Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File:                     koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier:          uFSpGnbNDkbhUgsrKjaSvpQAFoRXba4joJamuDsK6AU=
Subject key identifier:   79:B0:CB:FE:3F:2D:B3:60:97:F0:B7:85:EC:01:98:00:3D:9C:1D:85
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer:       /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial:       01962F06B5BA5FEAF14402F342FF81910962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
                          2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: ElQhikIbMmdJ0YXzBSKHuH6fpHJGc0XhHITcRbVbUJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b5:ba:5f:ea:f1:44:02:f3:42:ff:81:91:09:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=79b0cbfe3f2db36097f0b785ec0198003d9c1d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:4e:20:51:20:8a:13:52:d5:46:74:10:16:
                    3e:7f:28:eb:74:f7:e8:91:6f:72:d5:10:15:78:3e:
                    42:80:df:fe:ff:9d:e8:f1:40:8e:b8:b7:db:1b:c8:
                    c3:aa:fc:dd:73:82:d7:60:f5:99:43:b8:3e:b8:3c:
                    a3:67:2d:a1:b3:3f:ff:57:23:da:80:93:5a:a0:8b:
                    df:97:49:70:1b:ed:f4:90:dc:dd:e8:21:73:cb:9b:
                    44:ba:75:80:bd:91:7d:01:a0:1f:c6:8d:d4:03:36:
                    14:32:22:ad:f2:51:2e:3a:74:ef:31:8f:59:04:32:
                    6a:c4:bb:3a:aa:ec:0c:e9:4d:10:0c:b6:44:e7:1c:
                    bd:4b:9d:5b:78:7b:fa:a4:27:39:06:59:1d:23:3e:
                    e4:21:25:09:35:de:92:b1:3a:33:a9:dd:56:bc:16:
                    04:68:8d:03:3a:bf:23:94:c0:ee:c8:28:c9:85:25:
                    8a:a9:42:d8:2d:fc:1b:e4:57:f7:16:b3:3a:27:c0:
                    b1:32:6a:bc:89:41:5c:39:de:57:8f:17:16:b1:56:
                    b1:f5:b8:3d:cb:73:d6:79:4a:4c:cd:bd:cd:38:8c:
                    91:9a:5a:e7:e0:19:16:95:38:31:9d:71:b7:5a:4f:
                    37:52:c2:c9:ec:de:cb:66:b6:b0:d4:20:55:45:13:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:CB:FE:3F:2D:B3:60:97:F0:B7:85:EC:01:98:00:3D:9C:1D:85
            X509v3 Authority Key Identifier:
                keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:d4:92:f0:df:37:8d:aa:fc:a0:75:ba:f9:74:dd:28:76:
         ac:4e:1c:ca:8d:f3:aa:63:ee:21:62:08:45:4c:1a:63:39:2b:
         3b:e1:f0:47:02:75:3d:db:c3:02:5b:d4:d6:a0:c1:a6:f5:83:
         1f:7f:5c:fb:52:69:b3:9f:6e:54:f2:48:6c:ed:f2:39:42:c3:
         c1:ca:59:4e:7e:d1:5b:12:cd:17:3d:b0:46:41:46:db:5e:fa:
         0b:7a:56:0b:cf:22:c9:ef:59:d4:41:c7:cc:64:a7:02:9c:bc:
         fd:0e:be:82:b7:9f:3c:b5:8d:de:4a:8b:01:1b:04:dc:34:3b:
         be:dc:45:75:e0:fe:29:b6:99:dd:23:60:c2:22:53:6d:c8:8b:
         99:8e:56:a4:6b:62:76:e6:72:0c:7a:5c:a7:57:ba:4f:8e:52:
         44:1d:52:4f:57:ab:15:d4:52:60:d4:cb:83:3a:c8:d3:c6:0b:
         78:f6:2a:a7:fe:59:0c:c4:ef:ba:36:1b:48:41:e9:a5:a3:c8:
         6a:59:f5:74:1d:1f:91:08:98:5e:38:09:7b:f0:f3:0b:01:3c:
         a8:ad:89:3b:62:5c:8f:7a:9d:67:3b:0e:7a:6f:62:3b:dd:d0:
         78:3a:64:73:8e:be:d4:29:66:7e:42:7b:cb:fa:99:b5:99:a1:
         10:bd:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----