Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File:                     cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier:          LRFgbSw92RLOU6JGlbtZHLQ/7Nzf5LyLs7KpYRxX+jg=
Subject key identifier:   BB:14:B2:9B:2E:DD:DA:EF:30:7E:06:D2:6F:20:1B:6C:C0:9C:98:F1
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer:       /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial:       01962E99544E6CC0D8B322F1632A878FB38E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: Sjjs1xS3ViMpx6oBVWak0h/n0SvoRqeFSG6z8ukzs50=)
                          2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
                          3: o3Ruly6xo3HjQfyltbyyXFgE2AY.roa (hash: 83gTacIwQrempq02V5LTV8DoLs2npW478Kw0EoVa9VM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:54:4e:6c:c0:d8:b3:22:f1:63:2a:87:8f:b3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=bb14b29b2edddaef307e06d26f201b6cc09c98f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:d2:06:f8:6a:26:63:7c:a7:88:7f:5b:80:
                    40:e1:9c:01:a7:d8:07:2b:a3:71:ca:7d:30:56:ac:
                    7f:c1:89:2b:9d:bf:77:da:32:66:f7:a1:4d:1b:be:
                    e3:01:81:a5:4e:84:af:10:50:cc:73:00:26:b3:cd:
                    25:fa:77:6e:6d:e3:e7:f3:f4:12:91:08:13:06:85:
                    6e:ac:22:d6:5c:65:90:76:d9:1d:7a:3a:9b:f5:01:
                    1f:fd:da:2b:eb:cc:63:c8:41:60:bb:b7:9b:3f:40:
                    ed:25:bb:68:04:94:23:21:dc:6f:d7:e3:70:f0:f4:
                    73:cd:2a:6c:7e:16:70:ef:68:50:ce:c4:1d:90:aa:
                    95:4d:f8:e4:4c:15:61:50:49:1d:79:db:d5:db:b1:
                    84:38:99:ff:3f:1f:e5:03:56:b3:9b:23:7e:9d:de:
                    92:fb:7f:77:74:df:a0:bb:ec:55:58:60:b6:f3:47:
                    4d:57:4c:94:3b:ca:aa:23:16:70:10:5a:03:52:05:
                    77:b2:d5:be:34:89:61:d1:99:d4:1a:7c:a9:bc:09:
                    ce:7e:d5:2e:95:15:47:5b:ec:f8:56:1b:6b:49:a8:
                    21:9a:13:85:df:6c:f6:0a:b4:b7:14:ab:66:fa:d1:
                    b7:52:41:3d:59:8c:eb:dd:46:bd:ba:91:4d:2c:1e:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:14:B2:9B:2E:DD:DA:EF:30:7E:06:D2:6F:20:1B:6C:C0:9C:98:F1
            X509v3 Authority Key Identifier:
                keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:72:1e:68:e2:45:41:f7:7a:c2:c0:7f:2b:87:89:f5:91:
         25:24:f1:ef:af:d9:c8:d5:5c:fa:51:ed:09:47:46:1e:f6:3f:
         27:55:aa:05:df:da:b3:fc:0a:17:7b:7a:3f:51:62:55:f2:a5:
         b5:ad:84:ab:f5:a4:00:d4:04:64:4e:dd:49:37:fe:cf:b3:cd:
         33:45:40:94:1f:fa:53:90:5f:d1:c3:d2:8d:c7:6d:be:ee:98:
         4d:7c:3b:9a:88:1c:52:54:b9:9f:9e:0f:92:90:65:1a:f0:c4:
         a5:15:d6:51:12:21:6b:8b:ac:d4:1b:68:48:df:4b:3f:64:33:
         00:eb:83:31:8d:3e:35:51:6e:73:84:28:6b:f4:da:b0:66:17:
         d1:5a:8c:37:8c:10:b5:e7:40:84:8a:09:06:0a:d3:f9:da:5d:
         c1:b9:b4:c4:9c:09:ab:bf:f8:47:a0:90:ba:b9:38:1e:32:f3:
         f2:1e:41:40:d9:0c:2d:e5:31:9f:14:a6:f8:65:26:a2:3c:0a:
         61:0d:aa:78:97:96:9b:c2:22:15:0f:4e:53:3a:3d:8e:3b:69:
         fd:83:fb:f2:c1:e6:b2:90:ba:ce:73:32:bf:d6:2e:f2:13:b1:
         8f:dc:cf:dd:fd:08:ed:c4:a1:49:8b:b6:94:58:e8:73:e3:ed:
         ac:08:ec:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----