Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          ed7cYKJCDnafwGauOwANFZHC5HdAkNi2doSZBrHQfx4=
Subject key identifier:   F1:6A:32:0B:63:46:0B:9A:47:DF:54:87:75:99:9B:5C:35:83:81:1D
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       01962F7475E8A3082474C942C4AA49863299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          1418
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: QHm/6WgMd4FYaAavuZfHT3iOwFzXnNCHF/Ns2i4Tly0=)
                          2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:75:e8:a3:08:24:74:c9:42:c4:aa:49:86:32:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=f16a320b63460b9a47df548775999b5c3583811d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:ba:e0:9d:dc:97:50:01:d0:b4:d9:bb:92:
                    98:03:e3:05:37:38:a6:63:39:67:b9:cf:73:90:2c:
                    79:83:41:aa:05:c5:36:82:51:74:59:65:69:2e:4d:
                    ff:fd:03:d1:ce:00:c4:50:7f:2f:4f:07:56:eb:39:
                    9d:6c:f7:f0:90:20:dd:71:7f:70:62:f8:5e:06:00:
                    39:21:5b:14:a3:c9:bb:ec:5c:97:1f:30:85:cf:ec:
                    d8:9a:e2:8a:50:8b:aa:32:00:d3:1b:54:be:63:71:
                    98:42:c3:a7:65:dc:38:1d:57:04:00:c5:f8:82:2e:
                    6a:9a:f4:7d:9b:0f:48:b0:bd:76:a8:e5:a6:50:c5:
                    9d:6e:6c:1e:08:c8:ae:ee:67:fc:6d:72:ce:12:03:
                    15:26:3d:33:97:5a:d6:3c:31:7c:90:1d:ea:d3:15:
                    0b:2b:51:21:20:6f:b5:ab:7b:69:01:38:e8:23:9c:
                    1c:f7:eb:4d:54:c6:b2:eb:9f:12:ec:13:17:bf:eb:
                    66:be:9b:cc:97:5c:64:f0:13:84:51:d3:d2:7c:ec:
                    7c:1a:4c:24:a8:52:c5:41:fb:ae:bd:71:8e:d8:56:
                    bf:83:06:61:de:0c:42:4f:2b:04:87:b6:39:e3:57:
                    c8:47:68:73:d4:1f:9c:76:3c:d2:c5:ec:03:12:f8:
                    a0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:32:0B:63:46:0B:9A:47:DF:54:87:75:99:9B:5C:35:83:81:1D
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:3d:50:19:f2:e0:bf:d8:23:5b:e5:02:65:ea:c8:a6:36:
         44:e9:a7:74:bb:30:8e:cc:fb:c5:7e:60:53:19:5e:0f:ee:58:
         e2:ce:9b:06:d3:7a:79:23:18:99:81:8f:a7:8f:34:f8:51:f3:
         b1:31:d4:41:5e:3d:bf:e1:73:9c:33:f1:2b:d9:1f:e5:ea:61:
         9c:c9:5d:e0:45:b4:ef:c5:53:f4:5e:61:19:75:7d:27:34:4c:
         ce:d3:f1:eb:17:ad:e2:8d:63:fc:7a:76:b8:14:3e:01:b3:85:
         78:a1:37:00:fa:5a:07:d7:26:c6:32:6b:ad:df:9e:46:05:1f:
         ec:62:a7:b5:aa:0e:ec:53:79:aa:e7:f9:e8:15:0d:00:1b:36:
         d3:9a:a4:0a:c5:2f:1b:83:35:e3:8b:19:0b:29:48:88:41:e4:
         c9:ae:ad:75:91:45:f2:f9:67:e8:0e:27:cd:3b:f5:f5:3b:c5:
         24:7a:5a:b1:c8:68:f3:7d:c9:b0:5f:73:d0:69:7e:8a:84:b6:
         07:f1:e0:78:dc:2e:5d:a6:ac:36:cc:b7:68:9a:51:58:62:18:
         75:9a:ed:9e:6e:e0:6a:67:a0:83:73:65:02:94:2d:06:ea:5e:
         45:a5:93:f8:5a:86:01:6e:8b:d2:d8:d5:dd:79:10:c7:f6:ca:
         7d:e4:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----