Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File:                     CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier:          iITaJPosOkyE/v0WuSpn8xLj7C8D+kIP49d1J8sqtqk=
Subject key identifier:   70:DE:F2:70:D2:30:1F:29:0A:DA:66:24:7A:42:13:C9:CC:C9:64:C3
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer:       /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial:       01962DF395C36C9F96FB63093A1C0C63016B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: +k15yjrSB9NhTjiZGCw8pNNg1k4250ZGkv/yb5kDwoA=)
                          2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:95:c3:6c:9f:96:fb:63:09:3a:1c:0c:63:01:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=70def270d2301f290ada66247a4213c9ccc964c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:bb:46:da:a1:32:f7:83:fb:b0:e0:58:a5:
                    53:c6:70:f3:6e:40:1a:04:db:04:58:35:ad:c5:23:
                    f5:2c:38:00:7d:57:bf:03:42:2d:99:03:2a:90:d7:
                    78:b2:21:e4:50:45:40:50:ed:a9:53:1a:6f:4f:ef:
                    0b:c3:49:de:29:20:19:30:54:2e:9b:b4:29:60:59:
                    08:93:34:73:b8:f4:d6:22:58:d2:67:96:9e:53:a2:
                    7f:72:92:a2:30:e0:c5:3f:5e:f1:3f:af:11:d7:1e:
                    2b:15:47:46:44:b1:a0:0c:e1:87:bc:d3:36:a5:92:
                    32:13:32:96:56:01:e5:10:b3:14:20:98:df:06:36:
                    27:c7:f9:68:61:f1:f6:39:00:4d:f9:ba:96:02:aa:
                    d5:5c:c6:90:06:6a:66:fd:34:ab:d3:0f:24:58:ec:
                    09:c3:8e:32:f2:dc:7f:c1:d0:53:c6:7c:ed:17:03:
                    af:02:44:f4:c2:7d:8e:ea:a8:c1:b6:fb:ab:07:41:
                    3c:01:80:ca:29:b2:ee:4d:29:71:dc:1e:34:79:a3:
                    81:b5:1e:8d:16:45:f8:5d:e4:90:79:75:b6:2b:c9:
                    ab:6a:6f:6c:c8:fb:1b:36:9d:c5:ad:76:65:93:0a:
                    80:65:43:f2:12:50:2e:03:2b:83:58:b9:2e:28:5f:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DE:F2:70:D2:30:1F:29:0A:DA:66:24:7A:42:13:C9:CC:C9:64:C3
            X509v3 Authority Key Identifier:
                keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:00:f2:98:53:b5:56:54:40:50:e9:9a:50:0b:fe:1d:a3:
         28:54:68:2b:69:e7:19:bf:e5:51:b7:df:64:d2:a7:24:34:37:
         c3:76:cb:99:f6:94:e4:ad:1f:ca:37:5b:42:c3:73:17:ad:37:
         c7:a1:79:88:f8:85:2b:64:9d:41:8e:c4:5e:09:eb:fd:2f:23:
         03:2e:13:4f:93:2b:44:fe:1d:3b:a1:8e:f8:89:a0:64:49:c8:
         14:fc:74:b6:4f:5c:99:2b:5a:47:a1:54:e4:e9:d4:e9:78:54:
         6f:85:0f:43:19:fd:42:fa:ac:e0:dc:5f:49:55:fa:33:3e:4d:
         1f:0f:6d:91:ca:19:31:44:48:78:5c:11:3a:13:72:7b:55:70:
         4b:21:87:d3:e5:86:ac:20:74:20:e1:7b:c6:05:b0:7f:f3:4d:
         85:9c:aa:ed:bc:7d:fb:8d:3b:62:9e:42:7b:bb:d6:0c:4b:82:
         6f:f5:4d:86:51:b2:ab:2a:c3:e3:4b:fc:4e:d1:3f:40:7c:bb:
         fd:f6:2e:3c:a9:23:a4:c4:9f:07:ec:dc:db:93:5f:13:74:0c:
         37:db:5b:ae:2c:39:13:31:ad:a3:8a:5d:22:7e:3a:2b:c3:0e:
         d0:d3:fd:46:8a:a5:b2:1b:9e:65:ae:5f:55:d6:67:1d:17:56:
         76:d2:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----