Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File:                     cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier:          Hy1/qn9eM/F5oel3KH6WKJs8KxpwbQO5ioHECr6EA44=
Subject key identifier:   99:F8:AA:02:51:E2:3B:E8:6E:75:FE:7B:D8:E0:33:F4:23:CC:2B:36
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer:       /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial:       01962E61923326E2DC958BCF783B185F3EF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
                          2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: 3avZ3b7RwRMR5/pakIw6QKWyvaMb0+A2r/cEbtnNOqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:92:33:26:e2:dc:95:8b:cf:78:3b:18:5f:3e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=99f8aa0251e23be86e75fe7bd8e033f423cc2b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:cb:b0:d9:f6:f2:ab:77:bf:93:9b:03:d3:
                    db:72:ea:f1:76:9a:45:ad:5f:a2:c8:b4:68:40:c0:
                    7e:08:82:cb:bf:60:d9:9a:c6:5e:d3:4d:94:23:39:
                    5a:9a:8f:49:b0:10:96:cb:8e:bc:ee:45:b1:71:d0:
                    a5:a9:f1:0d:05:07:02:6b:7d:7b:53:fa:64:69:95:
                    39:c2:9e:f9:2c:d1:bf:35:58:8a:9a:7e:fc:05:13:
                    f0:59:b7:a9:c0:aa:70:3e:07:59:2f:f7:48:68:8a:
                    52:c6:8c:95:51:cf:60:fa:3a:16:53:ca:c2:08:e2:
                    1c:7d:1f:14:d1:ef:2a:29:bd:5d:a7:d0:56:6e:da:
                    c4:61:99:f9:eb:a3:01:3a:04:e3:a0:e1:f8:bd:18:
                    ba:b8:2e:6d:1d:84:62:10:93:3b:1e:c2:cf:af:6f:
                    9c:0f:3a:49:40:63:f8:2c:44:de:fc:1b:e4:c3:8f:
                    80:3d:e2:f1:69:88:9e:72:64:b2:1a:6d:73:78:db:
                    a4:47:03:79:dd:1c:95:71:1d:58:60:db:4b:d0:07:
                    a0:c0:30:be:e9:d4:60:c5:8f:a0:a3:f0:b3:06:1a:
                    77:44:4d:3a:cd:41:7a:54:87:ab:56:d9:21:d4:ec:
                    ec:9b:fe:f4:c6:67:85:3f:c3:eb:aa:f4:f3:da:91:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F8:AA:02:51:E2:3B:E8:6E:75:FE:7B:D8:E0:33:F4:23:CC:2B:36
            X509v3 Authority Key Identifier:
                keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4b:df:90:fc:d7:42:83:b1:cb:00:d6:a2:8c:71:c6:56:56:
         c6:80:6b:9d:21:43:1b:d6:70:87:33:09:5b:f4:be:7a:ed:18:
         43:ec:9b:bc:69:1c:b7:39:37:72:ee:a7:ee:51:f6:50:37:41:
         e4:8c:9c:34:86:ea:ff:18:fc:50:1f:78:f8:d4:44:9f:84:b9:
         d2:8a:fc:a0:ec:cf:53:f9:ec:5c:68:91:89:5b:ae:de:74:45:
         6c:15:2a:02:a7:8a:3c:d9:1f:0f:77:78:66:f4:e6:b1:24:eb:
         fc:a5:d1:d8:2e:0a:43:ee:b2:c4:65:9a:cf:6d:9a:b0:8b:5b:
         be:ec:8b:c4:23:ce:11:7a:c7:d9:f9:8f:ee:8d:f7:94:ca:97:
         55:f4:1e:7f:1e:f7:4d:2c:3a:f5:20:3d:7e:ea:df:97:7d:e8:
         3f:46:25:c9:55:76:55:1e:8a:26:a6:21:33:4f:0d:c9:fa:3c:
         3b:07:5f:d1:64:02:27:21:80:3b:d8:4d:bc:16:e0:41:62:11:
         4d:a3:30:85:e6:c5:7e:27:7e:b6:d0:88:0b:ec:69:18:fd:82:
         1c:aa:57:45:ce:c2:aa:ae:f4:1c:37:fa:f0:be:b1:31:33:1a:
         83:2b:36:c7:a8:c3:02:31:75:b3:ea:f6:0e:84:da:ff:66:2e:
         19:58:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----