Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
File:                     CpfAyBiGg3PEAUcVBTra9hrx2h0.mft (raw, json)
Hash identifier:          Cyum3C31GfV/UCnZFCGX6ObFRx/m4AqiNlVnlLnXXsw=
Subject key identifier:   A3:CE:69:9C:99:C5:86:AB:38:D2:D3:6F:66:1E:81:C2:FE:E5:5C:B2
Authority key identifier: 0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D
Certificate issuer:       /CN=0a97c0c818868373c4014715053adaf61af1da1d
Certificate serial:       01962E2B061B9AFF3643497661BAAA8807EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: CpfAyBiGg3PEAUcVBTra9hrx2h0.crl (hash: WBs2iTQSWn2UDaakjc3tQfGN7dMvz1FiEQYa7D0ueJc=)
                          2: _qAUmpmDNefd9UH0oGsDdu0Dm10.roa (hash: dhnP4xuQumbVUsoW5XRDL/9RukaAPXCZivf9aCXaQyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:06:1b:9a:ff:36:43:49:76:61:ba:aa:88:07:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a97c0c818868373c4014715053adaf61af1da1d
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=a3ce699c99c586ab38d2d36f661e81c2fee55cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:b6:2d:24:9a:ec:77:90:f4:c0:40:a5:af:
                    b3:58:d9:da:87:17:4c:a8:40:d9:1e:1a:57:b9:30:
                    44:a8:2f:9f:c7:6a:04:3a:70:06:71:6e:72:89:53:
                    b7:2a:75:e5:d8:70:0a:d2:8e:3b:3d:27:7c:43:b2:
                    ad:7d:d3:90:dc:81:a4:f4:52:3a:6e:9c:68:d6:27:
                    3f:66:f2:d8:6f:83:6c:3f:83:d1:fa:ce:21:72:b1:
                    d2:83:c4:d6:4f:95:e5:87:af:fa:9b:bc:75:04:0d:
                    c7:54:93:ac:4d:0d:b1:7a:e2:9c:86:c9:d4:86:ad:
                    2c:32:f6:86:95:64:9c:b4:d7:2d:9f:79:d6:c2:5c:
                    f5:fc:45:23:65:88:a9:29:22:72:e1:fc:81:92:7a:
                    e5:71:65:61:48:81:ed:2b:9d:01:1f:e5:e8:12:63:
                    b4:3c:77:1e:fb:36:29:de:68:39:cd:35:ff:4d:f0:
                    98:a4:5b:ae:0f:01:16:57:81:d6:4e:92:e9:95:ad:
                    d8:17:20:6a:20:f9:f5:ce:33:52:ad:03:6b:b7:bf:
                    98:4a:67:e8:5a:18:92:e0:e2:de:12:cd:36:9e:61:
                    29:b3:16:d3:e0:33:b8:d1:52:88:cb:96:74:22:a8:
                    96:bd:ef:e9:1c:f9:91:b3:14:9b:ea:97:14:40:bb:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CE:69:9C:99:C5:86:AB:38:D2:D3:6F:66:1E:81:C2:FE:E5:5C:B2
            X509v3 Authority Key Identifier:
                keyid:0A:97:C0:C8:18:86:83:73:C4:01:47:15:05:3A:DA:F6:1A:F1:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CpfAyBiGg3PEAUcVBTra9hrx2h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a9399b-f867-4802-8c67-dbf2b3769445/1/CpfAyBiGg3PEAUcVBTra9hrx2h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6a:9d:11:f1:4f:11:ad:5c:7b:b2:ff:3f:83:c2:29:54:98:
         d0:46:25:16:bb:05:12:b3:38:1b:2f:e1:54:8f:76:ad:2b:dd:
         09:47:fd:96:89:ae:da:9b:5c:c1:e1:c8:cc:22:80:1e:5d:ba:
         38:2e:89:31:ac:9f:5b:6f:4d:2a:3a:4f:cc:e4:c8:32:f2:d8:
         9d:fd:0f:e5:78:26:8a:ce:88:5b:78:94:7f:15:1d:52:e2:5c:
         db:ab:a2:ad:5c:d3:9e:69:24:0c:7e:a2:d1:53:c0:1f:b9:8e:
         0e:16:59:c4:4d:22:5b:df:bf:7f:21:bf:f1:23:ea:48:18:a8:
         6e:4f:c4:d1:34:16:84:dc:fe:d4:0f:29:d7:ae:2d:c5:b8:7d:
         59:db:25:23:73:1f:01:4d:50:eb:70:8d:be:29:2b:79:cc:73:
         9f:d4:50:a0:42:e8:6a:b1:ae:f6:2e:3e:df:17:ed:81:7e:0e:
         d0:55:c1:d7:a8:56:44:b5:2f:a7:30:0e:3f:14:43:b2:c4:91:
         aa:c1:44:8a:c2:3e:4b:54:5a:6e:84:79:bf:a0:a4:36:2b:f3:
         b4:c5:60:82:16:27:d0:23:53:0f:ab:b6:4e:bd:8d:3d:31:9f:
         5c:20:9e:21:06:bf:8e:24:df:a7:12:0c:e2:b3:bf:26:99:cb:
         f8:f2:17:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----