Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
File:                     cPaM3tOePsVM7iIzJS7zk3upgo0.mft (raw, json)
Hash identifier:          wy3kS0fSFM3urmPxdxiMVEmbFMkRaasIRnANeq6s6tY=
Subject key identifier:   2F:88:94:46:7C:5E:54:67:AD:00:E3:04:36:AF:7F:FE:3A:07:FF:0C
Authority key identifier: 70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D
Certificate issuer:       /CN=70f68cded39e3ec54cee2233252ef3937ba9828d
Certificate serial:       01962F74D8C8F5EE4897F1B7201F67B2034F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
Manifest number:          0763
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: cPaM3tOePsVM7iIzJS7zk3upgo0.crl (hash: OE13pJe0sFtcxWkY3Zobksw85pm0IXhjqudvbyGiFco=)
                          2: pc3D-RJai3Sy0xY8-tFzVCI1yUM.roa (hash: uBxXsxOQORpc24Ptxkp92Yz5fKaDuCXBuTLa8unFs14=)
                          3: yzS5saqZmvfLrP5ZMitifKMGoG8.roa (hash: AF5+gCr6uoirpp1iHmwqxTO2TQvWrmslD/huU/aCXCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d8:c8:f5:ee:48:97:f1:b7:20:1f:67:b2:03:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f68cded39e3ec54cee2233252ef3937ba9828d
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=2f8894467c5e5467ad00e30436af7ffe3a07ff0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:3b:c1:49:86:8a:65:46:b5:b4:33:be:23:
                    29:69:5e:67:5e:28:1c:ff:b2:29:2d:b8:fa:10:67:
                    75:58:5e:b7:b7:93:05:a2:e9:dc:ef:93:85:1f:9a:
                    8e:71:79:42:13:fd:fc:f4:4d:99:e0:4c:66:1b:71:
                    cc:a3:dc:05:df:a3:46:4a:e8:d9:60:01:93:47:ce:
                    58:a3:7d:60:37:76:a9:03:8f:0a:a6:72:03:99:38:
                    7d:52:86:db:a8:26:1e:e3:e3:85:ea:56:bb:79:a4:
                    36:5e:fd:f0:0c:4f:97:35:50:8a:94:9c:6d:e1:42:
                    37:f6:d4:d1:ff:50:8a:d2:4c:78:ae:ee:26:3e:6a:
                    e1:98:4f:ff:86:a5:90:dc:3a:6f:46:cd:4a:9c:0e:
                    9d:ae:a1:61:6d:0f:6e:ff:4c:ff:6e:ca:65:cb:0c:
                    d1:e8:2a:03:ea:7e:d3:9a:bb:ce:2c:af:e0:77:1d:
                    9a:1e:58:df:9d:83:bb:ca:f9:a2:3d:57:39:10:98:
                    b9:e4:a7:d6:a5:f8:0d:40:e7:66:a3:71:19:66:ca:
                    fc:3a:4e:7e:a3:2c:b1:1e:16:91:3d:51:2b:26:60:
                    1c:ff:2d:87:2a:86:8c:ed:e2:85:5c:74:b7:51:8a:
                    48:4d:9e:63:7e:9b:05:ad:76:86:68:e1:37:42:f7:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:88:94:46:7C:5E:54:67:AD:00:E3:04:36:AF:7F:FE:3A:07:FF:0C
            X509v3 Authority Key Identifier:
                keyid:70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4f:47:75:96:74:48:be:a6:e9:8c:af:69:f6:16:26:63:3d:
         eb:fe:77:8e:ad:b9:cc:9a:e1:1b:bb:d1:db:53:85:c2:14:14:
         dd:5c:36:2b:8b:ae:8a:10:03:3f:d7:ba:ce:a5:7b:93:2b:4e:
         5b:ba:ae:ef:9f:40:36:a7:11:72:a7:93:44:c0:0e:fc:f7:7e:
         32:26:8a:74:f2:33:26:a8:b6:a3:07:92:a0:7c:b0:47:51:f7:
         d5:dc:e1:27:aa:c7:a4:f4:a4:7d:f7:46:1c:ef:a8:b7:34:9c:
         58:3c:51:37:3d:1f:5c:aa:38:c4:16:b2:8f:05:e9:1b:3d:40:
         95:68:e5:34:7f:52:ca:86:30:66:75:62:63:e4:33:df:5a:79:
         2a:50:5b:02:ca:92:b1:3c:91:e9:f3:b3:24:97:73:7e:2a:6d:
         55:12:c8:49:0c:f1:1d:d7:dc:82:59:60:e7:e8:c9:bc:de:af:
         d1:c3:eb:82:70:fb:da:9d:54:45:f0:8c:02:75:6d:51:13:fc:
         19:c8:0e:06:95:dc:91:e7:54:e7:b9:8a:f1:85:2a:2b:7b:5a:
         3f:c4:85:d2:5f:77:94:85:c7:56:34:a5:a4:d1:6e:50:ba:be:
         84:a1:3d:b9:e4:22:29:9a:52:96:09:00:37:19:e0:bc:29:bc:
         31:1c:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----