Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File:                     CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier:          D3jtxlAANNNQ/sMQWs4o1eXpLp7nvrp5i92c0eBGSss=
Subject key identifier:   AA:94:C0:88:14:26:E2:75:81:22:51:BD:EF:A0:66:A9:E5:6C:A0:D9
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer:       /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial:       01962F3D84572B1C9727F900FB6833941F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: gUEPxF8QIUjLrvm1TJJSVbJ2S7zv5BU1ZaXbu4sieTI=)
                          2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:84:57:2b:1c:97:27:f9:00:fb:68:33:94:1f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=aa94c0881426e275812251bdefa066a9e56ca0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:57:16:f9:45:e8:8d:c3:fd:37:4b:14:bf:
                    47:78:79:d6:f1:07:a9:1c:4c:63:6f:98:2d:bb:02:
                    a2:f5:ae:b0:fa:72:10:f4:ba:73:c1:d4:f5:b7:27:
                    d1:6a:34:fb:8a:13:9e:b9:47:52:69:c9:fa:d5:8f:
                    88:a4:f1:70:83:c9:6f:77:dc:0f:bf:91:35:c9:a8:
                    9d:05:23:35:0a:49:23:2f:a9:be:5c:82:68:a7:62:
                    63:34:4b:cd:26:8e:8c:42:e2:f1:ae:a2:87:5b:34:
                    68:21:f4:72:fa:e0:df:39:8f:be:a2:02:78:56:fc:
                    25:21:4f:8c:23:aa:ab:d6:01:2c:82:4f:8a:5e:cb:
                    38:29:20:0d:39:d1:89:db:ad:40:23:3d:55:19:4e:
                    25:5e:20:5f:2a:dc:95:37:1f:84:d5:1d:f1:4d:aa:
                    11:de:48:e2:6c:85:61:03:be:97:37:c2:cb:f7:e3:
                    c1:9e:ef:c8:e8:a1:58:89:df:c0:f0:1e:31:97:cb:
                    1b:49:aa:f7:30:55:03:c7:6f:03:be:e8:c6:ad:d2:
                    7f:fd:92:44:e1:01:71:bc:47:6e:50:1d:89:cf:c7:
                    78:5b:a7:98:ef:f6:78:67:3d:2b:2e:bc:20:e5:dd:
                    01:c9:00:93:4c:d9:1e:5c:b3:ab:9d:af:66:17:7d:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:94:C0:88:14:26:E2:75:81:22:51:BD:EF:A0:66:A9:E5:6C:A0:D9
            X509v3 Authority Key Identifier:
                keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:9c:94:0e:b7:1a:1a:69:f3:bc:67:90:b2:64:b4:c8:02:
         bb:e9:a3:4b:04:02:bd:8f:08:46:c2:17:40:15:55:fb:cd:73:
         2f:b9:9f:07:64:ba:81:4f:86:35:f2:4f:d2:94:26:e6:42:1e:
         22:00:36:20:83:81:f8:7b:a3:c5:13:1e:54:db:2d:5a:7d:6c:
         44:77:80:08:04:28:b2:0f:df:54:aa:ee:5f:33:0a:65:dd:d0:
         18:0a:db:50:57:67:2e:65:d0:03:e5:71:6e:e8:58:c8:95:24:
         dd:bf:ed:91:1b:75:27:fa:a1:ba:b0:90:ff:5f:0e:d4:2c:74:
         a4:6a:98:6a:3b:c4:f0:2c:b1:91:cc:fc:e2:8b:40:af:42:b6:
         87:36:e2:7c:19:0f:78:c1:2c:e4:0c:9d:cb:14:53:b8:bb:ca:
         43:11:20:34:62:94:42:3b:ec:36:4f:40:07:34:35:44:f5:e0:
         97:e9:2f:7f:43:0a:84:b9:18:fa:cf:52:18:a0:73:bf:ec:51:
         cf:22:68:4b:e4:ba:2f:98:a3:4d:d1:81:ff:60:4e:63:25:73:
         41:73:58:19:91:6f:1c:91:5f:64:ae:e6:b0:2d:d3:a1:aa:6c:
         2a:96:1a:b7:fe:0d:ae:82:15:01:df:fa:6d:6c:7f:f5:e6:9d:
         31:58:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----