Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File:                     ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier:          V6Ze+QBBHFAKRPbeHH9F581v53erlXUM8RX+QMhYL3Y=
Subject key identifier:   24:2E:33:FA:FC:13:DD:A8:94:38:FA:87:FF:97:C6:12:FF:60:53:12
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer:       /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial:       01962F3D4D3BCF5032E3814F6F6E33868ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number:          0490
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (hash: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=)
                          2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: SprF2qOhGD5EbUJvWJZLxfap72BEUZf4QlCeSpKEf8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4d:3b:cf:50:32:e3:81:4f:6f:6e:33:86:8a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=242e33fafc13dda89438fa87ff97c612ff605312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:60:df:a6:76:f4:cb:bc:89:00:5c:87:48:
                    d5:59:f7:bd:9c:2e:0e:46:c4:c5:59:7e:b5:3b:18:
                    dc:85:26:89:57:da:6a:51:79:bc:00:61:48:55:42:
                    fa:51:5a:3e:fb:9e:a5:26:3c:a1:cc:e1:1d:1a:b2:
                    dd:2d:18:89:27:95:1d:74:6e:42:30:78:39:4e:31:
                    91:12:26:72:f7:ab:93:ab:1f:d1:ac:c7:d8:8b:f7:
                    1c:c5:06:89:f0:6a:89:2f:1d:67:ba:77:06:8e:df:
                    7f:7f:89:46:5f:24:25:db:8e:d4:78:87:84:0e:b0:
                    28:91:c7:f1:49:1d:0c:d8:28:6f:7f:f5:4e:51:da:
                    f6:04:56:ec:1e:08:bc:fd:a9:0f:c7:3d:29:26:d2:
                    9e:0b:1f:b0:c4:11:c1:ea:88:5f:71:ca:99:02:31:
                    84:07:44:66:32:4a:82:01:15:54:5a:1e:d1:90:41:
                    e0:b7:18:38:3e:4b:a3:a8:62:6c:23:47:b9:19:61:
                    0e:6e:cc:68:00:26:de:d3:90:f4:98:bc:a3:d3:32:
                    7e:a0:db:14:13:d1:35:6c:c7:a3:e5:ec:b6:58:9a:
                    6d:8d:94:5f:3c:29:d5:9f:35:cb:39:fc:8c:1f:92:
                    cb:3b:e4:f3:2e:dc:9b:d3:ab:74:5c:24:99:00:c3:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2E:33:FA:FC:13:DD:A8:94:38:FA:87:FF:97:C6:12:FF:60:53:12
            X509v3 Authority Key Identifier:
                keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:5a:80:d1:4c:ef:0d:df:da:79:b5:26:d2:0b:18:fd:8b:
         bd:35:05:5d:20:19:26:a3:d9:46:ba:c6:d9:85:4d:0e:b8:4f:
         ec:fb:46:2b:01:ef:59:c4:a2:04:16:76:49:d1:fc:15:83:7b:
         5e:6a:68:1c:8c:c4:52:f0:f6:91:77:4d:11:b4:49:0f:0f:4a:
         2f:fd:e7:22:c5:9d:41:ee:f1:f4:bb:cc:fc:a2:44:2c:e1:55:
         d6:27:a6:16:88:ea:59:96:18:4d:f2:22:aa:72:c4:96:95:8f:
         c6:bf:b9:04:a9:1f:aa:c6:2a:71:01:a1:11:90:e1:78:06:42:
         03:96:ad:de:43:6b:0a:2c:64:08:09:dd:a2:22:a6:ce:5d:fb:
         ac:e7:80:14:12:0f:1c:32:98:0c:53:95:43:3c:cb:da:f5:cf:
         31:f6:fc:e6:ef:6e:ae:30:78:f3:9d:08:f8:da:84:a4:a1:96:
         2e:a3:51:49:70:de:d2:d3:5d:b7:95:46:54:38:e5:75:2f:fa:
         10:6c:9b:70:14:1b:08:2d:10:3c:3e:25:2e:f3:f9:2b:b3:b3:
         9b:58:a1:af:e6:a8:79:1f:ed:9a:84:1e:20:1d:20:68:4f:35:
         8d:f9:61:84:53:f2:a1:92:49:46:9f:f9:72:47:43:a5:25:ca:
         2b:7c:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----