Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
File:                     cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json)
Hash identifier:          e1cMnW/aQebF0iI7RxQmDv4PcSIAf4wHOB86lTXjwSU=
Subject key identifier:   F8:57:62:46:2C:4C:EC:05:95:98:22:4B:B9:91:33:9B:71:D4:BB:77
Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D
Certificate issuer:       /CN=70379a6713e79e598d9feaa66dca169188e0218d
Certificate serial:       01962DF3E00E90DF83F0A7EB31313E4EEA4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft
Manifest number:          0CEE
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: 3iYObpu4qYV6s1miUrkp16giZEcpY44dapMZ+H/lVbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e0:0e:90:df:83:f0:a7:eb:31:31:3e:4e:ea:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=f85762462c4cec059598224bb991339b71d4bb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:5c:f4:f0:f9:00:4f:fd:48:c3:6f:6c:18:
                    ad:75:f5:56:b0:09:11:f8:70:b2:43:03:5b:54:a0:
                    7d:65:5f:3c:1d:f9:f1:1e:df:95:4e:27:ad:74:c3:
                    7a:1e:d3:14:9a:d0:1d:20:7a:cf:da:9c:93:b5:bd:
                    07:e3:42:0f:9c:29:bc:a8:e5:14:dd:fd:7e:61:65:
                    7c:a7:27:02:2a:41:e9:a1:85:1a:77:39:6a:9c:48:
                    54:97:b7:c4:bc:be:44:61:e7:da:d4:fc:6f:58:9b:
                    fb:54:18:bb:c9:df:41:b5:b7:ed:3b:00:a4:88:61:
                    dc:4f:b4:09:93:54:30:b5:aa:28:cb:2e:35:4b:be:
                    bd:da:45:bb:9d:4e:d3:8c:0f:2f:b5:f7:de:2f:13:
                    3c:ba:68:c1:48:f0:74:05:07:cb:79:9d:2d:a1:41:
                    0e:d2:8a:22:a4:7b:e7:99:03:bd:cd:30:07:16:73:
                    ab:ae:ff:6a:4f:9d:28:fb:8d:c7:d1:39:fd:9f:8a:
                    3f:1b:10:fe:f8:ce:5f:fa:14:e7:4e:37:4f:f6:e7:
                    12:ee:b9:7d:85:8b:5e:2b:92:a2:4d:4b:c1:c0:07:
                    9a:05:2c:8a:59:7a:d9:38:48:09:65:dd:38:09:90:
                    5c:f1:07:4f:9f:d6:36:7d:bf:e2:6d:74:c8:bf:2e:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:57:62:46:2C:4C:EC:05:95:98:22:4B:B9:91:33:9B:71:D4:BB:77
            X509v3 Authority Key Identifier:
                keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:66:fa:c3:90:27:e3:db:70:d6:7c:08:8c:18:7e:29:8d:
         57:16:02:70:f4:62:36:dc:97:9f:21:c1:6e:18:c0:0e:27:51:
         47:58:33:e6:56:98:8e:a7:84:5a:9d:0c:03:af:84:f8:eb:4d:
         92:3b:65:98:20:66:2d:c3:0b:93:e7:25:26:71:80:1a:66:3f:
         fe:ed:4a:18:cb:1a:f3:8e:6f:79:bc:83:bf:00:f5:c2:df:db:
         11:db:7f:15:8a:84:ea:68:88:be:83:05:9b:2b:9b:90:6b:02:
         4a:db:61:9b:a6:9b:6d:4a:35:32:d5:1c:71:8c:c5:77:54:a2:
         6e:06:af:91:69:85:16:05:40:1e:b5:da:7b:0e:c9:73:52:9e:
         47:1b:d7:6f:ea:e7:7d:ed:9f:48:f9:d0:6f:0a:b5:c9:d3:63:
         d3:3d:28:fa:03:c4:9a:05:ae:e5:60:8b:b2:99:9c:1f:ba:8e:
         c8:5f:06:82:1c:98:52:66:c5:85:41:21:0f:ec:bf:6e:d3:d4:
         3b:fe:e6:5d:d0:1c:fb:e4:7c:6d:75:c6:9f:8d:d7:ed:45:e4:
         59:bf:29:72:c1:cf:10:b6:31:e6:3d:3e:44:b3:2b:13:3e:c0:
         e8:13:20:0c:15:68:ba:cd:6a:54:03:b5:ec:31:50:f1:5a:ac:
         b4:06:32:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----