Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File:                     0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier:          bMFQgpNzfF0eDuENZabA6jfmJkfSJpWpM8k/QpwQH1A=
Subject key identifier:   36:9C:E2:FB:9D:B8:71:89:4A:32:C6:B5:F9:79:74:C7:0E:3C:0C:21
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer:       /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial:       01962ECF6223D995E688FB138CE57E486BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: RqQ6ADnWdaAkfW5RNUQwhDDj3L+gJDcXkY+tc5sRiXE=)
                          2: QxqcS0TVGSUgUZVV2ZivYzu4jmI.roa (hash: ZdHOHVJoAbkKGlM6IZatNPTQ3rdTLS0gUgU+DGM3k0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:62:23:d9:95:e6:88:fb:13:8c:e5:7e:48:6b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=369ce2fb9db871894a32c6b5f97974c70e3c0c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:19:18:a3:b5:07:cf:f1:4c:54:5d:8c:ec:
                    8b:a3:ab:ac:69:37:cf:92:ca:54:22:59:87:c6:ab:
                    5e:e8:46:85:15:bb:0d:41:17:c1:f3:9d:07:29:b0:
                    ee:c0:9e:74:c7:27:38:dd:d0:54:76:46:23:96:b2:
                    18:01:d2:52:c3:5e:e7:eb:a8:9f:4f:6f:14:f8:17:
                    97:e0:d9:2e:ba:25:19:04:f8:b3:a2:60:f8:07:25:
                    7b:d7:f7:ab:c2:13:b1:02:f5:26:53:3d:fe:43:77:
                    3d:76:d8:37:10:0a:c0:86:e1:a5:9c:c7:5c:fd:b2:
                    76:71:2b:93:ce:df:45:c8:14:f7:b9:ca:9b:59:fd:
                    08:df:69:da:75:13:86:7a:35:62:1e:29:c3:58:61:
                    81:73:3b:f0:25:5c:fb:de:ef:00:28:42:10:25:d9:
                    a6:0a:6d:d8:44:30:0a:b2:d7:a1:54:40:80:12:75:
                    fc:44:ee:c8:a0:3d:5d:ab:8d:f2:c7:c3:fb:a4:89:
                    dc:73:60:80:93:ac:83:f1:df:54:e8:f1:f4:2a:62:
                    9c:b5:54:40:23:d9:89:f4:00:aa:f1:0b:59:00:e1:
                    39:b4:c5:f1:52:7e:d3:df:da:5b:ea:10:c1:05:59:
                    3b:ad:74:f5:a7:27:fd:f8:b0:69:d6:76:c5:2e:ef:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9C:E2:FB:9D:B8:71:89:4A:32:C6:B5:F9:79:74:C7:0E:3C:0C:21
            X509v3 Authority Key Identifier:
                keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:d8:79:81:ba:65:92:50:dd:8d:3b:89:fa:29:90:b5:65:
         6a:b7:a3:0c:59:04:6b:c0:dd:a2:ef:45:b5:2a:65:8b:09:b2:
         e1:28:bc:df:1f:1f:01:9a:27:9f:f8:8d:30:f9:dd:37:14:c5:
         e7:f8:c6:01:5b:dc:73:02:c4:70:aa:ca:e1:af:f2:5a:35:bd:
         e4:47:2d:05:52:dd:7c:51:4d:11:83:a5:0b:b2:f9:ca:eb:a2:
         8d:3c:8f:9d:6c:fe:51:ef:84:9f:bf:42:6f:9e:75:b4:c1:9a:
         b9:ed:63:ff:7a:1a:21:f0:26:b5:7a:49:ed:63:3c:0d:3f:6c:
         3b:df:77:14:8a:9f:1c:6f:d6:5f:98:99:f4:57:1a:43:cb:ff:
         86:cc:97:0d:cb:a8:ad:6b:bd:0c:9f:40:8a:3b:31:99:ed:73:
         74:6b:f6:86:90:72:4f:99:4b:66:98:a0:f1:69:6e:a3:77:0e:
         ec:e7:d6:60:d9:b4:b2:6c:5c:f5:08:e4:59:d7:8b:a6:16:1d:
         61:b3:4d:63:f1:3b:1b:02:a9:de:0c:4d:e0:f6:07:78:18:05:
         73:5d:c2:78:03:c0:54:50:57:9d:e1:89:80:34:b5:6c:13:71:
         4c:92:c0:8a:6b:f9:45:7a:79:8d:30:41:7b:4d:f6:04:f0:3b:
         5e:5f:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----