Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File:                     cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier:          9pnj6E+6A/7pi4ghDnoE5b0e+UGvcpZgzFAWtNSUK7Q=
Subject key identifier:   12:AE:F5:37:66:DD:6B:C2:0D:A4:1C:B1:43:19:65:E6:BE:DC:BE:21
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer:       /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial:       01962DF3CC9FF46E3564F5FFF004E77817E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
                          2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
                          3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: eCOQ7ebIrD0bAAPmvltsUU9YntCOxto7W9OUx8QpkBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cc:9f:f4:6e:35:64:f5:ff:f0:04:e7:78:17:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=12aef53766dd6bc20da41cb1431965e6bedcbe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e5:e9:4a:0b:a0:43:17:7f:a9:96:d0:95:21:
                    28:1a:39:b5:2e:fa:34:ca:ec:54:61:fa:89:61:7d:
                    5b:e6:fb:9c:84:c6:35:7f:9e:a9:28:ea:2b:9f:b9:
                    d8:0f:89:7a:43:21:06:79:14:2d:9d:7b:92:3c:84:
                    ce:bc:24:80:4c:4c:ba:ab:32:2d:2e:7d:3a:aa:3d:
                    88:3f:98:b3:a0:f4:d2:ff:eb:7c:9e:32:9a:06:22:
                    a8:ba:08:54:50:e9:26:48:b8:bd:dc:7d:0c:2f:b6:
                    50:37:59:27:2d:44:39:fc:c1:8c:4c:36:c4:a0:f8:
                    ad:ae:23:06:e6:7e:bd:30:f6:24:54:9f:e1:ce:0a:
                    87:ab:24:cd:5f:2f:13:52:51:a8:1c:58:a6:98:a7:
                    a1:1c:01:17:b5:96:51:0b:40:d5:1f:8b:84:46:a6:
                    4e:47:aa:2c:ea:f0:19:27:48:d2:99:74:84:bf:c6:
                    be:5f:10:4d:e4:0c:e2:3f:fb:dc:cc:85:92:69:9b:
                    74:32:83:6d:8f:05:4b:30:1f:a4:98:80:87:c2:ef:
                    40:8f:e7:98:df:32:92:ee:c5:4d:10:ff:ad:a5:b5:
                    8e:62:50:1a:2c:51:a7:dc:cf:49:8f:9f:b4:7b:f0:
                    24:9e:e6:f0:12:8c:3a:8b:b1:e1:da:b9:81:d9:34:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:F5:37:66:DD:6B:C2:0D:A4:1C:B1:43:19:65:E6:BE:DC:BE:21
            X509v3 Authority Key Identifier:
                keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:4e:fa:fc:5c:f3:e1:50:48:91:36:18:62:fb:5c:e3:3b:
         eb:ac:1c:93:1c:68:84:fd:f1:4c:ec:e6:d4:e4:7a:33:42:45:
         e7:23:dc:5e:95:b4:e2:2d:8f:b7:bc:0f:cb:d1:ba:04:bc:b9:
         91:38:93:00:83:73:1e:d8:2d:28:20:a3:07:f6:fe:6a:00:87:
         69:7b:e6:8d:9e:00:f9:1d:f8:e3:2d:86:9d:72:9b:2e:45:9e:
         21:4d:0f:b8:c3:04:d2:52:2f:10:77:d6:62:5e:2a:7f:ee:48:
         4c:dc:3d:31:5f:1c:0f:47:89:74:50:e3:46:a5:7c:61:0c:79:
         35:14:d0:4c:27:29:d0:99:e5:58:e6:59:5c:a8:03:ae:32:9f:
         dc:19:e3:9b:f2:95:19:73:f1:3c:af:3e:c6:d6:d5:ea:61:21:
         46:51:27:f7:26:b9:09:96:29:96:0d:ea:35:70:c6:8a:86:a1:
         84:0b:3a:d2:90:92:ec:c0:ef:82:1b:83:67:1a:07:4e:ff:4b:
         1a:a1:64:38:de:8f:3b:d0:4b:29:3e:d4:b7:d6:8e:2b:7b:29:
         c7:5b:48:4a:01:37:ba:3e:00:45:b4:4c:bd:b7:18:0f:ea:3f:
         18:cb:6a:ad:89:79:37:b3:fe:b7:90:ce:ad:78:96:bd:1e:15:
         e3:e6:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----