Manifest

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File:                     C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier:          HCb+CndLY+QdzHCOXO+LVwz6Z3jQ9uZjk1Rig/5poh0=
Subject key identifier:   D5:89:DA:24:62:32:B6:37:94:79:9E:82:D7:D7:B4:FB:27:A0:03:48
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       660F156BF19DD1229595A363881B790ECC8CED9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number:          0298
Signing time:             Sun 13 Apr 2025 11:39:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:34:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:43:12 +0000
Files and hashes:         1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: pl6KRHt9+3lp7MEEpPfYZz2ynW46a/hoaHbt43TYaKo=)
                          2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
                          3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0f:15:6b:f1:9d:d1:22:95:95:a3:63:88:1b:79:0e:cc:8c:ed:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: Apr 13 11:34:12 2025 GMT
            Not After : Apr 14 11:43:12 2025 GMT
        Subject: CN=D589DA246232B63794799E82D7D7B4FB27A00348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:1a:6a:3e:73:60:2a:6f:b6:fb:58:cb:ce:
                    11:5c:b1:39:91:8c:ca:16:20:56:dd:27:89:0f:7d:
                    f9:08:72:1d:8e:80:f8:08:9b:32:3f:8f:b9:e7:62:
                    78:7b:0c:3d:7d:1f:c9:e9:6f:55:5d:7a:53:22:dd:
                    57:c0:2f:7c:e6:9b:e0:f8:d6:08:19:9e:58:b0:cd:
                    08:d1:a7:40:c2:d8:1f:58:3d:30:56:e0:59:1b:70:
                    79:1a:1e:72:d8:88:96:6d:4c:85:9f:96:fb:be:fa:
                    01:65:59:3e:0a:e8:52:87:3f:0a:47:14:0f:94:73:
                    77:6f:96:1b:53:cb:01:59:be:60:3d:d7:f9:62:63:
                    59:d0:5f:c2:c8:84:7f:1b:35:83:7d:a3:9f:36:16:
                    6f:b4:b1:50:25:6a:65:30:db:1f:60:28:90:4e:a0:
                    b5:6f:6f:a6:3d:b7:80:c4:6c:5a:73:2d:51:36:34:
                    db:f9:39:60:a1:32:27:a3:fa:7d:ee:aa:94:af:87:
                    76:2b:37:19:77:41:e7:60:d4:7c:23:c5:63:41:35:
                    1c:38:2e:bf:7b:56:0c:82:f8:89:94:28:f2:c0:55:
                    a1:d4:f0:4b:52:b2:ca:d2:31:35:91:be:71:0a:de:
                    0d:3b:4e:af:5e:f2:2e:9a:f8:b6:5f:17:ea:53:2f:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:89:DA:24:62:32:B6:37:94:79:9E:82:D7:D7:B4:FB:27:A0:03:48
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:9b:3c:a0:80:a3:6a:68:78:e9:c3:78:3d:16:ac:67:3d:
         a7:00:ce:77:0b:4a:ea:3b:f6:88:65:25:e2:f2:6b:fe:c1:c4:
         27:50:08:21:e9:f0:8e:c9:0c:26:06:0d:72:ee:cf:d5:f0:7e:
         7b:e0:e0:72:db:97:bd:c1:8c:e8:5b:4a:89:63:b2:7e:4e:bd:
         b9:8f:7d:6d:19:3b:52:45:6c:38:e6:7e:f8:20:a6:f1:95:1f:
         f8:68:b2:5e:05:2a:b0:9b:11:1a:38:4a:60:5a:bb:48:17:63:
         ae:7a:10:f8:0b:b6:8f:6d:8b:40:17:17:bf:34:51:4f:d0:bc:
         5e:f8:92:09:69:27:8d:28:d9:1b:cd:5c:e8:89:a7:4b:5c:0c:
         84:b9:6f:ea:00:ea:e4:e0:05:a6:2d:17:b1:84:ae:3f:8a:b4:
         d5:56:28:ed:64:77:78:23:1d:19:db:a7:df:07:40:37:d1:c4:
         06:67:e2:51:f9:70:ac:a3:17:80:08:d7:da:f5:7d:95:2a:e7:
         f7:8d:1d:3b:c8:73:17:46:5f:08:2f:65:b4:85:45:8f:4e:0a:
         e4:94:74:60:19:05:9d:d5:bf:aa:e5:3f:cf:49:dd:eb:03:7d:
         f1:d2:8e:ab:82:30:f0:36:02:96:06:bd:47:12:f2:a1:9f:bc:
         0f:e2:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----