Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File:                     cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier:          GIN1AIW9t0tZG0WaqstN2dRmDczUv/dqBQSLi7ntdqY=
Subject key identifier:   0E:F8:E4:3D:44:4B:FE:D8:A2:3F:68:07:82:EC:BE:23:98:D8:F9:CC
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer:       /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial:       01962FAB8177FC1697A634F8A2DCED78CEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=)
                          2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: OLHS5qVohSlUSP3vMNl3TpKmFvVfqEi/BukvuUdnBlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:81:77:fc:16:97:a6:34:f8:a2:dc:ed:78:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=0ef8e43d444bfed8a23f680782ecbe2398d8f9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:f5:37:da:ca:59:85:d2:4e:d5:da:cd:d2:
                    50:c7:a1:84:f3:3b:7b:fa:68:58:e6:33:d0:aa:18:
                    7e:36:bb:ce:c5:62:3f:78:9e:fe:67:a8:f4:0f:f4:
                    a9:b8:9d:20:bd:ea:48:c2:77:f8:08:be:61:82:f1:
                    e6:5e:a0:78:80:f3:2a:f1:fc:2a:b5:e6:de:bd:89:
                    3b:c4:db:f6:f3:52:fd:2c:ae:bc:7a:56:b4:27:fa:
                    da:b4:a3:b8:04:a8:d7:87:e6:46:26:e8:47:8a:a3:
                    6d:a5:ba:66:85:14:c5:a8:b2:34:5b:37:d2:b1:3b:
                    2f:e5:86:5b:aa:06:81:f4:0e:67:95:d8:be:f6:d7:
                    03:aa:2c:11:8b:71:14:5e:7e:ac:3e:b3:9f:07:a9:
                    cc:ce:4c:b6:67:d3:b3:fd:6e:73:07:9d:2a:cf:81:
                    11:e3:d1:d0:ef:59:ce:71:23:98:1b:2e:fd:02:f3:
                    c7:57:9c:2e:55:29:3d:ab:61:48:bc:a4:1b:00:5b:
                    e6:20:91:0a:2f:09:bd:b9:8e:19:07:b8:89:32:04:
                    2a:02:48:87:a1:23:ab:2e:dc:c7:30:f2:d7:f6:41:
                    bc:99:3a:cb:bf:7d:2e:44:7a:0d:54:7e:f5:cb:2d:
                    82:fe:3c:e6:11:d2:af:8f:ed:a4:9f:6f:e2:0e:b4:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F8:E4:3D:44:4B:FE:D8:A2:3F:68:07:82:EC:BE:23:98:D8:F9:CC
            X509v3 Authority Key Identifier:
                keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ef:a2:2d:ed:0c:a6:77:c4:12:08:d8:b5:29:6a:a4:45:03:
         d5:bb:e4:f2:1e:71:dd:cf:80:94:69:fe:53:19:cc:8f:6d:73:
         29:dd:42:4a:02:78:da:df:25:90:e8:33:2e:da:3a:f5:8f:69:
         89:7b:8f:7d:9c:c1:40:f6:13:4d:0f:fe:8e:7e:0c:63:90:20:
         4d:bd:51:e3:51:d2:23:70:bc:c3:0d:db:a9:5b:2f:a7:b8:99:
         a6:ea:d4:fb:89:19:73:85:97:62:ed:01:fa:79:18:07:79:90:
         19:26:a1:cb:ac:72:b7:ad:f4:2a:a0:7a:19:e0:24:53:db:e2:
         c1:c2:38:77:35:fc:f8:ae:eb:51:64:75:e8:32:5e:95:15:bf:
         33:24:a5:85:81:5c:e9:fa:7c:7b:da:1a:cf:e5:5a:db:20:ba:
         89:97:5f:44:f2:54:f0:68:b2:98:61:29:88:61:62:85:5c:79:
         7f:2a:11:52:17:b4:cb:e2:17:3a:d0:f0:45:81:dd:97:ea:2f:
         3a:3f:8f:4c:cc:7f:d5:8b:5f:cc:88:c1:c6:8d:c4:8e:e5:24:
         94:94:d9:35:bb:af:4a:89:b5:a8:9c:ba:0d:72:fe:84:b0:30:
         5a:05:b3:a0:2f:69:69:85:c6:b3:dc:bf:de:e2:8c:b9:a9:2a:
         95:66:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----