Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File:                     cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier:          24VPLocPg1D0Ao2zK5y65zA/lOa2W+6gd0efE9qnZnI=
Subject key identifier:   14:3A:41:3D:27:B8:9C:84:BA:77:FB:8F:7B:40:0C:0D:42:7A:84:89
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer:       /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial:       01962E61C0247CFBBD5F168EF525A4A5ABE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
                          2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: GoIMaCVaJEyxzS6wPfOR5nqowkPO9/H55XBjIezQFXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c0:24:7c:fb:bd:5f:16:8e:f5:25:a4:a5:ab:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=143a413d27b89c84ba77fb8f7b400c0d427a8489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:95:8c:83:38:40:d6:8f:cb:13:32:02:11:
                    83:ea:0b:2b:79:23:af:31:a3:6e:31:77:0b:6e:bc:
                    1d:6d:55:cf:6b:0a:b2:3d:5d:e3:59:bc:a5:27:d1:
                    ff:32:f2:46:f5:f6:f9:2e:2e:49:cf:9d:8d:ad:e0:
                    b4:e8:85:ea:80:e5:bb:a9:ca:4c:2b:73:27:82:23:
                    cb:be:df:86:69:47:ee:9a:d6:20:89:ca:73:bc:98:
                    8b:c5:57:28:9e:62:3a:06:f0:30:40:16:12:24:02:
                    d4:42:02:f4:15:ac:76:c2:ba:4b:1a:ec:b8:f4:cb:
                    9a:ec:f2:29:c0:bb:0b:98:a6:e2:f8:e1:0a:2c:30:
                    52:b3:c0:1d:cb:fb:59:7d:f1:58:d1:ef:1b:89:ed:
                    f9:21:a8:4b:1f:7d:4c:6d:f6:ba:c0:f6:0d:0b:40:
                    cd:67:06:48:91:98:38:5d:60:48:66:ff:f9:fc:c9:
                    d2:59:cf:b7:2b:19:86:35:c1:d8:0a:b7:cc:5b:bc:
                    53:5e:af:d4:cd:5c:64:41:ab:0b:aa:fe:66:32:5d:
                    13:8b:b7:84:42:47:7a:cc:09:9d:34:ed:90:20:6f:
                    12:35:94:90:05:c4:b2:36:67:63:52:3e:d1:a5:43:
                    d2:34:bd:1b:92:d2:fc:c1:90:2b:8d:34:c0:e9:8c:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3A:41:3D:27:B8:9C:84:BA:77:FB:8F:7B:40:0C:0D:42:7A:84:89
            X509v3 Authority Key Identifier:
                keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:a2:d2:1e:21:10:55:b2:d7:55:7b:39:63:8f:8b:79:d6:
         1e:af:dc:f3:af:79:d0:64:74:6c:d5:5a:80:d5:47:80:44:58:
         49:62:d9:b4:a1:6e:48:33:25:42:f1:41:a5:5b:cb:4b:dc:b1:
         12:f0:87:a6:f5:0e:97:3d:19:be:22:26:c4:62:45:e0:e5:29:
         ea:dc:72:64:4a:6f:f8:7d:42:64:0c:f0:4c:c2:04:13:10:3d:
         b2:aa:cb:ee:3b:7a:2a:77:12:f3:5e:da:63:23:f0:77:fe:67:
         bf:d0:c7:ec:76:f0:01:83:07:70:c9:15:69:9c:d1:77:88:73:
         23:68:dd:b6:67:f1:ba:e6:cb:6e:ef:51:99:ce:54:31:40:d9:
         e3:66:33:a1:d4:b6:f9:d2:66:c8:90:1c:16:fc:04:24:2a:8b:
         99:00:3e:16:ac:b5:3a:29:60:9c:fe:37:0f:37:13:8a:4f:f9:
         2b:d6:5a:6a:19:43:dd:f6:45:a6:c9:7f:bd:a7:7a:52:dd:10:
         9e:ce:0d:41:4e:87:d5:71:7b:42:a3:7d:2f:f2:d2:8c:06:24:
         7a:53:da:59:a4:5e:d5:74:bc:36:7b:db:31:15:65:d1:c5:4e:
         a5:a1:45:a5:f9:d9:a4:b0:2a:10:39:c3:98:54:39:aa:b6:63:
         4f:cc:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----