Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File:                     cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier:          WnEBys7Alo8UA37FEHjZok/OyuWTJnnffFfjR9Fl8uQ=
Subject key identifier:   35:97:83:B2:A7:C1:6B:3B:19:29:38:6D:F0:48:3A:06:F8:7B:72:E0
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer:       /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial:       01962E9964F59A50B4EAB1B7C79A2C258EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number:          05CD
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=)
                          2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: +7N0KOG8WXZT3MtDOG+4ScMuKzFpIAN5i3EBQLql0FI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:64:f5:9a:50:b4:ea:b1:b7:c7:9a:2c:25:8e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=359783b2a7c16b3b1929386df0483a06f87b72e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:f7:3a:b5:5c:e2:ce:90:5e:12:cc:59:24:
                    90:d5:a1:24:a6:be:8a:9f:cc:4e:80:31:10:21:f2:
                    0c:ea:44:25:fc:83:0d:0e:2b:c3:a3:e1:3c:5c:2b:
                    4b:4c:93:2a:ef:8f:f3:e0:63:34:d0:1f:7e:d4:65:
                    81:67:bc:94:6b:81:67:f7:26:d6:88:64:eb:a2:df:
                    41:08:2c:04:a8:cc:fe:3c:bf:af:57:e1:86:aa:c6:
                    7d:a4:cf:34:70:5b:17:7c:71:a0:98:43:f1:55:52:
                    fb:47:50:fc:d1:8b:c0:e4:4a:7a:b4:13:6a:9d:c0:
                    f1:03:2f:b0:1b:59:99:36:d2:ef:14:ea:ff:d4:de:
                    bd:0f:c3:8a:ad:c4:b2:59:a1:34:38:56:b9:71:90:
                    85:de:5a:ed:c9:d4:0b:fb:66:f4:7d:60:10:58:58:
                    f3:11:96:4d:2e:86:86:e9:e9:1c:73:39:a2:69:63:
                    ba:9b:88:0a:de:12:d6:c8:f3:90:f0:52:35:08:a2:
                    5a:6c:a0:94:b8:1b:1c:fb:dc:9a:6d:6b:7c:f4:93:
                    04:0b:43:b7:8a:63:06:d7:0e:28:b5:8f:0d:b3:fb:
                    0a:3e:1f:7b:ee:bc:55:93:e3:a4:90:39:4f:19:13:
                    9d:46:f1:4b:a3:e5:4a:5a:e4:80:dd:6b:9e:c5:3e:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:97:83:B2:A7:C1:6B:3B:19:29:38:6D:F0:48:3A:06:F8:7B:72:E0
            X509v3 Authority Key Identifier:
                keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:73:d9:0c:ec:74:f2:e5:e8:53:10:81:20:6d:a5:32:74:0f:
         5a:ed:4d:3f:8e:e7:7e:c9:e1:9f:d7:12:10:d1:3d:e6:ae:8d:
         96:8f:89:55:af:42:00:21:c0:19:72:d5:30:b2:9a:00:5c:95:
         6b:94:0e:ba:e8:fe:45:6c:21:44:46:34:b8:a8:33:34:93:3b:
         a9:19:66:a1:6d:bf:d2:c9:d9:40:24:4b:1c:37:66:4c:34:07:
         a4:87:a0:5f:b5:25:ce:40:93:40:31:76:a0:aa:95:54:8b:5e:
         a7:ac:34:de:de:b2:80:6e:88:4d:a8:59:ab:79:6d:a6:09:c7:
         ee:d1:f8:ef:5e:2c:a9:e8:95:38:39:42:7d:31:f9:c3:88:1b:
         c2:1d:cb:a6:a1:c6:7c:93:2c:90:8e:77:af:32:e3:68:22:db:
         58:0e:a1:d7:bc:6a:0b:b5:b7:90:4b:1d:01:d9:cb:18:b4:af:
         1c:04:56:7f:e8:83:f6:b2:a7:85:61:5a:5a:c3:8a:18:f3:99:
         7c:12:9e:18:c7:41:59:11:ce:87:1e:c3:80:85:0f:4f:e8:e2:
         f1:a7:07:f0:d6:63:93:59:de:9b:ae:9b:28:6e:df:1c:18:bc:
         31:10:a1:26:4e:bf:96:47:b2:89:14:be:6b:e3:11:ad:7e:cb:
         b9:fe:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----