Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File:                     CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier:          ClBaLVrxVEp8p1p04nmzp764Xkj/sPGgm+lelXBEcqs=
Subject key identifier:   D1:71:AA:27:FB:D3:DA:60:1D:15:08:B6:A9:2A:9F:90:9F:24:F4:75
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer:       /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial:       01962ECFDB8C3D0801382C05B9FEE9325B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number:          01CE
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: H5Sp2Fi9F2xVBtgkLzhT5Wddz9NVihyM7pyIsnsSVsg=)
                          2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:db:8c:3d:08:01:38:2c:05:b9:fe:e9:32:5b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=d171aa27fbd3da601d1508b6a92a9f909f24f475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:d0:be:2b:3e:ba:ea:5a:82:65:0b:07:e2:
                    92:d3:c4:61:7e:a6:43:41:11:fd:c1:cd:5a:a6:c6:
                    40:28:f0:f1:d2:5e:7f:c6:fd:8c:57:4e:a0:04:95:
                    10:43:c3:14:01:89:b4:c7:7d:71:cc:55:a8:58:43:
                    92:1f:34:74:93:ad:35:87:92:aa:e2:f2:f0:88:51:
                    4c:29:83:ee:10:c5:4d:c7:94:c3:e9:a7:5f:d5:21:
                    c9:95:7e:af:af:57:9d:a1:3e:e1:d0:88:45:45:d7:
                    0d:a3:df:1d:e1:6b:fa:17:0a:18:53:74:27:d3:99:
                    c7:7c:9d:2f:8b:41:8c:e8:8e:ca:5b:d9:5e:cf:5f:
                    4c:14:7a:ae:93:83:c5:41:9d:f3:e9:99:a9:19:81:
                    21:1c:5e:5c:a3:e6:98:09:55:fa:6f:9e:00:0c:d8:
                    d5:b3:95:6e:eb:be:6c:28:12:92:0e:e8:05:e3:00:
                    87:de:11:9d:05:f4:b6:15:ff:ff:61:dd:a0:5f:93:
                    b6:5f:e1:33:ff:94:18:9a:bf:66:df:98:08:30:a7:
                    e4:63:53:2f:af:d9:67:3d:f5:7c:ed:e2:80:6e:8f:
                    75:13:58:3a:75:ae:53:93:1f:c5:e0:22:a6:d7:00:
                    16:d0:ea:db:da:31:8d:d6:ec:b3:6d:20:c6:a7:ce:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:71:AA:27:FB:D3:DA:60:1D:15:08:B6:A9:2A:9F:90:9F:24:F4:75
            X509v3 Authority Key Identifier:
                keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:51:95:bc:75:29:76:ab:e8:2e:99:0f:58:93:ba:d1:52:4e:
         59:5b:a5:f3:d6:9d:8d:0d:33:23:6d:ba:16:5a:dc:f2:91:bb:
         9b:94:6b:28:aa:a9:de:e0:ce:73:c3:57:cd:be:0f:25:dd:d5:
         ee:21:73:90:66:c5:19:f2:a3:22:06:9a:11:64:8b:57:ef:a2:
         39:77:39:b3:c3:26:71:27:d7:40:67:dd:94:6a:a0:32:27:78:
         e7:0f:88:7b:32:e6:a6:05:9f:a9:19:df:52:ed:88:99:46:c9:
         da:4c:18:21:42:48:94:88:70:64:7a:b9:a2:98:8d:7e:78:8b:
         9c:26:d6:fa:04:44:01:31:91:80:3d:b2:17:d6:ca:0a:58:63:
         fd:f1:c7:70:07:d3:4d:85:06:80:8f:8a:a7:f9:d7:dd:5e:0f:
         47:4a:80:f1:ec:a9:9f:68:66:55:67:be:30:b5:22:2b:6a:d7:
         71:18:cb:f2:04:14:3e:63:2b:45:f2:cb:5a:bd:f8:6a:a3:25:
         f2:a3:2d:a6:03:0f:48:03:ef:56:44:c8:91:d3:bd:d7:ca:87:
         d1:f2:72:22:25:8a:95:21:42:97:7b:75:78:47:a8:b2:8e:b0:
         d0:2d:fd:4c:0f:24:58:72:a0:12:b7:32:75:f3:14:e9:33:30:
         e3:90:ea:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----