Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File:                     670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier:          iG3Aq/dIabLzQD7ZG7H3AUaCX6ig7EKx63dY5C6AU5Q=
Subject key identifier:   93:66:0E:60:06:CB:B0:AF:AA:6B:99:AF:7C:5F:5A:6A:FA:79:8E:2E
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer:       /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial:       01962FAB19B915E98806EC9B1FA0D42D7C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number:          03DF
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: hLJq+FtZEltyvG+cD6DRtklsL5trRAhLIAVYUQUjKgM=)
                          2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:19:b9:15:e9:88:06:ec:9b:1f:a0:d4:2d:7c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=93660e6006cbb0afaa6b99af7c5f5a6afa798e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:05:d4:00:62:87:6b:02:93:a8:0d:0a:b3:a7:
                    05:19:29:44:f5:60:33:27:d2:7d:86:25:85:d1:7b:
                    09:44:a7:2f:0a:80:b9:8d:5a:be:64:c1:1e:31:fa:
                    0e:12:3e:0c:a0:27:bc:d0:33:be:d1:3c:1e:c2:82:
                    87:a7:c1:ef:f8:bb:74:0e:8a:25:b5:6f:45:ff:86:
                    6e:66:79:97:60:01:b2:b1:5c:f7:15:62:17:f1:c8:
                    0d:a3:52:65:79:55:22:ff:23:ef:a7:55:bd:49:39:
                    23:af:37:78:7c:f5:b2:e4:ce:db:2d:74:81:b3:2a:
                    59:00:66:f6:86:d3:b2:16:94:62:c5:a9:32:a4:3f:
                    3d:54:61:0c:66:69:7b:fd:f2:c0:96:65:67:66:a1:
                    c7:91:1e:f5:70:fc:dc:5d:59:30:40:ff:24:3d:63:
                    14:f3:26:ec:75:25:e6:b8:18:c7:41:3d:46:97:e3:
                    9e:27:af:2a:8c:39:ac:88:e6:fc:5f:bd:7c:fa:75:
                    a0:f2:84:4a:2c:1f:d4:70:df:56:4a:8d:63:22:e0:
                    f4:ce:c7:77:72:ca:56:b3:13:71:59:11:4f:23:0b:
                    c5:ce:92:4f:45:59:18:f3:e3:58:e0:69:35:39:73:
                    87:cc:b3:d9:fb:9b:72:cd:f0:78:0e:f7:f6:db:4c:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:66:0E:60:06:CB:B0:AF:AA:6B:99:AF:7C:5F:5A:6A:FA:79:8E:2E
            X509v3 Authority Key Identifier:
                keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:58:33:99:66:e3:64:e2:7f:4b:1a:98:21:2d:99:34:77:f2:
         ab:94:97:b9:49:71:b3:73:74:d7:55:ba:6d:66:e7:e5:c9:5a:
         36:10:e2:41:30:e2:f0:f0:94:70:17:4e:21:2e:6f:2b:67:09:
         b6:e6:80:5b:b3:51:5e:a5:63:41:12:74:e3:69:77:69:c8:74:
         9a:ab:e9:b3:57:a3:7f:eb:13:cf:97:91:35:13:84:03:88:8b:
         9b:64:91:d0:9a:e3:c0:01:86:d3:e8:db:9b:07:7d:64:ca:7b:
         30:85:23:02:5d:1e:9b:1f:f4:fe:3d:37:0e:44:6f:3e:13:2e:
         51:73:82:ab:83:3f:f1:14:57:1b:68:9b:26:9d:fa:9c:fd:b0:
         3a:67:56:fd:fb:c5:95:ce:56:c5:73:1b:52:b7:f3:22:06:cc:
         78:d2:52:47:18:06:7b:01:b7:d1:1c:ad:41:04:33:de:b5:d0:
         1e:5a:03:74:85:0d:36:40:fd:f2:9d:e3:93:09:4a:51:c3:26:
         cf:d8:4a:10:84:f8:80:83:d7:6f:8b:4b:73:ba:36:69:fa:11:
         04:72:52:d7:e4:1f:34:5c:42:3e:0b:ba:f0:8f:0f:a0:df:aa:
         74:66:75:14:d9:b2:79:e0:58:91:0a:08:f7:a9:fc:d2:dc:e7:
         38:a2:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----