Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
File:                     cVuIXDswL9UObCJkejPcR3J_6pU.mft (raw, json)
Hash identifier:          fGSLajVTuPRRMG7ZrxPx22IYtKnvkQe1zYvJZSE3lfs=
Subject key identifier:   33:CE:0E:DD:51:94:9D:A6:02:BD:89:53:27:3D:A8:59:93:99:67:B2
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Certificate issuer:       /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial:       01962F3DB009E45D3B9D7770CD94E15D5718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: 14pido6o0wqfomgXR8pucw1gPzU.roa (hash: jgQtihM0UCn7BbKxbmBUgDGUKYz/W0MyqwuDhDbNzpY=)
                          2: 2etIb7Rnc-HqeeBf3zVt1jLWUNA.roa (hash: OC17SOEObLk3HsIqjo4SamQfndEYttT241yoTEhMhMM=)
                          3: NA4JD_GnqQvOyR7m4m3Vw9okgE8.roa (hash: J1cBhjZo1uGeijpNkjCbQKnO6iIh1rl0/dVJtp6h+ew=)
                          4: cVuIXDswL9UObCJkejPcR3J_6pU.crl (hash: t81sjwUnHKHeAZny1W2ToxoZh3VUiwalEEkjs2qwylg=)
                          5: eHn6AySlJiBAuuxtiCIN3RwN6qA.roa (hash: LgEJiOedO8COAzGV0am2pAV/Vl26Jh1hgQQo5CskTyg=)
                          6: i3VhAkwmg1Hp-iEg5-4DqgQXOCM.roa (hash: mdFfnRZh31uX+xwiVUHnQrTZIRO7yKpYbNnQm8yN5rc=)
                          7: iNOcJVz2_fB3iFNvhul_qe9ZMbQ.roa (hash: PTNjFEC+8LOf9p9/46EB/Gyud8WBITxQ3kLEIaOMY6c=)
                          8: oi_n1Va3IGPAcBfd-0AP3-FX77M.roa (hash: szdc2nWaBES7VDGsxzr+xrQOccNyUqGV5KOPHZLY5gM=)
                          9: qAgR3U_rmhTk9ylZXwkHVA3MlH0.roa (hash: aIy0e102scbWahaNYsLiO2Tj1Fxcl0+tQeOdYm8oqFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b0:09:e4:5d:3b:9d:77:70:cd:94:e1:5d:57:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=33ce0edd51949da602bd8953273da859939967b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:ed:23:db:f4:d2:50:76:9c:67:0d:23:f9:
                    71:29:7c:6f:31:df:a6:3d:2a:0e:c6:c9:a2:98:7f:
                    15:18:dd:8b:42:36:f4:b7:32:ef:e7:46:42:5e:a2:
                    f8:5f:40:4e:9d:78:22:ba:b2:3d:9a:be:c8:7f:76:
                    18:87:2b:99:01:dd:5a:78:5c:b5:15:0e:ef:7c:ae:
                    43:ce:49:23:a4:ad:ff:d5:43:3c:93:ec:02:a1:45:
                    f3:e3:58:b2:71:d1:67:a1:d8:ac:ce:b5:a5:f8:35:
                    8c:24:da:bf:3e:b7:da:f0:e5:3b:bd:44:27:e0:1d:
                    29:e1:cf:9b:a1:70:4c:1c:d1:f6:d8:84:b8:12:4e:
                    de:08:29:f5:2c:c0:2d:7a:d1:66:4b:cf:25:9f:3c:
                    50:07:8d:35:5e:8e:91:ed:10:13:bb:39:4b:63:3b:
                    6a:c5:27:95:d4:81:b8:45:15:2b:56:ea:6c:74:82:
                    3b:2b:d4:b8:f6:65:cb:27:23:ad:85:d5:1e:63:6b:
                    9e:52:68:04:2f:f9:df:7c:da:c2:57:46:31:6d:88:
                    96:5c:72:7f:78:78:75:df:2a:e6:9d:cb:cd:67:eb:
                    e4:52:de:44:22:a7:ae:aa:a4:da:0a:14:d8:89:32:
                    c0:fd:81:e8:9f:37:d3:56:5e:6c:b5:f5:3d:1c:55:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CE:0E:DD:51:94:9D:A6:02:BD:89:53:27:3D:A8:59:93:99:67:B2
            X509v3 Authority Key Identifier:
                keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5a:ff:b3:0f:73:a5:92:89:85:cf:01:02:cc:d2:76:d1:dd:
         90:9b:df:5b:41:2c:8a:24:9f:f5:8b:50:4b:5c:f4:23:60:96:
         10:a9:49:bb:88:0b:ed:42:d1:93:ab:9c:e2:e4:c4:b3:e5:e4:
         e9:35:51:dc:61:60:28:b0:90:0f:06:56:2f:5b:02:81:35:48:
         2c:71:41:a6:ae:4d:ae:c4:a7:00:92:2d:76:a4:c7:07:3d:1f:
         17:44:2c:96:1f:8e:f5:bb:88:86:d7:6b:8f:c8:fd:95:1d:30:
         6f:d4:cf:61:f2:e2:62:3c:31:67:9f:20:0f:48:2a:90:65:cf:
         eb:e2:d8:19:c7:18:e3:9e:dd:01:14:df:74:15:47:15:53:2f:
         8d:9a:bc:0c:bb:d8:75:d1:c8:a3:21:8f:04:69:bd:52:33:2d:
         b8:c2:b4:e7:37:29:ba:f7:69:a8:d4:7f:1f:86:8f:2e:d6:69:
         26:73:a2:fc:8b:3f:ae:ba:c0:fd:ec:3a:b6:77:e7:a1:61:ef:
         3e:2c:06:c6:94:bf:56:ab:ec:bb:80:52:b1:30:00:aa:b1:e7:
         ad:02:63:a1:ca:2b:6a:3d:2e:31:93:74:f7:2c:0c:82:81:a5:
         b0:e9:db:a4:e9:85:9d:e0:f1:7b:62:9b:0e:5a:a2:39:92:80:
         0e:33:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----