Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          YefgF4gdcE1A3Y5TFFkysuHmkSZqc7MJuLTT2DkrlCA=
Subject key identifier:   21:DD:F7:18:77:B6:B1:20:30:D2:A3:C9:EF:02:4C:EA:D8:55:16:70
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       01962F06D4E6DE6278DE86214ECF65E4B552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          066E
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: dCnwG1w/uVfv3LsSaWH7mOc/g/riW/tzVDDcJT2NUEA=)
                          2: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=)
                          3: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=)
                          4: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:e6:de:62:78:de:86:21:4e:cf:65:e4:b5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=21ddf71877b6b12030d2a3c9ef024cead8551670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:d4:90:d1:f5:88:e9:ea:35:d3:17:88:6b:
                    b4:83:5e:fa:86:7c:02:fd:e1:e1:c5:1e:d9:ea:4d:
                    2e:25:60:dc:3d:92:0c:a5:90:90:a3:f8:c3:83:e0:
                    1a:71:5b:99:d9:90:1f:51:3a:09:03:6a:74:d2:94:
                    bf:67:f1:6a:3d:a0:3f:19:a4:aa:99:63:e1:b8:bb:
                    d8:ba:a3:ad:2f:4f:d3:6c:f6:49:40:48:49:ad:13:
                    81:84:53:6a:36:7f:a9:28:3a:61:15:f8:89:18:26:
                    09:5c:18:21:65:ee:d4:7c:ab:e0:ba:60:e9:57:bc:
                    1d:76:ee:58:cc:f4:5a:d4:31:bf:6b:8c:3a:81:a6:
                    f7:d1:ee:ca:fc:12:5b:10:41:5f:ca:28:c2:6b:eb:
                    d3:fd:3a:ff:25:f4:2e:08:73:5c:13:14:07:ad:53:
                    fa:db:d7:cf:34:60:b4:e3:e4:b2:be:d4:67:ef:40:
                    b7:2c:c4:f8:65:95:db:8d:bd:f4:8d:b6:b4:5b:2c:
                    21:aa:93:f1:09:c2:cb:5d:83:0b:69:75:9c:35:f7:
                    ae:af:66:5b:2e:b5:5c:03:5d:8e:43:40:fb:5f:00:
                    79:75:95:11:98:05:6e:69:3c:3b:e9:74:e1:35:de:
                    5d:80:96:8a:e7:cf:14:d9:03:23:4c:43:14:7a:a2:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:F7:18:77:B6:B1:20:30:D2:A3:C9:EF:02:4C:EA:D8:55:16:70
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:56:fa:14:98:5a:21:a1:f8:82:3c:ef:4b:21:0d:23:6b:
         2d:cc:f2:c3:85:c0:94:a2:4a:b5:0a:cc:f5:b0:90:49:d1:2f:
         47:a9:11:28:4e:03:75:45:d1:37:34:ec:19:37:21:20:b0:ca:
         93:ba:f8:97:8f:e3:fb:60:f6:bf:db:f9:90:9c:aa:73:0f:f7:
         52:ab:94:8e:74:64:6e:32:6d:fe:b7:a6:db:6f:d5:c1:c2:f4:
         b2:1e:37:e8:54:43:31:36:4e:9f:9b:a2:01:10:f2:a0:14:db:
         2c:91:c2:e7:bf:78:de:a0:8e:f7:6e:c4:3d:01:98:3d:b7:f7:
         3d:56:f0:b2:d6:09:2a:bd:c8:dd:58:4f:30:89:1a:e8:ec:87:
         f3:63:40:f4:72:cc:f7:84:97:6b:03:a8:f0:a7:65:d6:b1:a2:
         f4:0d:07:cd:83:5f:c7:b0:cc:c3:0e:13:7b:f0:ee:8a:64:95:
         47:4d:50:5d:70:5d:d0:eb:51:5d:53:6a:97:c7:22:a8:01:5a:
         e8:18:41:e5:28:41:a4:3b:05:ff:ed:fb:e6:2b:49:19:32:62:
         99:9a:76:16:a6:44:19:35:ab:8f:a7:14:e2:f4:ba:27:2a:a6:
         fa:cd:3d:ba:92:e2:6a:fa:82:4f:3d:a0:99:ff:ac:47:f5:53:
         be:66:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----