Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File:                     cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier:          8y2SQ+QXeMWNbgq9bsrFa6o0qG0nLNvSr1v1EM6+pLc=
Subject key identifier:   2F:C4:88:2C:4C:83:A6:6D:59:4E:FC:87:12:F7:DB:BE:54:34:11:FB
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer:       /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial:       01962F3DDED352529B5FA03BBB86005D1A8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number:          0C30
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: Mep_oW6oSHpfM-EqADqLPxvIqFs.roa (hash: 6a8TBTQQpOa0vAb9MxuUWCM81ytCduZcl8Sm4ouPZoY=)
                          2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: qACVmsF4nzunNBCn5DDGK1TX2kHfzcgamb25IKnPeIw=)
                          3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
                          4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
                          5: wH7YjQGC2kPbicIfKx1K6Iv4sBs.roa (hash: YR8jN4lQpTriIrl6/luq+DdE8e4Qj31ZZIIQj98pQoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:de:d3:52:52:9b:5f:a0:3b:bb:86:00:5d:1a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=2fc4882c4c83a66d594efc8712f7dbbe543411fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:53:5e:78:61:cf:5c:e7:60:3a:de:76:f2:
                    71:c3:a3:99:09:b7:07:3e:7b:4a:b3:28:06:b8:d4:
                    16:10:a0:11:b7:92:79:b6:cf:34:5a:c9:5b:be:48:
                    0c:c2:0c:ec:90:50:8e:68:7d:8a:3e:48:7c:3e:8f:
                    3e:11:72:ec:52:c6:c1:e4:54:fa:7f:f2:f9:87:8f:
                    5e:f1:d0:1c:ae:f2:f4:45:7f:6c:b7:c2:c5:fa:09:
                    18:7c:3b:b9:d4:48:5e:8f:f7:2e:31:b4:5d:13:92:
                    52:15:11:e0:f9:07:05:d8:a7:51:b4:f4:f4:b3:24:
                    cb:54:d4:5d:c7:88:c2:a6:b4:ec:cb:b1:f1:71:8c:
                    ce:6d:1f:37:0e:9b:05:43:03:d6:3b:79:9d:ea:9a:
                    dd:e6:64:b0:b2:37:2e:62:99:bf:e7:b5:01:73:93:
                    c9:f9:3f:96:46:c2:3f:28:df:20:c0:77:45:47:ae:
                    ae:1e:d3:6e:c3:8a:21:db:20:c2:5e:2f:b6:fe:13:
                    12:d9:f0:95:5b:cd:71:ce:cd:0f:5e:8e:a9:9e:82:
                    68:36:2b:49:6f:dd:75:21:cf:8f:cf:73:06:26:40:
                    57:6d:3b:21:1f:79:79:45:e3:22:f0:8f:05:cb:05:
                    d6:ca:ba:71:c8:4c:80:34:8e:7e:10:b0:96:2b:f5:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:88:2C:4C:83:A6:6D:59:4E:FC:87:12:F7:DB:BE:54:34:11:FB
            X509v3 Authority Key Identifier:
                keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:be:a5:4d:81:06:6f:e7:2d:92:80:ba:55:e5:a9:9b:82:c0:
         35:12:8a:48:62:cb:4e:c3:83:21:ee:44:db:83:85:41:8c:75:
         21:67:7f:e9:24:87:c3:b6:7d:04:4b:20:4a:95:cf:9d:54:83:
         5d:85:84:5e:bc:d5:53:a1:6c:2b:7c:c7:23:da:cb:85:0e:24:
         bf:f4:75:fc:ac:b8:0c:0e:6b:4a:6b:73:9e:b6:52:66:7f:01:
         a5:12:78:da:7c:20:c9:6c:b0:05:cb:58:09:17:c5:5e:35:3e:
         c9:97:6a:51:10:58:a3:a0:58:1b:22:98:0d:69:24:e2:88:52:
         37:9c:68:7d:db:8b:7e:aa:f3:54:d3:88:8c:0c:37:29:57:40:
         cf:19:a7:2f:59:75:f3:db:23:28:dc:0d:e2:dd:8d:43:0a:eb:
         df:a7:ed:66:66:0c:ff:e9:ca:39:3d:81:10:49:f9:a2:3f:71:
         b7:70:35:7d:98:43:75:9d:52:ce:37:62:6f:77:30:7e:89:19:
         35:6d:c8:57:17:55:dd:c7:30:75:e8:3a:a0:60:47:0c:2f:a7:
         51:77:ca:9e:9d:b4:71:08:c8:f6:f1:0d:3d:de:3c:2b:5e:a0:
         86:eb:be:6c:ac:48:2f:05:3e:a4:18:fb:e1:5a:eb:f2:6f:3a:
         c1:93:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----