Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File:                     cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier:          e6Dh6f8eJagF3TCS0m0JL4JuHnfGQTQa8DDFroCWXPs=
Subject key identifier:   FC:BD:ED:1A:E1:67:30:4C:5C:BC:7F:90:DF:6E:EB:02:68:70:78:CA
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer:       /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial:       01962ECF64447FA2FBD1943EE966BB8725A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number:          04B5
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: Fpvdse/8nAhZs/ZtSK0pYSHlTB176AY3CNl5C++RRUY=)
                          2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:64:44:7f:a2:fb:d1:94:3e:e9:66:bb:87:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=fcbded1ae167304c5cbc7f90df6eeb02687078ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ba:3a:dc:f1:86:56:3d:4d:19:d6:04:06:4a:
                    3a:c9:17:8c:e9:be:0a:e9:bb:f5:9f:92:5d:c7:5b:
                    87:3e:ea:29:94:96:76:30:87:6a:07:bf:a0:3d:3d:
                    34:55:a2:b6:51:52:fd:89:16:3f:82:f0:5f:64:ec:
                    49:20:f1:24:f9:15:bf:25:3c:cb:d1:40:c3:f5:73:
                    ed:c1:87:75:98:c4:52:e2:15:72:5a:f8:de:0c:3b:
                    6c:2e:ed:d4:02:fb:b4:9f:ab:f0:7e:93:63:e3:0b:
                    59:74:d1:7c:f2:c9:89:7e:bf:d9:bc:72:24:88:e3:
                    f4:72:de:87:a3:cc:fe:82:3f:46:e1:4b:bc:94:b6:
                    ef:8a:dc:95:07:d4:5e:3b:2b:6e:b1:cc:2d:d4:1b:
                    21:3e:e8:b2:f2:75:f1:a5:cf:01:3d:f3:e1:f7:be:
                    39:d8:a5:9d:94:18:fe:f2:c1:65:72:e6:eb:b6:1d:
                    03:a9:22:f5:b3:6e:16:ae:64:10:7b:ba:78:67:f8:
                    7c:fc:0d:69:6b:04:06:b5:c0:6a:75:f4:dd:49:5b:
                    b9:56:6a:f7:83:2c:79:b2:aa:66:fa:3d:4c:44:85:
                    0f:e2:51:01:04:df:8c:ab:95:cc:c1:1a:f5:59:6e:
                    49:31:a0:45:10:b7:e7:f7:a8:dd:d3:1b:1b:f4:c0:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BD:ED:1A:E1:67:30:4C:5C:BC:7F:90:DF:6E:EB:02:68:70:78:CA
            X509v3 Authority Key Identifier:
                keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a4:44:64:d1:06:53:cd:b4:86:05:14:0a:a8:75:4b:30:a8:
         86:3a:d4:38:9e:4e:a6:a6:0e:1c:cc:8f:b0:8b:e8:f1:5f:39:
         50:15:8c:78:4e:66:32:9b:85:6e:32:4f:57:fb:d2:e1:e3:3d:
         05:58:87:70:a2:80:ba:60:2a:9b:72:b5:75:c8:2c:fc:82:f9:
         ff:fd:b0:7f:fb:7f:ba:5f:be:b2:b5:01:02:ed:c1:de:d6:1f:
         41:a9:60:9b:13:ae:fe:7f:4a:e1:38:8b:47:74:93:76:00:18:
         96:5e:61:79:43:1c:c7:92:72:52:aa:36:4a:60:b0:b4:93:98:
         5e:78:bc:7f:97:48:6f:54:04:8b:88:4b:89:a3:6c:7e:2d:a3:
         68:e8:f7:8f:da:d2:88:b3:f5:77:dc:82:f8:3b:5a:78:22:bc:
         9e:a8:2c:ba:51:95:fd:32:00:a2:ca:76:a8:72:5b:00:4e:8b:
         a8:68:2b:f5:93:0c:b1:63:b3:25:20:55:f5:51:f9:6f:c4:61:
         e6:a5:a4:49:88:78:96:fc:f3:91:6b:22:c8:e8:ad:cd:20:82:
         65:19:35:58:77:40:e6:23:67:62:e5:96:af:50:aa:50:0a:ba:
         13:a7:bc:29:86:f4:0a:08:30:f5:4c:ee:0b:fc:d4:06:22:6e:
         25:4a:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----