Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File:                     CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier:          2vOj1U7mJBauG96AglJ/EhEsNF+hFmDqjAeWY62i+M0=
Subject key identifier:   F2:94:A9:56:C9:F2:5E:C2:5E:36:84:69:01:F0:5A:7B:82:38:EB:AF
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer:       /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial:       01962E9892349C4C63D1B0C59FF0897A8DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (hash: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=)
                          2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: VP2EpIOI/4+oHg5iSspFhQUPIU6uM4p/ezQGQl9gMAM=)
                          3: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (hash: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=)
                          4: lf4o5O9cdWZQhb3j1ES-63-ld0k.roa (hash: MkYv77LnNtclc+nDDwEnxwywSZw8C8g7xWpLHjYSnn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:92:34:9c:4c:63:d1:b0:c5:9f:f0:89:7a:8d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=f294a956c9f25ec25e36846901f05a7b8238ebaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:f7:b2:3a:05:50:00:3d:ff:6a:a7:c2:f0:
                    6c:d1:1e:48:e5:7f:7f:78:bd:ea:60:f7:3a:5f:c7:
                    9c:ae:07:27:6d:81:35:3d:a4:2c:ab:c1:60:a0:6b:
                    29:f0:f4:54:77:57:60:82:a4:53:f4:ed:7b:6e:35:
                    cb:89:36:6e:6a:df:48:89:5b:b5:b4:76:84:f2:d9:
                    00:0a:76:d5:01:de:64:60:12:b1:dc:02:d5:55:d3:
                    0c:ca:1d:60:37:f3:10:0f:6f:72:5e:56:39:44:82:
                    a6:e7:be:eb:9a:7c:86:72:cb:12:38:3a:be:85:74:
                    ba:7a:42:81:68:1e:7f:76:a1:ee:77:88:0e:43:07:
                    ba:ff:f1:30:24:ca:11:68:c2:61:28:6f:19:e4:e9:
                    91:87:d1:c7:1d:f7:2e:fb:e0:e6:76:16:9e:03:d7:
                    32:c5:dc:61:b0:6f:7f:fa:64:b5:ab:8d:59:93:74:
                    29:e4:83:68:28:de:97:4a:9a:87:fa:ad:ba:bc:97:
                    f1:06:2a:60:4d:47:e0:54:82:72:ef:8d:89:3e:3b:
                    2e:e2:ed:69:35:db:39:80:1a:56:ea:aa:3a:b3:56:
                    11:61:34:ec:0c:60:f0:df:00:9a:de:8a:8e:4f:b5:
                    d4:10:cf:2c:9f:ed:b4:ac:78:ad:08:c8:64:6a:4b:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:94:A9:56:C9:F2:5E:C2:5E:36:84:69:01:F0:5A:7B:82:38:EB:AF
            X509v3 Authority Key Identifier:
                keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:3d:9d:2d:d6:64:7f:ee:3b:e8:3e:22:af:1c:c4:eb:04:
         f7:1f:a3:15:c4:9f:ca:01:8d:b8:8f:82:38:44:b0:67:0c:d1:
         94:f5:83:c7:84:33:48:cf:4d:3d:e1:7a:f9:65:bf:00:52:d5:
         d3:2b:4a:ab:63:3e:8a:83:a6:ff:92:45:42:34:25:da:af:5e:
         5a:23:4c:4e:9f:14:b3:0e:28:42:6b:10:3d:e9:45:a0:ba:8d:
         25:f4:b2:7c:08:4b:c5:6b:03:e7:0c:0b:70:9b:08:92:fd:ef:
         8b:82:a3:d6:99:af:1c:f0:94:b1:84:52:f4:c2:8e:e0:44:e8:
         ac:4e:89:0d:01:dd:73:0d:99:cd:4b:65:4a:0a:75:c8:05:74:
         c8:3e:a7:1e:8a:ff:b2:e4:5a:59:ef:6a:eb:69:22:d7:fe:06:
         aa:51:d6:f6:50:7f:3e:dc:ba:ca:a3:26:bc:cf:42:a4:ca:ea:
         ab:a9:a9:3f:91:b1:82:2a:ff:9b:f8:36:e7:ad:ea:f1:c5:7e:
         3d:a6:73:57:ea:85:20:77:72:10:58:2e:1b:02:c3:0a:4d:48:
         e8:d3:e7:ec:5b:e3:1b:c1:31:b9:24:be:81:3e:a7:59:81:a1:
         c1:a3:13:74:24:ec:58:1d:e1:97:76:5f:4d:28:a1:0c:e7:5b:
         e3:52:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----