Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
File:                     cIEc4M5zU_A-3py3ylEWJV-_t70.mft (raw, json)
Hash identifier:          sJ7B2F3jFaHVC69kz/FAXO7OubYKzEoZqeorFvqRM+8=
Subject key identifier:   E8:AF:B4:53:6D:9B:93:C4:3D:CB:67:3B:8B:3C:B1:63:A8:FF:62:58
Authority key identifier: 70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
Certificate issuer:       /CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Certificate serial:       01962E993FF2FF34F636EA7F15CA29B50EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
Manifest number:          09A3
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: 1-VdOr1FUP7HNxfqfhOHB4LyOJ2Y.roa (hash: QB9LyYahw6voR06UwItPSAyVLMKgN6beiVidIvS+Rxs=)
                          2: cIEc4M5zU_A-3py3ylEWJV-_t70.crl (hash: ucHatcot0ABSLK++v6e8Djr2NMhBbW2+9sS+vNi0hoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3f:f2:ff:34:f6:36:ea:7f:15:ca:29:b5:0e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=e8afb4536d9b93c43dcb673b8b3cb163a8ff6258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:fb:fa:5f:4b:f9:56:8b:cd:eb:ea:4f:26:
                    08:52:59:d3:98:af:7d:e6:a3:46:46:cc:a3:a5:10:
                    00:19:24:a4:e2:b0:64:ec:1c:69:9e:35:32:76:5e:
                    18:87:40:1b:4c:fe:b2:93:6d:27:a3:f0:b0:c1:eb:
                    2c:e2:34:0d:1b:09:1f:9c:07:54:4b:42:ab:f5:03:
                    a4:de:e4:bb:f6:e5:e3:14:b8:86:6b:3f:a6:22:7c:
                    d2:75:cf:2c:d7:75:2c:28:4c:08:1a:c1:0f:d7:c6:
                    fb:3f:a6:86:69:48:51:ac:d4:79:0b:8e:4f:4a:f9:
                    79:0b:94:8d:53:d1:4a:e7:a7:b1:f3:bc:27:5a:60:
                    f0:9b:df:03:70:91:4a:96:09:32:2b:b0:11:40:16:
                    97:73:1a:b2:d3:c4:84:29:43:90:56:4c:87:d1:22:
                    8c:cb:2c:e6:ea:53:89:85:6f:c9:11:0f:c7:ec:d0:
                    b9:ff:d0:bb:6f:bb:dd:8a:ed:56:30:a7:31:0d:bf:
                    f7:4b:48:ea:9a:16:bd:e9:da:ea:32:4c:25:b4:00:
                    1f:99:1d:5f:ad:ac:7f:ba:07:5f:34:94:aa:02:81:
                    f9:bf:73:19:66:ae:34:0f:ab:68:fe:8e:1f:c7:14:
                    73:d7:e6:4b:91:48:31:ed:67:6e:0c:85:b8:c6:3a:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AF:B4:53:6D:9B:93:C4:3D:CB:67:3B:8B:3C:B1:63:A8:FF:62:58
            X509v3 Authority Key Identifier:
                keyid:70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:01:cd:41:33:61:c9:03:49:ad:96:5d:90:1e:b9:3d:7c:1c:
         bb:6d:05:da:14:fe:1e:f5:4f:58:2b:92:3e:58:55:77:c8:9a:
         b4:a7:f3:af:28:ba:44:1c:56:5d:bc:a9:02:60:87:30:44:79:
         7c:77:18:e7:99:8d:9e:23:35:3a:fa:7c:a8:3b:65:13:b9:29:
         da:37:be:a2:c4:b6:da:dc:99:c0:b1:d8:5d:f9:8d:54:68:29:
         e3:cb:02:5a:0a:02:fc:cb:e0:b3:cb:77:b4:ce:19:e5:4e:d2:
         4f:64:ef:e0:7e:94:fc:dd:50:cc:dd:94:b1:1a:85:73:da:25:
         b9:83:1e:18:d7:2f:9e:16:2e:9c:34:b9:26:f3:16:48:cd:b8:
         88:d5:51:f8:a1:a0:35:3f:4b:34:91:7a:73:f3:cb:0f:76:52:
         35:ae:94:42:6b:78:0b:f8:73:61:82:9c:8b:e4:1b:f9:c3:8b:
         9b:fd:5f:04:f3:73:cd:83:04:3f:e7:38:c0:0b:d1:22:2f:ae:
         ff:82:cf:bb:a6:a8:38:24:b4:9c:19:ac:36:f9:2d:0e:89:5e:
         ed:84:d8:5a:bb:43:a4:b0:5a:c6:b4:70:16:ce:11:fe:4b:1e:
         db:69:c7:b1:2f:dd:7e:81:ee:5b:85:2c:54:a4:d0:a2:48:41:
         26:54:50:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----