Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          lv+56DLzg3fRdvtGoclKtoFkAzYut4CTnTiARbWB/Lg=
Subject key identifier:   CA:6B:82:A4:54:09:29:1B:90:A4:22:FD:2E:58:2F:54:81:CE:61:DD
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       01962F06BF9004F15524503328B403AD91D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          143E
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=)
                          2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: YCN6vflsrSy9BgQNdsWvxiZ3M5fBOP8eqwMMn0AXrjE=)
                          3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=)
                          4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=)
                          5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=)
                          6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=)
                          7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bf:90:04:f1:55:24:50:33:28:b4:03:ad:91:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=ca6b82a45409291b90a422fd2e582f5481ce61dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:84:a0:78:3b:44:c7:47:73:6b:55:26:83:
                    b8:0a:b8:cf:bb:57:3a:0c:0a:28:7f:8e:e8:31:d2:
                    c6:3b:fd:b9:3b:c0:69:a7:06:fc:bd:58:be:ec:ed:
                    cc:d9:a1:6e:a2:fa:12:83:6b:70:04:74:f6:fa:01:
                    ad:7d:26:3a:0b:bc:81:5f:54:27:2b:c6:52:02:a4:
                    81:68:5b:7e:e1:19:b4:12:d3:0e:1f:3c:4a:4a:26:
                    9e:76:c2:dd:db:a2:eb:c7:d4:5a:b2:23:16:9e:a7:
                    1c:08:f2:f7:6a:06:41:d6:cb:90:77:64:0d:3f:9b:
                    03:a3:21:49:ec:b7:29:56:c6:c0:4e:45:e1:ce:ae:
                    da:78:c6:65:34:b3:eb:75:3f:3d:0b:fa:17:3b:c0:
                    4f:c8:3c:42:de:c7:4b:c1:b4:29:a4:d9:4b:32:5c:
                    cd:14:78:64:f2:d4:52:4b:af:dd:5b:d8:5c:74:25:
                    a0:4a:dc:02:68:5c:3f:a8:81:57:7c:2a:f0:f6:22:
                    f1:b3:b0:ad:1a:52:d6:e8:9e:fe:a3:eb:7a:eb:ee:
                    a0:99:1a:f6:e7:19:64:b9:34:6e:ce:68:78:00:a4:
                    2c:c4:a3:a7:93:9d:14:0b:df:cf:c7:22:fa:70:61:
                    3a:b3:12:6f:e9:b3:ee:c2:b3:41:8e:06:2d:bb:1f:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:82:A4:54:09:29:1B:90:A4:22:FD:2E:58:2F:54:81:CE:61:DD
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:92:c9:89:fe:31:49:9a:e2:32:f7:d4:5e:4f:75:67:3a:07:
         5d:8f:b8:85:6a:0d:c3:68:64:96:4d:10:4d:53:67:3e:89:17:
         13:6b:7d:34:aa:12:a6:e0:e8:e4:52:70:4e:5e:01:18:60:3f:
         47:e8:4e:1b:8d:6f:54:b4:52:69:af:d1:6e:d8:20:ea:67:3b:
         35:02:cb:d9:ed:3c:8d:44:94:81:81:80:5f:33:ba:d8:88:b5:
         f9:8e:0b:4e:4c:f5:68:4c:45:dd:84:09:c5:ca:40:d5:d7:da:
         93:c0:91:c4:83:63:47:33:c8:f0:8d:f8:c3:76:df:ef:75:84:
         4c:5d:1e:21:b3:9a:bd:ac:39:a7:9b:c7:17:67:3e:84:e5:5f:
         d1:6d:d3:a5:b0:1e:a1:e0:c3:ce:4b:fa:8b:df:34:d8:09:36:
         a2:00:b0:dc:1d:80:cd:41:9a:95:ea:1f:20:3c:22:01:9f:69:
         3b:ec:d4:23:bb:6a:fa:32:96:db:3c:83:aa:6b:3d:4b:1d:3d:
         93:22:d4:cf:e2:ee:51:5c:37:37:a0:bd:af:6a:ba:51:08:08:
         a9:f0:5b:0e:eb:e6:5a:42:3b:2e:60:59:1a:7e:06:51:20:e5:
         a2:ec:75:e0:d5:1a:9e:45:99:69:72:10:ea:e4:9b:90:b2:44:
         e0:12:1e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----