Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File:                     CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier:          zzJ7T0R2zvty3uVSeJlqG5qyxZ+OIfMFIQK0cNRY7Sk=
Subject key identifier:   9A:7E:69:4E:E9:EA:AE:36:27:73:1A:B8:E0:8B:16:D3:41:4F:9B:6A
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer:       /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial:       01962DF3B8FD2EB768E0DE01819446D29025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: Q/6PqERPs2rBban8PeZPQqDthaXR7OtgpS3QyPjK+cE=)
                          2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:fd:2e:b7:68:e0:de:01:81:94:46:d2:90:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=9a7e694ee9eaae3627731ab8e08b16d3414f9b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:80:82:c5:8e:07:8d:86:33:e5:c8:74:e9:
                    b6:c7:e8:6c:85:b5:2f:2e:a2:aa:65:08:67:a4:7e:
                    85:5b:71:cd:e6:df:da:54:b9:46:1f:f7:85:7b:34:
                    4f:24:1b:23:9b:c7:4e:bf:0f:c3:5c:ec:07:9d:b5:
                    6e:b3:85:02:4a:39:c0:49:81:e4:e7:44:d9:6a:de:
                    c1:04:be:57:ba:16:38:32:45:9f:87:b5:02:bd:b6:
                    95:bf:4a:0d:76:9d:5c:46:84:4f:40:f6:81:2a:e3:
                    73:e2:47:0f:c4:0e:77:2a:0b:43:ee:08:9d:26:6f:
                    c0:1a:37:4c:57:31:89:6c:08:42:01:2d:bf:a5:c8:
                    3c:43:ad:31:4f:08:c9:3d:04:43:35:46:ab:ef:2f:
                    11:f3:e7:82:a6:53:8d:f7:4d:fa:8f:9e:7e:0d:6a:
                    c9:54:59:38:f6:ae:85:73:90:65:6e:d8:b7:07:69:
                    27:90:82:6e:ef:02:d7:9c:0e:c5:f3:73:b6:d7:fb:
                    46:36:5b:35:64:3d:37:a2:9d:14:17:ab:f7:b3:18:
                    b3:1b:26:bf:ca:cd:78:5e:e3:3b:79:ce:b8:9c:70:
                    8a:ce:97:94:0a:ea:2c:d9:06:95:ee:83:96:59:d9:
                    25:b6:1b:5e:ee:64:6a:1f:0d:66:5a:62:1b:99:88:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7E:69:4E:E9:EA:AE:36:27:73:1A:B8:E0:8B:16:D3:41:4F:9B:6A
            X509v3 Authority Key Identifier:
                keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:75:a0:f7:7c:ca:4a:1e:85:41:e6:22:a7:1f:81:6a:50:
         03:b1:ca:1b:dc:3d:62:12:ae:49:cc:b3:e4:4c:04:d5:bd:1c:
         d7:03:bf:e6:39:f2:e4:3e:b8:75:bc:16:0a:15:40:e8:5b:2b:
         4a:b0:f3:54:66:cb:60:e6:31:b7:cc:7c:70:a0:d7:c7:f9:af:
         e2:91:d0:db:c0:94:ca:21:60:29:bc:d9:d1:2f:39:f1:5c:d0:
         cb:33:20:61:2e:8a:fd:0e:1e:18:06:16:9b:a2:a0:28:13:3f:
         ad:ce:4f:a4:82:ee:c4:70:93:4c:ee:a3:9c:23:9d:a5:ec:c9:
         8b:28:15:3e:5d:29:3e:0c:6e:35:69:6c:b8:53:55:83:54:21:
         69:c0:71:6b:5c:75:d6:d2:9f:6d:26:b1:ee:a0:97:0f:ae:ab:
         5d:b5:a7:4c:2e:d9:87:c1:12:e2:6b:45:31:16:d8:28:04:6a:
         89:5f:3f:c5:a2:80:4b:cd:1e:41:8c:29:b7:6e:b1:72:58:82:
         e1:f0:fb:75:7c:d1:fe:10:88:1d:62:db:3f:63:6c:3d:25:08:
         6f:a2:dc:ff:48:a9:dc:68:10:c0:08:c3:4e:ef:dd:3f:fd:19:
         7e:a7:c0:ae:74:70:30:06:f0:f2:0b:d6:f2:d9:85:04:4a:71:
         ec:2c:fb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----