Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File:                     clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier:          7rI9tckCWrtMeV4ATvpBoVM25skY0LJQK4enMseDBF0=
Subject key identifier:   E6:BB:DB:AD:69:A0:CE:89:AA:BC:A9:2C:4E:75:2C:DD:82:FF:1B:87
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer:       /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial:       01962ECF4DFD857524A71CC441B073AA6D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:00:59 +0000
Files and hashes:         1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
                          2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
                          3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
                          4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
                          5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
                          6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
                          7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: DlGkzgKf+4FYWUQXfnS9Yvhz9MT8LYlxvuEe80m6+Zk=)
                          8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
                          9: jroeQBPEeliXgg9ubE0_unQjg_E.roa (hash: eYB/F5uzrRsKIyMnsI+GGxiEuN9Ybdn4MwC7lWvrb9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4d:fd:85:75:24:a7:1c:c4:41:b0:73:aa:6d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
        Validity
            Not Before: Apr 13 11:00:59 2025 GMT
            Not After : Apr 14 11:00:59 2025 GMT
        Subject: CN=e6bbdbad69a0ce89aabca92c4e752cdd82ff1b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:eb:8d:73:c4:3e:92:01:54:57:54:30:4c:
                    f1:02:f6:81:da:84:dc:3b:86:f1:54:4d:d1:47:c5:
                    d8:cf:0d:26:86:92:b0:cf:1e:c1:26:05:3c:9d:b7:
                    ca:1c:16:b7:cc:cf:83:50:3a:04:7e:38:d6:c6:eb:
                    da:47:ef:40:36:83:32:a8:3c:8f:f1:b5:47:f0:a1:
                    46:58:6c:e9:b5:ce:b6:a6:67:76:91:e1:fa:79:28:
                    22:d4:69:b1:93:14:30:ce:60:84:6e:6b:13:57:24:
                    cd:23:36:a7:76:8a:2b:a4:5d:76:6a:f3:f5:23:dd:
                    41:48:22:3a:c1:9f:63:ae:51:b8:ed:0e:65:e5:8b:
                    f7:f8:4c:f2:80:d3:73:4e:fc:ae:65:03:57:29:b7:
                    c7:15:4c:4f:d0:68:f8:3e:48:64:9c:a0:f2:cd:22:
                    67:ea:54:6e:7e:ca:2b:73:a6:ec:18:2c:19:7f:66:
                    3e:1a:35:65:52:b4:c0:f1:3f:1c:51:75:2c:3f:a2:
                    e1:cf:91:9c:a3:d2:73:22:eb:16:e3:cb:d5:01:80:
                    f9:61:d6:9c:4a:0c:05:db:56:6f:d5:5f:d6:30:9b:
                    96:fe:87:7f:26:12:e0:98:92:7b:b0:b6:48:15:07:
                    af:a8:4f:dd:75:6b:bf:04:8c:84:a6:60:39:05:02:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:DB:AD:69:A0:CE:89:AA:BC:A9:2C:4E:75:2C:DD:82:FF:1B:87
            X509v3 Authority Key Identifier:
                keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:9d:1f:37:78:1b:70:0e:1e:68:10:8d:1c:21:f8:b5:33:
         44:70:03:32:e2:a4:40:14:56:a4:7e:e2:ab:72:c8:21:4e:09:
         28:ae:d6:24:cf:52:1e:1e:af:63:c2:6f:ca:2f:64:0c:d8:b2:
         0c:31:36:04:c5:c1:8d:83:79:01:5d:52:e1:27:37:e5:78:91:
         cd:fe:9c:25:4b:77:b4:d6:2f:a2:8e:bf:b4:c0:68:b2:6e:20:
         9f:a3:9d:da:de:db:ec:f6:fc:51:c3:21:fe:69:de:b1:72:ae:
         bc:0a:e3:2b:e3:8c:3e:1e:77:22:46:de:47:38:08:ed:70:7c:
         67:21:4d:04:28:c2:98:65:82:8d:ae:11:00:3a:5a:ab:28:a3:
         35:af:e1:f4:1e:f9:a8:15:66:b0:3d:dd:a2:36:22:9a:28:8f:
         b0:0d:72:8c:10:3d:dd:80:41:14:b3:59:e4:1d:9b:ea:76:eb:
         31:c5:52:4b:c2:f3:06:c9:a2:cf:19:6e:5c:a4:c9:d3:07:64:
         c8:99:e8:39:84:31:66:5b:2f:b8:f1:e2:05:87:3b:bf:43:0e:
         58:6e:b6:f3:35:aa:63:03:13:4b:36:98:ec:b4:05:2c:00:02:
         6a:0c:19:80:62:f3:c4:a9:71:d6:7d:f3:c7:be:01:19:d6:b3:
         04:42:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----