Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File:                     cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier:          H19O6NJv9MF2od8/8Jsh+dH9/2YdOeFNLKE+OvtcXuk=
Subject key identifier:   77:E5:EC:CF:3A:DB:81:F7:52:90:A1:3C:2D:C8:DB:C0:1C:35:B1:74
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer:       /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial:       01962F7452F42C24C902583D0C58B5684EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: Y-ORdAusYkZsKOUTFP8lOiqiHAs.roa (hash: VsoWMS+G3RdpKa8Z+B6s882TzbmXTjisQIhsADrOhSU=)
                          2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: DIAv8QiF67G5NNeaDaG5MnJMQoQPEY3x3Q1sVgRoDYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:52:f4:2c:24:c9:02:58:3d:0c:58:b5:68:4e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=77e5eccf3adb81f75290a13c2dc8dbc01c35b174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:ab:e7:22:29:69:d1:1e:3e:ab:f5:ce:d3:
                    0b:90:8c:ae:4a:2d:08:fd:ea:a7:68:a1:c2:97:52:
                    76:f7:b6:ac:e0:c7:92:74:da:82:e2:bd:39:d2:9a:
                    e8:6c:7f:1c:63:d9:f1:08:84:61:4c:38:71:56:97:
                    87:48:8e:b4:0b:21:60:25:7b:66:f7:29:46:bf:b5:
                    78:64:2e:3f:e9:28:46:15:f0:02:81:c8:2a:c9:fe:
                    c8:6a:dd:c6:ec:77:c7:28:41:a7:9c:c9:ae:5b:46:
                    d3:3d:9b:39:ff:e7:6b:ac:4c:42:9c:7b:2c:0e:75:
                    dd:72:59:f5:8c:d5:a8:21:06:8e:ae:58:5e:d1:59:
                    ae:86:73:1c:85:8a:08:62:fd:e9:05:3c:84:ac:01:
                    69:3e:0b:ff:05:61:b7:3b:d4:c1:da:ff:06:a8:36:
                    0e:0f:4d:60:64:9d:38:51:eb:99:a7:e6:f6:ad:7f:
                    8b:b3:02:aa:ee:3d:df:c2:76:65:93:ea:dc:37:a2:
                    36:3c:d5:f4:16:33:b5:e7:44:31:82:a2:1e:f7:2f:
                    c4:5b:a0:79:c4:89:3a:10:54:86:10:2c:24:ce:f7:
                    22:d6:4e:84:7f:71:a4:9e:21:d4:9e:39:b9:e9:a6:
                    55:1e:fb:2a:96:f5:50:2f:02:ad:1e:4e:ed:fd:58:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:EC:CF:3A:DB:81:F7:52:90:A1:3C:2D:C8:DB:C0:1C:35:B1:74
            X509v3 Authority Key Identifier:
                keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:03:62:87:0d:a7:d7:84:d6:e0:67:b1:e3:e8:9d:f6:b7:5f:
         b6:3b:cb:58:68:a3:5c:d3:fd:36:bc:e4:54:dc:41:15:71:46:
         1b:5c:d3:f4:ca:5e:9e:9c:8c:00:aa:6b:a7:03:ee:5f:f8:ea:
         3e:f9:88:41:5e:99:63:75:46:23:ec:9c:52:13:98:cf:64:8f:
         82:6e:34:21:32:04:10:4f:4a:ba:4a:6a:39:a8:97:1c:08:bb:
         07:10:2b:11:a3:86:84:0b:98:c2:e3:7a:7f:6f:20:f7:fe:6f:
         6c:e3:2e:ea:7d:07:90:8d:e7:b3:16:5a:da:74:ba:fb:74:50:
         e4:a3:3b:14:61:1d:e3:4c:c4:ba:51:e3:27:eb:d3:bb:4e:40:
         7f:90:7b:46:5e:94:3f:98:aa:62:4c:18:ac:dd:f9:d1:a3:62:
         66:9b:04:6f:0a:2f:b0:07:8a:59:0e:ef:36:ae:2f:85:34:2e:
         6b:fb:e4:69:e6:4f:7e:ff:c8:96:b4:90:c2:0c:f6:e6:8e:3c:
         05:58:1a:ac:42:49:da:ab:b7:97:e3:08:9a:0c:85:5d:f6:48:
         1e:16:8b:4c:4c:79:30:fd:59:86:e4:45:1b:53:6e:a4:d6:71:
         49:a1:88:b2:51:07:83:ea:93:ab:23:eb:24:ec:5c:05:92:29:
         93:e0:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----