Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File:                     cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier:          FL6WlZY5FfSyFon4SZMXREWU2dgXV4wLogBzELqpW4E=
Subject key identifier:   76:89:51:DC:88:C8:80:DA:8D:8A:63:DE:E2:C0:4E:58:23:DB:83:B4
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer:       /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial:       01962E998C9EC057DDA037CAF45F979DE6A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number:          1133
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: Pmv8pM8XqssRTrBIwYfMIrBu2co.roa (hash: v4JQsWfqUQF/aizb6/kkH5lzSW7tzkWIy4FJVzppxAI=)
                          2: RQjHthweEF9-820WAQ_PQzmnlEM.roa (hash: nBMPnR4O6VvmGYLIOUpQxt7mk0o9gXGO9uw/qf7b94A=)
                          3: Wwvcf_CdHRy8gkrOQZUQURuseiI.roa (hash: xkPyebxyoo94+1+QeBv80ewSsDDTwjJTGd/zo7NXJ5g=)
                          4: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: p9Kzs3xjbh+3YheIn4Ei8KXpOyPpccQ4PRgPTYRwypo=)
                          5: lVsIvIm2siK76Iwlc1JEpwaFSPI.roa (hash: TUnieu9UOgS3hw0oaMGHMZ2FiYRQqrhlAMNc6BYERoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8c:9e:c0:57:dd:a0:37:ca:f4:5f:97:9d:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=768951dc88c880da8d8a63dee2c04e5823db83b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:50:78:17:e7:10:05:5f:a0:80:1f:4d:76:
                    a0:c6:08:65:ef:35:e6:43:a1:cd:e9:d1:41:92:b3:
                    e6:71:2e:ce:33:f2:e1:1a:2f:b9:e9:3e:86:ba:2c:
                    ce:f2:4e:1c:40:be:cd:fc:18:7f:1d:c3:1a:ea:f7:
                    d8:66:12:3e:9f:5f:bb:ce:65:37:05:05:68:a9:02:
                    47:40:58:fd:93:fe:6c:74:36:de:ec:77:6c:d4:87:
                    5d:73:8e:a0:87:b5:ab:cb:c9:3a:c1:2d:17:86:75:
                    38:5b:e1:f2:c4:c8:fc:85:5d:e0:38:ba:fe:da:d5:
                    4a:85:c1:60:90:ec:b5:d4:c2:ad:73:a8:b5:58:94:
                    2b:6b:35:c7:8b:62:11:73:97:01:df:86:35:2f:b7:
                    de:a9:26:18:5d:0b:88:90:e7:2d:43:08:88:0a:19:
                    09:74:1f:44:80:c9:f8:bb:22:74:84:06:8c:fe:8d:
                    0d:af:9e:db:86:3c:a4:38:c2:23:2d:d0:16:6d:32:
                    f7:86:8f:b9:ce:27:c7:4f:2e:9b:db:b4:8f:91:a7:
                    e2:8b:fa:e1:c6:e3:b7:5d:7f:19:0a:b0:92:f6:ce:
                    02:a1:13:eb:57:02:02:b8:52:76:ef:cd:0d:6d:e1:
                    72:7a:9b:70:3c:c2:3a:eb:76:db:74:ae:0d:e8:6c:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:89:51:DC:88:C8:80:DA:8D:8A:63:DE:E2:C0:4E:58:23:DB:83:B4
            X509v3 Authority Key Identifier:
                keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bc:13:29:59:d2:72:9c:c7:1a:30:c5:6e:f6:63:34:27:e1:
         a9:06:7f:42:6b:b7:89:e4:d3:e2:7e:7e:ef:48:09:e8:98:c9:
         db:f0:57:64:26:f7:98:83:51:e1:9f:45:f0:3c:cb:fd:08:2c:
         27:bd:1c:50:5e:39:91:3c:00:5c:85:c7:91:13:52:86:a0:e1:
         6b:1d:50:90:ac:88:23:39:b4:a1:8a:75:52:9c:3f:99:0b:47:
         02:29:5e:cd:22:27:b3:3b:ce:4e:50:fd:51:e6:ce:a6:d7:9c:
         cb:77:66:4e:51:a1:04:04:38:b9:65:2a:70:10:e2:cf:2a:b0:
         30:97:af:e1:f8:67:43:0e:b3:91:a1:cd:ec:37:c6:ba:a5:9b:
         15:65:4d:07:c4:c2:73:1a:6b:28:36:c5:75:77:56:6e:fa:66:
         6d:5c:8c:99:9c:c5:28:07:36:46:12:d2:8a:04:59:a8:ce:8e:
         af:96:45:34:9e:0b:2c:8a:7a:95:31:8b:d4:9c:b1:7f:75:27:
         57:6c:62:cd:b6:7f:c8:14:97:11:c0:69:80:4d:dd:62:60:63:
         ce:79:a0:10:28:63:ad:44:be:8d:61:95:7b:73:be:7a:71:c0:
         94:8a:ea:9d:d0:5d:26:77:96:8a:35:91:dc:8b:75:8d:fc:42:
         2f:4f:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----