Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File:                     CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier:          wEt1OUwlr+fifDGWwPR1yYk+HEfOlZlQu5WK5prlSvs=
Subject key identifier:   D9:49:1E:9C:87:19:DC:F1:B1:1A:E2:4D:85:44:3C:EB:A9:8D:CE:A7
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer:       /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial:       01962DF3E17ED56A3B46E0169315AD5ED6B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number:          0367
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: jTelgRqL8QYBaWsj7YgwA2NYL8/IjpKa9XLnZ0xhews=)
                          2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e1:7e:d5:6a:3b:46:e0:16:93:15:ad:5e:d6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=d9491e9c8719dcf1b11ae24d85443ceba98dcea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:f5:dc:0d:00:ec:ba:0a:15:e0:91:07:9f:
                    0f:da:04:e9:57:8d:b4:28:3f:d2:c3:02:1f:d7:85:
                    7b:dc:0c:59:3a:c1:04:89:4f:52:92:bc:98:8e:af:
                    73:32:60:9f:98:1d:03:ab:51:01:a5:35:35:6f:7a:
                    3e:d4:be:fb:49:b8:85:46:56:85:3d:db:67:9e:d2:
                    00:b7:98:61:aa:d5:36:4c:53:c1:5a:fe:85:8a:77:
                    d1:4a:89:88:c0:af:1b:2d:c3:54:8d:95:bc:f6:68:
                    b3:c4:c1:30:bd:03:bf:1a:d2:ec:cc:6a:53:f0:68:
                    8f:81:bb:e7:a6:24:29:80:b2:4e:52:b5:47:bc:46:
                    bc:f5:d3:e8:31:2c:24:93:f0:61:83:4e:af:37:b5:
                    ef:36:34:70:18:d7:4f:13:d4:81:a8:bd:38:42:1d:
                    41:97:2a:2e:49:2f:77:f7:29:d9:ff:84:75:51:2a:
                    05:d4:e5:0f:0e:15:bb:6f:26:d3:55:03:13:1b:0f:
                    6e:38:f2:f2:a1:cd:5e:1e:5c:f7:fc:78:ec:da:c6:
                    7c:99:44:06:7b:5a:03:b2:5f:25:14:31:a5:e7:6d:
                    57:5f:10:6e:35:ec:8c:5d:e5:ac:01:18:98:b0:25:
                    d3:02:4d:06:4d:ff:98:67:61:66:2e:9b:71:27:4c:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:49:1E:9C:87:19:DC:F1:B1:1A:E2:4D:85:44:3C:EB:A9:8D:CE:A7
            X509v3 Authority Key Identifier:
                keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:79:04:6e:76:9b:46:d3:4a:38:e6:c4:75:94:ab:8d:a1:7b:
         8f:aa:45:0a:5a:d4:35:0a:55:58:26:c6:7f:e8:ee:f8:1f:31:
         6d:9c:ff:6d:c4:10:51:9f:55:2e:ca:bd:d5:d0:a0:b3:87:d6:
         e1:82:e8:4f:62:42:74:fc:07:7e:4c:4b:cd:12:d5:0e:09:ad:
         83:c3:77:d9:e6:d1:cd:73:fb:49:1d:8c:68:26:23:3b:8c:ad:
         1a:eb:69:6f:67:a8:01:1b:5a:f3:fb:ff:2d:66:b5:f0:33:da:
         aa:57:6a:b2:f5:d7:b9:e4:d8:c9:07:9b:f6:8e:19:3e:6f:3e:
         8f:ab:7d:02:97:58:ad:31:20:2a:b5:90:53:17:c4:d6:ba:38:
         30:d5:0b:b4:7e:75:70:4c:6d:74:9c:a8:04:e8:9b:18:52:65:
         3f:fe:57:87:59:df:ed:67:f5:d0:b9:ec:c5:a5:c3:5e:90:c6:
         85:bd:49:1a:fd:ed:fa:b3:3f:e6:38:2a:27:79:dd:d7:ea:c8:
         e4:e5:b3:bb:1d:ee:ee:3b:be:83:44:14:08:c6:15:7c:09:fb:
         71:e9:61:1e:ac:c2:c2:48:2d:61:b5:68:f2:42:6c:11:50:21:
         5d:ff:c5:24:3f:a2:92:5e:2b:96:72:86:87:41:be:bd:45:0c:
         2c:32:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----