Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File:                     CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier:          4eFmYEMJSAjQ468YaQjw99FEAhpAXfk+YlUjwx2oR54=
Subject key identifier:   84:8E:A5:60:AA:95:0C:CB:9A:0B:F0:FB:AC:D4:A4:9F:92:53:84:A2
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer:       /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial:       01962F3DD25775E0CB6623C0B31270059AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number:          0A88
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: he/F/g15mjx7VGBTZ2Dr/C51gFlGoAla3EjBOMks3yQ=)
                          2: LfJ8ODju367d2avuOQm5piH-KjI.roa (hash: o3ZK8YLnbi2AKR9dzokceRf3/tnSGkPPHYTuBxrwd0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d2:57:75:e0:cb:66:23:c0:b3:12:70:05:9a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=848ea560aa950ccb9a0bf0fbacd4a49f925384a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:47:b6:18:07:54:55:68:f2:e6:1c:da:26:
                    c3:c6:92:98:49:ba:9b:86:dd:fb:21:f1:26:8a:72:
                    72:e9:00:ae:6a:d8:b9:1f:d4:80:17:4c:59:53:72:
                    58:67:12:b7:68:0d:10:3b:3f:a2:b2:3d:06:16:ee:
                    ee:94:bc:f1:45:ba:73:5f:52:fd:35:27:df:25:a4:
                    be:c7:ee:e4:2d:44:1d:f5:ef:e0:32:58:b1:c7:2f:
                    a9:f0:42:27:79:e9:a0:6f:ef:b7:f3:40:47:3f:5f:
                    85:6d:93:46:a1:15:df:11:70:c1:61:36:24:cf:94:
                    d7:06:37:b1:60:cc:90:5a:90:75:8e:32:98:4d:e7:
                    9e:21:59:32:14:bd:be:50:60:6a:a6:1f:95:71:36:
                    53:6d:00:e2:0f:c1:26:48:6e:10:c2:ec:d3:1c:2e:
                    a3:99:86:5e:85:f8:d7:a0:16:0d:db:16:a8:f4:e0:
                    c8:59:fa:e3:73:d9:2a:bb:9a:77:94:f7:3a:b1:91:
                    66:c6:d1:44:6f:3f:59:3b:3e:45:b1:74:d2:08:1d:
                    7f:09:e7:7d:ff:e1:42:79:0e:bd:6b:4c:ff:63:7b:
                    75:89:02:37:9e:a5:58:9c:2f:17:85:eb:75:b8:35:
                    b9:1f:7e:26:e2:65:3d:a1:68:91:59:98:e4:ed:12:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8E:A5:60:AA:95:0C:CB:9A:0B:F0:FB:AC:D4:A4:9F:92:53:84:A2
            X509v3 Authority Key Identifier:
                keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:ac:52:9d:62:4a:a9:5d:6c:30:5a:4a:f0:7c:d6:07:c7:
         fe:8c:7d:81:4a:e8:d1:c5:79:d6:8a:c8:2c:11:6f:0b:4e:02:
         68:ec:43:82:09:39:72:43:b3:cc:93:e0:35:d5:03:8b:7a:14:
         32:c2:ff:b2:90:dc:d7:40:a9:d3:9d:66:0f:7f:eb:e6:3d:63:
         a2:80:c3:10:d1:57:fb:2f:ef:b2:b4:ea:ca:69:92:7f:94:09:
         6b:9b:b1:87:dd:2d:94:50:c4:97:17:8a:ea:c8:63:af:c9:04:
         b5:3a:a5:f4:3c:97:7b:f5:87:e1:85:a4:8e:d7:16:a8:6a:3d:
         cc:4b:81:37:b4:ca:e6:3e:5f:5b:a2:b8:14:8a:14:0b:b9:95:
         c9:8a:50:65:95:e8:e4:5b:53:ac:88:2a:d7:64:82:1f:84:cb:
         fe:81:51:74:4f:c8:11:17:07:27:2a:0f:82:7d:b6:62:33:d5:
         50:10:94:2a:a7:40:de:67:e3:9f:d2:2f:15:e5:70:2b:f4:b3:
         32:dc:cf:82:34:6f:e7:56:a3:94:12:14:bf:8e:6d:63:e6:18:
         b5:5e:9f:7e:1a:78:7c:46:c3:d7:34:ed:e3:ba:d0:ae:6d:5c:
         ce:74:0f:3f:42:8a:67:56:4d:35:55:dc:e9:cf:9b:11:aa:44:
         b6:c8:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----