Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File:                     CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier:          ikFx38hFx0nFdwHsve8hqWiaYwOI/pWu82VWuXmusZY=
Subject key identifier:   62:D8:FD:F6:5D:5D:AD:C0:DF:59:B4:C3:A0:98:9F:CF:E6:53:A8:E2
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer:       /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial:       01962E992A58DFA7F665C14169A19B2B3BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: 8Gd9PPFZ03oy/quEt1zmuSiYVarECi9znilDiC0KDF8=)
                          2: YlQdjt5F0FWIgyT-1ImB43dCeAQ.roa (hash: vRgN5UxgHV/91sR/Vq1eLdIZoA+usNllMbcu4073sPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2a:58:df:a7:f6:65:c1:41:69:a1:9b:2b:3b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=62d8fdf65d5dadc0df59b4c3a0989fcfe653a8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:86:a0:ef:b6:53:6c:70:fc:19:dd:ca:7c:
                    51:12:d2:4d:aa:ae:77:ba:00:8b:f8:b5:77:3f:71:
                    29:c3:6d:ad:71:e9:2b:5e:8c:20:95:9e:45:5b:3e:
                    3e:28:07:09:f3:41:ce:54:7a:a0:23:88:03:51:70:
                    5a:e1:79:b0:7b:b7:03:9e:f5:f5:4e:d5:85:e3:51:
                    fc:f6:dc:ca:15:4e:3d:75:10:ee:39:a5:0e:27:ed:
                    17:39:be:5c:97:4d:19:b1:bd:96:24:8f:19:fa:c9:
                    bb:09:10:8b:6e:99:70:f1:a4:d6:f2:80:2b:31:17:
                    0d:e2:75:ed:4f:19:70:08:7c:e1:4e:7a:11:db:c0:
                    a5:c7:ae:8e:da:36:ad:0a:be:dc:d3:5f:ac:54:d4:
                    20:f3:c0:df:ff:6e:5b:90:55:d8:e0:cf:24:aa:20:
                    63:e4:71:98:e0:6f:21:cc:8a:c1:1f:74:9f:5b:9d:
                    85:29:94:e6:08:42:be:8f:78:6e:5f:67:93:bf:0a:
                    81:29:55:d0:c2:d7:70:94:92:dc:b2:4f:66:ea:dc:
                    70:e2:ab:0a:62:3c:de:5f:9d:80:54:98:7c:03:bf:
                    4d:96:a2:34:a5:14:8e:d8:1f:6e:f8:53:60:e2:c7:
                    18:cf:7d:5e:80:55:18:de:36:7b:4c:38:4f:49:af:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:FD:F6:5D:5D:AD:C0:DF:59:B4:C3:A0:98:9F:CF:E6:53:A8:E2
            X509v3 Authority Key Identifier:
                keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:43:5c:0d:97:ca:fd:15:a3:c9:12:e3:96:fc:ec:73:29:61:
         27:7d:2c:91:63:55:47:6e:ab:71:f9:88:17:19:ec:b0:4f:ac:
         43:39:2b:d2:2e:d8:25:de:3d:ad:01:bf:30:26:75:71:66:20:
         62:07:d8:3c:21:eb:67:4f:65:63:0e:0b:0c:d5:b0:53:b8:d8:
         6f:5b:16:0a:2e:90:b5:7f:08:13:fc:21:ce:a0:a4:0d:ac:d5:
         a8:3a:e8:9c:72:f0:e6:2c:06:4a:f0:bf:ed:7f:e1:28:b1:91:
         ab:ac:96:aa:30:69:34:c3:23:43:b9:5c:9e:c1:55:89:4d:c9:
         36:c6:3c:02:9c:45:ed:b4:cb:bc:4c:91:0f:e3:fa:29:38:71:
         32:9a:78:21:e8:d9:21:07:dc:e9:31:36:79:46:25:97:f0:67:
         21:d6:37:ee:35:0a:44:42:17:df:7e:f8:d5:6f:0e:e1:7e:d2:
         ea:bb:16:b4:25:39:43:9f:8f:cd:cd:1f:72:7d:a7:3b:0e:49:
         54:be:fb:cd:6f:e3:a5:fe:10:45:cf:99:cb:3f:17:c2:18:54:
         ec:63:35:a2:c7:29:5c:f0:ad:ed:24:ba:ab:f9:64:47:84:71:
         7a:bc:77:7d:b4:68:2e:5f:72:63:34:63:4a:fb:3d:4f:49:b3:
         b3:0d:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----