Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File:                     cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier:          PyobaZxgVeqQG6ocbgQK7Ox1toVh/Gfzdb4e3uKezuc=
Subject key identifier:   5C:68:9A:5B:65:5B:08:58:19:92:9F:95:53:2A:20:45:18:76:93:6F
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer:       /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial:       01962F06590F101E072702DE72CD710C50D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
                          2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: UmAMBmM0N/oUKCVR+FVpdEynm32GKEBNQLKcgi5rgsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:59:0f:10:1e:07:27:02:de:72:cd:71:0c:50:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=5c689a5b655b085819929f95532a20451876936f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:99:34:93:ad:ca:3b:9e:db:1b:3b:da:57:
                    d9:e4:1c:4a:d2:23:81:4b:fa:61:ac:ab:63:15:5d:
                    f6:10:7b:57:fe:7a:c6:e7:86:c8:1a:19:eb:83:ce:
                    7a:56:0f:d0:f8:49:f3:f3:ce:3b:e0:a6:bb:34:e3:
                    10:7c:aa:6c:7a:a6:c8:99:1b:ea:0b:4c:85:09:44:
                    97:83:a3:0b:38:60:55:7a:7f:17:00:83:02:0e:55:
                    27:06:d1:16:ce:98:52:2f:c8:6b:35:15:7f:88:be:
                    b9:0b:e5:2e:95:65:ad:d0:fd:3e:a0:12:53:d0:5f:
                    e7:b5:ed:8d:5a:51:c9:3c:1f:ae:2a:1e:a8:78:98:
                    58:6e:78:b9:1e:75:5e:a3:21:bf:96:d7:d7:d7:da:
                    0b:7b:39:4b:c0:15:5b:ee:3b:ca:5d:7f:7b:70:a4:
                    d0:c0:0d:73:2c:7b:36:de:aa:b0:a7:71:c3:ec:12:
                    2d:1e:ee:f3:0d:04:e8:4a:ad:b5:ef:ca:81:3e:92:
                    2b:f4:63:8e:56:87:e4:42:2c:3e:9c:a4:0a:fe:6d:
                    c3:b5:db:2f:9f:19:36:fd:5e:5c:9b:7c:c0:90:db:
                    7b:b0:9b:0a:04:a3:3f:76:76:73:21:23:a8:67:82:
                    e3:b9:21:b0:ea:6c:68:4a:77:fa:e8:21:be:30:4a:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:9A:5B:65:5B:08:58:19:92:9F:95:53:2A:20:45:18:76:93:6F
            X509v3 Authority Key Identifier:
                keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:92:2e:55:98:26:dc:99:d7:50:bb:86:37:04:61:da:38:c9:
         e0:a0:ac:dd:45:16:98:8b:eb:b4:02:ff:e5:a8:c9:b5:34:fb:
         1c:80:42:d7:bc:42:0a:9d:a1:78:9c:3a:d3:da:be:84:aa:66:
         75:41:28:ba:4f:e3:11:72:20:fb:c5:07:8c:05:d9:b9:e8:d0:
         ae:2d:0a:7f:e8:27:94:9f:d0:10:12:ca:e1:92:90:46:f7:7b:
         9e:74:ac:3a:e4:00:98:f0:22:a4:cd:1a:5a:48:6e:41:d4:21:
         8f:be:af:82:0d:86:5f:35:17:bc:a4:e0:96:7b:52:f4:70:44:
         aa:87:b4:aa:da:4e:08:8a:4e:44:de:56:0c:df:e1:35:ef:a3:
         5c:3a:7d:5a:69:ec:58:6a:7f:60:82:33:c7:df:87:c8:22:ef:
         f3:41:39:88:0e:af:ec:47:1c:44:ff:25:ad:4e:da:fe:3f:8c:
         5f:49:a6:86:10:a2:2f:25:54:0b:f0:28:91:35:8b:88:40:ed:
         35:4b:8b:ae:0b:bf:76:a7:80:f8:1d:69:93:c4:6a:eb:75:ae:
         1b:a5:5e:4c:34:e6:5a:70:e6:12:6d:d2:3f:c7:66:0f:41:ea:
         57:67:de:55:91:69:28:66:5c:aa:b9:e5:a1:a5:b4:9b:56:4c:
         1c:11:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----