Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File:                     cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier:          hV1O3MJ1UUOCOlfOJHyotEu1SxHofn65xQHH6PcF164=
Subject key identifier:   B3:20:13:78:13:61:B4:8F:5E:BD:87:4F:66:43:CC:17:30:11:F3:19
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer:       /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial:       01962E2ABA41F3CD96FE466665A9777505A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
                          2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: 50RGOiUbrc9n8k/1sUFq7UJGNiXydVh77AAnPeanpSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ba:41:f3:cd:96:fe:46:66:65:a9:77:75:05:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=b32013781361b48f5ebd874f6643cc173011f319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:6c:b8:ed:54:59:70:3b:28:70:94:6c:43:
                    3a:cb:2a:51:d9:d0:d1:5a:b0:49:2f:5e:77:2d:95:
                    16:1e:0f:64:2c:90:41:ec:71:3b:00:e7:bc:74:27:
                    06:ae:62:e3:13:c4:56:75:b1:2a:3f:d5:51:3e:8d:
                    7d:c3:2e:a1:f1:1d:65:32:9c:a5:88:36:9a:d2:0f:
                    87:25:d9:84:c3:4f:7d:c8:ee:dd:82:18:f1:86:c6:
                    62:de:f8:aa:03:46:8b:4e:46:0b:8d:b4:78:f9:53:
                    8b:89:68:bf:64:c0:41:a1:e7:2a:93:07:98:51:b6:
                    13:c2:e5:2a:c3:f9:83:03:3a:a1:52:4e:d0:db:4d:
                    d8:b3:54:c5:29:df:20:0d:eb:16:61:35:1b:ba:ad:
                    1d:5f:de:ec:e8:95:7b:34:bf:b9:08:f6:1d:a1:f1:
                    8e:0f:2b:3c:de:39:8d:5d:74:97:ea:37:c0:6f:25:
                    93:34:b5:e5:98:09:de:2c:18:63:54:16:72:45:c9:
                    6e:5e:bd:aa:e3:9f:dd:73:a2:2d:53:ac:95:86:5a:
                    d0:a0:7a:f5:ed:4e:8a:e0:b6:99:a6:6a:d6:89:ee:
                    8c:1f:14:75:ba:17:34:7a:47:15:ed:b1:b2:b9:38:
                    b3:05:47:15:ed:11:d2:1e:f5:f0:06:f4:16:10:71:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:20:13:78:13:61:B4:8F:5E:BD:87:4F:66:43:CC:17:30:11:F3:19
            X509v3 Authority Key Identifier:
                keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cb:a0:93:22:cf:51:3a:a9:5f:7f:5c:ea:b9:55:0b:0c:1d:
         22:75:61:e0:a2:44:93:4e:06:8b:cb:85:f9:f9:1c:f9:fb:4b:
         d6:c9:92:25:19:d7:a1:07:bc:b1:10:08:8c:ca:cc:44:05:a4:
         16:59:ea:2f:24:ca:62:31:cf:65:fb:5b:12:ed:02:27:50:17:
         62:d0:2e:90:bd:45:9b:98:09:68:80:ea:74:cd:3c:43:86:5f:
         6b:f1:32:1d:bd:73:6f:8c:36:3e:c7:5d:f1:e7:3c:50:3c:f1:
         84:4c:db:28:25:b9:9b:1a:26:d6:af:44:2a:bf:c7:31:06:03:
         d5:d4:46:ab:d8:66:22:5f:3a:ef:af:44:a2:60:34:29:96:ce:
         70:7a:f3:09:00:11:a6:99:30:40:bb:6c:e8:7a:ce:6b:a8:94:
         ff:16:bd:f8:21:c8:de:66:4f:c5:df:df:eb:6a:0b:d3:ad:c7:
         b9:af:49:a9:b3:9d:18:42:1f:27:1a:f8:bf:82:e8:84:d6:cd:
         be:4f:12:2d:57:20:92:15:f5:67:85:94:46:0b:9d:f0:a8:3a:
         45:e9:a9:98:0a:56:17:b3:62:3e:c8:42:27:17:ba:96:47:b9:
         72:40:14:a5:57:bb:a3:e4:71:73:40:a9:65:55:ee:8e:fb:ce:
         d3:d7:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----