5:f6:a1:54:70:cf:80:58:aa:f6:f6:b9:7b:28:
                    e1:fe:c5:6e:3b:c3:7a:94:54:01:c6:7b:78:4d:92:
                    b5:c8:be:44:8f:a0:0d:d7:70:b3:3d:83:6f:b5:87:
                    6e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9F:6C:F3:5A:C6:6B:69:94:4B:25:95:41:37:52:23:9D:EE:FF:CF
            X509v3 Authority Key Identifier:
                keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:2f:3d:b5:24:27:dc:65:32:03:4d:36:9d:8b:43:0f:c7:
         f3:00:4b:c6:2a:4a:34:f8:e8:fb:1f:8f:f8:23:4d:d3:d4:d3:
         6d:f2:a4:d1:f2:a2:c7:63:01:b5:ea:9a:e9:36:cd:df:b0:83:
         ad:ed:d9:6d:6f:c8:5a:d5:3d:53:af:8f:73:b7:4f:53:b2:2c:
         02:4c:ba:f5:7f:58:08:77:1b:3b:69:67:da:69:30:a1:e1:ac:
         81:3c:8e:8a:96:35:12:36:f4:a1:d1:2b:27:12:1e:41:cb:20:
         48:01:5f:c6:97:f2:99:38:a1:73:17:78:23:3a:b6:00:2d:f4:
         52:dd:29:12:f6:44:94:27:d2:a9:ae:e9:22:dd:9e:13:30:f4:
         f5:f6:e1:18:87:23:aa:a3:ee:01:56:a1:95:f9:0d:a7:8f:f3:
         a3:5f:d4:9e:e2:18:28:bc:51:9a:d6:3f:ba:15:44:41:64:a3:
         1f:54:fc:80:ad:c5:b2:d2:e8:a3:20:4d:5b:b7:7d:b8:7e:92:
         60:b9:c0:d0:1c:92:d8:58:f7:e2:ac:7a:7f:f2:07:ef:57:98:
         1a:ef:a5:e8:ac:63:08:74:60:8f:1a:d1:07:2a:de:8e:c1:c1:
         c3:c8:0f:d4:4e:2b:9d:49:19:09:7c:97:99:cd:7e:9e:87:a4:
         5e:c8:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----