Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File:                     cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier:          OkgMkWtUcgXccYGzRvcz6bIHVUTiZCdosxe0lJNr6W4=
Subject key identifier:   04:FA:54:7D:F0:8C:5B:86:2B:F5:05:90:41:03:6F:5F:97:FA:FB:53
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer:       /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial:       01962FAB8F439D3146CD15EBA1CE741FAE5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=)
                          2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: 61u2+TQymh59wkZuhUVSVsN9m58U+iljn0l+tnE26uQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8f:43:9d:31:46:cd:15:eb:a1:ce:74:1f:ae:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=04fa547df08c5b862bf5059041036f5f97fafb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:75:2c:af:c0:fe:56:77:ee:ad:59:cc:ff:
                    49:9f:f1:ed:5e:00:45:e8:1e:2d:89:53:98:a1:37:
                    c1:b7:0c:4f:7e:c9:fe:1e:4c:d3:2c:a7:78:62:27:
                    91:80:33:0a:94:ea:e7:c8:f9:0b:23:d6:98:57:13:
                    91:0b:16:48:11:99:08:bb:e2:b9:de:7b:e8:fc:11:
                    fc:ef:5b:78:91:58:18:06:f6:2f:a7:22:51:34:6d:
                    64:13:4b:1d:72:eb:54:40:57:d9:0f:c4:a9:dd:1b:
                    cf:ab:d7:0a:61:cf:4d:6b:dd:91:2d:dd:5a:57:37:
                    67:40:81:33:a7:55:d9:31:2c:73:34:eb:74:21:92:
                    df:9c:9c:9b:b0:d8:ec:55:7d:31:3b:79:36:55:7d:
                    2b:6e:51:38:ff:da:5d:64:10:55:8c:81:cd:25:60:
                    ad:7e:af:56:18:63:22:58:19:77:fa:7f:b3:7e:6d:
                    26:48:33:96:4d:04:23:e5:b7:6b:db:69:89:37:d8:
                    49:0d:76:96:1b:1b:58:a0:ee:cc:31:62:72:53:d9:
                    f7:73:2b:cd:38:01:2f:ac:c5:c4:3a:07:3e:aa:74:
                    88:8b:f0:50:72:9e:9b:3d:47:19:e6:23:c5:bf:2c:
                    c1:ee:29:49:05:ce:86:21:fd:e8:78:12:1a:cd:5f:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FA:54:7D:F0:8C:5B:86:2B:F5:05:90:41:03:6F:5F:97:FA:FB:53
            X509v3 Authority Key Identifier:
                keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:d9:4f:8a:ab:f5:ec:b7:6c:ce:42:c3:0f:6a:3f:4a:64:
         e5:27:3c:55:a9:84:e3:7f:07:79:35:70:3e:23:05:8f:95:4a:
         26:6c:32:96:e7:8c:dd:17:6c:93:71:bb:8f:c0:a0:2d:9e:94:
         f6:37:9d:58:90:7e:42:ea:1f:30:81:d9:3a:b6:82:84:e8:a8:
         b7:42:82:c7:41:14:54:dc:1f:31:bd:8f:32:a7:38:6c:fd:78:
         ca:f9:a3:fc:c3:26:72:94:07:8c:5d:96:16:a2:23:f0:af:e8:
         ce:07:01:a5:90:b9:64:aa:ab:53:8e:c9:04:49:5f:e2:80:30:
         55:83:2f:0f:33:d5:ba:74:39:0f:c3:3f:a0:cb:64:ef:fe:b2:
         bf:8d:da:03:82:e0:6d:b1:19:a1:a7:10:17:7e:cb:a3:a6:90:
         8f:8a:e8:e3:81:43:2e:71:2c:bd:07:57:eb:9d:39:cd:5c:8e:
         c3:b6:98:e8:95:a4:01:f3:e6:e5:5b:38:40:1d:2f:0f:2d:ad:
         2e:98:02:c4:a9:77:2a:d4:1c:5f:0b:41:e4:f0:7b:0c:b0:44:
         32:06:cc:44:f4:a8:f3:ed:ea:3e:2a:ae:f8:f9:7f:e5:5b:0c:
         f2:15:3c:eb:7d:d3:ae:74:8c:2c:6c:07:b5:0e:0f:73:15:12:
         58:2b:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----