Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File:                     70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier:          0YQv9CytAODhsA6+b79Rk5bUeKa2MrybcKq+jPx9lp0=
Subject key identifier:   9D:93:E4:EB:7E:4B:5C:F4:9B:09:69:3D:64:A9:F8:C1:4D:21:A6:B6
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer:       /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial:       01962E999561EEEA87CA7264259A9FE0EA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: Q9bur9naMG8oMTB5BUwFif7imV+usASYUAQQOirh9+g=)
                          2: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (hash: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:61:ee:ea:87:ca:72:64:25:9a:9f:e0:ea:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=9d93e4eb7e4b5cf49b09693d64a9f8c14d21a6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:5f:cb:90:92:74:a2:31:56:c1:c2:57:3d:
                    84:fd:ef:34:c6:e4:42:fa:d8:00:d8:14:ab:a8:19:
                    ab:3a:72:da:e5:30:77:5e:ec:39:fd:f3:05:8a:c4:
                    47:c4:72:eb:8a:4f:98:9b:a4:28:59:c7:3e:72:68:
                    a4:df:f7:96:91:50:02:1f:a1:9e:8f:6e:db:ff:f7:
                    11:cc:9a:8f:f3:c5:29:d7:e7:de:79:1c:d6:2f:7d:
                    22:0c:50:2e:58:de:1f:34:f6:6d:9f:83:5c:b3:1a:
                    d7:dc:40:a6:60:7f:24:15:98:ba:8b:02:be:81:b7:
                    2f:26:cc:fc:44:5f:72:61:64:63:12:fc:e8:85:0d:
                    8d:79:6f:28:4f:69:70:b1:82:7d:78:1f:6a:ff:7a:
                    7f:51:9d:04:b1:22:74:e1:48:70:a8:6a:7e:e8:22:
                    8b:f9:f7:4d:8d:c7:bf:c9:b9:9a:ca:88:85:eb:73:
                    26:ea:93:87:b7:90:de:31:bb:21:6b:77:26:26:43:
                    93:4e:8a:2a:1d:6f:ce:a1:e4:e1:6e:26:52:c3:e6:
                    f2:ae:8e:eb:75:9b:93:82:0c:6d:70:5b:62:93:53:
                    31:41:c9:47:f2:60:7f:0a:9b:bc:98:ab:19:95:13:
                    42:04:e3:24:cb:6b:ad:12:dc:01:e8:30:ae:dd:ce:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:E4:EB:7E:4B:5C:F4:9B:09:69:3D:64:A9:F8:C1:4D:21:A6:B6
            X509v3 Authority Key Identifier:
                keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:c2:1a:83:b9:2e:e8:17:eb:9b:1b:ac:f2:e6:b9:0a:a9:
         40:9b:e8:47:cf:a5:7b:06:51:d2:51:1a:23:a0:c4:15:aa:6c:
         a2:1a:bc:ee:34:22:89:84:08:35:5d:4c:34:94:0b:d1:2f:82:
         cc:aa:48:93:d6:e9:f5:13:aa:52:bf:41:cb:7d:44:bb:ff:00:
         9e:3d:68:b1:d9:e4:74:38:23:d9:77:f4:80:b2:c0:ec:c1:9d:
         33:9f:f6:e0:01:ff:04:25:cb:18:16:1a:1c:79:ea:5b:c8:59:
         1a:e6:96:42:c4:61:8e:32:0d:9d:54:b7:c4:3f:ef:43:ef:95:
         81:79:0e:72:94:eb:94:aa:bd:6e:c8:7a:c3:da:6e:7c:fd:59:
         38:1d:9a:6e:00:82:f2:81:5c:3a:57:a9:4e:f6:81:4e:ef:10:
         3c:df:e4:8e:fb:53:98:a0:d8:40:da:04:06:46:70:0c:e1:c2:
         1e:2b:e1:af:f7:4d:95:e3:2b:0b:3a:88:ed:ec:49:a7:6c:a0:
         6f:0f:78:dc:89:e9:52:35:26:f2:85:83:01:e7:8f:a6:db:00:
         4b:58:c2:3d:bb:36:8d:0f:3e:ee:b7:df:49:00:33:8d:2a:9b:
         04:89:37:cb:8b:26:f7:1a:cc:ab:94:26:8a:7f:26:37:68:58:
         06:ea:03:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----