Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File:                     cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier:          abA/rOCcS3yR0VyEIhg+6NnFQbzECzpDpuVB5RkEIL8=
Subject key identifier:   25:DB:97:52:BC:91:95:84:7A:82:F5:AB:B0:58:AC:3D:91:44:0A:D0
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer:       /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial:       01962F74989586F4AE716C1C37A79D24AFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number:          0494
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: Komd5Ms6qIcTUPazhp2KYBREj_I.roa (hash: CnW97+An2rd0iCGWkOmUW+VoUsOuuzcBgbeTYXyF6OA=)
                          2: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=)
                          3: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: OEgBePb9Bg0LaZhp/EQZ/7udUqcAbl/QqHDX54UMs34=)
                          4: dnWQJFvh8VovqX-ZW_3OjmXqCdM.roa (hash: YDFL0RIOKHZxm2CVCgnm9Jc0jri7btWi5/0UvmlJY+o=)
                          5: mUEBMB1gf8BpmkORtWka9GBSSbY.roa (hash: PBzOt+zbxQGmJ9tBRqgYaqkGg70HiRnIKjw3qGAY5rw=)
                          6: uQVUGEMfvHVdv1_YESVkZQZE7PE.roa (hash: OhVC0ZpRFpvtoO4OMxLJb0wiwXx6IP+AnGybXMCFI/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:98:95:86:f4:ae:71:6c:1c:37:a7:9d:24:af:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=25db9752bc9195847a82f5abb058ac3d91440ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:6f:95:ce:1d:b3:61:20:52:fa:7c:cc:70:
                    78:d4:76:17:1a:4f:d3:04:ce:be:25:8d:a6:8d:54:
                    c8:4e:0f:5e:cd:80:49:b6:73:10:0c:f1:1f:f2:12:
                    0c:f8:e3:8a:26:7c:42:c9:20:4d:dd:93:c5:54:b9:
                    6a:7d:a9:22:e3:62:19:3e:8f:20:41:1a:4b:0f:ce:
                    a6:20:89:9e:34:5b:03:e1:da:92:8d:21:77:2d:03:
                    a4:56:5c:3d:e0:3a:67:0d:20:d7:1c:62:2f:63:f9:
                    e3:fe:42:15:c4:3b:2e:2c:c9:0f:38:50:46:ae:b5:
                    d1:e8:d4:0a:94:3f:ba:8f:e7:0d:3d:2d:c1:45:c6:
                    33:fc:f5:88:61:af:db:11:d1:1c:c9:87:9f:48:a9:
                    03:44:70:82:fc:64:fa:f1:f2:8a:3b:72:aa:79:cd:
                    3e:2c:7a:a0:86:4a:63:f0:fb:f4:18:18:b4:af:da:
                    43:ab:9c:25:21:6b:25:57:ee:3b:b4:92:9a:e8:d1:
                    1b:a9:84:29:23:89:9c:44:45:b8:f3:5c:0e:34:76:
                    81:77:4c:83:04:15:e1:5a:22:c1:e5:cd:82:63:b8:
                    98:6c:03:fc:31:7b:16:5a:67:f1:d7:49:19:bb:5c:
                    18:c6:c7:74:bb:ff:01:9e:5b:98:63:76:7a:15:16:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:97:52:BC:91:95:84:7A:82:F5:AB:B0:58:AC:3D:91:44:0A:D0
            X509v3 Authority Key Identifier:
                keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:22:27:a3:a2:76:6e:4e:2f:c8:ab:55:f0:27:7c:77:99:7d:
         cb:8f:d0:82:1c:6b:15:73:79:01:91:af:c0:93:3a:8e:15:0d:
         e1:20:8a:31:f3:8b:c8:13:af:ba:29:a3:7c:f5:f0:c3:15:66:
         6a:93:c0:51:c5:bf:d9:bf:48:16:ca:4d:b0:ef:3c:bc:88:15:
         c3:76:a8:c3:88:d2:62:bb:64:3a:19:da:dd:33:12:a6:00:7c:
         b0:34:7b:0d:1c:5b:9b:5b:57:81:52:35:87:0d:f6:c8:65:90:
         bf:60:af:92:b1:3e:35:88:54:d9:0e:d1:25:32:f8:af:c6:33:
         c6:7f:c1:52:65:fe:b4:f7:58:a0:70:80:b6:91:23:c3:f5:5b:
         b4:3d:20:56:2e:0a:e9:e8:34:ef:19:f0:c1:07:0f:26:2e:02:
         76:35:f5:ba:cd:37:1b:69:8a:7c:f1:f4:35:66:45:67:49:3c:
         e5:e9:e9:a5:28:3d:4b:85:f2:d3:61:80:03:b7:60:4a:72:73:
         a9:5c:77:9c:4a:f9:db:ea:28:7f:54:8d:3f:57:1a:7b:0a:5e:
         fd:7c:ae:20:ed:e1:a6:18:c1:86:f1:56:b9:d2:ea:e4:00:31:
         fa:fb:c3:d0:ad:c7:e9:d2:3b:bb:f4:9a:d8:eb:c4:e1:35:c6:
         7e:36:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----