Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File:                     70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier:          ebxDgLFqWZh6vtnj0tqF5sAXYCiBjFL+CHWG5Jq0tyg=
Subject key identifier:   0A:BB:67:7F:79:6D:EA:F8:E0:97:13:0E:79:9C:49:50:23:33:A9:55
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer:       /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial:       01962DF41B141D75C08F3B470B0B8135C3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number:          0A5F
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: 3ycO0xAhBk1gRAIINU8IJRjvtqJuCvqhoOStDR80D5Q=)
                          2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1b:14:1d:75:c0:8f:3b:47:0b:0b:81:35:c3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=0abb677f796deaf8e097130e799c49502333a955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:5a:49:1a:32:a3:d4:99:06:50:e7:91:d5:
                    8b:d6:30:31:62:40:5d:9b:13:db:0b:87:ec:d1:bb:
                    86:e2:91:58:e9:7b:2b:de:4a:28:6f:fe:96:49:bd:
                    75:f2:c4:0d:74:ff:64:c2:f4:6e:d2:16:af:fc:27:
                    d0:1d:14:61:a9:de:ad:47:37:f7:63:38:a7:cd:09:
                    70:6f:ca:29:2e:a1:8d:37:0a:04:2e:c5:19:49:49:
                    17:f1:9c:d7:0b:8b:6d:89:56:46:66:d7:f3:c7:db:
                    19:d4:ff:c2:3e:8c:79:18:4b:0c:b8:ca:95:39:0a:
                    48:b4:b7:95:e9:3d:d4:da:df:df:3b:84:db:82:1a:
                    3a:ca:82:e5:a8:af:bd:9a:f4:01:5b:8c:24:ea:e8:
                    19:1a:85:98:67:4a:49:0f:5c:88:c0:bf:30:c9:4d:
                    3f:b5:df:f0:10:f6:92:a3:48:07:dc:31:55:9c:17:
                    c3:42:bc:ba:7e:2b:fa:63:04:b9:52:ea:c2:52:bd:
                    81:11:87:bc:e1:c5:fb:12:5f:60:fe:31:50:65:ec:
                    00:d0:67:80:bf:6a:3d:8f:52:90:99:a5:c0:ef:15:
                    f7:db:8c:c8:70:03:54:02:49:4f:ae:29:fe:bf:42:
                    60:5e:e1:0a:cc:67:81:b6:ae:3a:5d:d5:c8:46:73:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:67:7F:79:6D:EA:F8:E0:97:13:0E:79:9C:49:50:23:33:A9:55
            X509v3 Authority Key Identifier:
                keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:71:6d:7e:4d:bb:a4:b7:f5:1e:57:f0:86:04:a3:76:2a:0e:
         9f:01:d6:c8:e1:1c:f1:98:2d:67:14:e8:7b:e4:47:9c:a0:0a:
         c5:84:e6:81:4a:bc:62:41:7d:42:dd:b8:b9:00:7b:99:dd:2e:
         c0:8c:c0:ce:ba:ad:e6:61:f5:4b:c7:d4:fc:a2:01:2f:a5:dd:
         75:1f:83:d5:e2:4c:54:23:87:e6:57:a3:2c:07:38:f8:de:11:
         42:cd:ad:56:fa:37:0a:2a:03:89:44:46:70:c2:d8:57:e2:e4:
         5e:ab:d6:b7:cd:45:2e:b3:f6:c3:94:73:d6:79:40:99:3a:14:
         50:bc:d3:c8:7f:ba:18:55:da:8f:25:2b:38:d2:26:35:88:b5:
         04:a2:d7:62:ea:34:42:3c:bb:52:90:2a:1f:d5:5f:de:e1:65:
         0c:f6:50:f7:86:89:3c:43:28:eb:16:cb:63:68:30:31:3d:5f:
         e2:5c:ab:65:b5:1e:77:95:c9:db:89:2e:cc:ee:d7:0f:c0:a4:
         52:87:70:c5:38:a8:82:97:71:35:6c:e4:2f:67:de:1f:22:6a:
         9a:6a:aa:b9:75:2f:28:21:96:bd:ae:5e:da:21:16:f7:54:b4:
         e2:38:b2:a4:ed:fd:82:a7:f0:81:3e:9e:94:9c:24:66:a2:77:
         0d:b8:a5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----