Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File:                     cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier:          BSN/wZ4nSaMAyexvVfU8c9RpLBlyu7GXdMMw/49K1Oo=
Subject key identifier:   0E:24:B2:F2:96:F9:C5:1E:01:92:43:BF:39:D1:87:34:D8:4C:DC:16
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer:       /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial:       01962F74644538EF9728E4D56AC35885658A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: ZMvF8N06VsuZ5tNxMMczzsSTe5w.roa (hash: D7vN+YdR9s6oznh1bq9p5ngAxVIRYXDWMiWld/VomNA=)
                          2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: mJKCtuCud/k4bP6vi5kNDrzSLmkjwSlYxTvd2ftVwbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:64:45:38:ef:97:28:e4:d5:6a:c3:58:85:65:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=0e24b2f296f9c51e019243bf39d18734d84cdc16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:09:5e:83:7f:fb:12:e9:2b:c2:ef:3e:7a:
                    75:8e:e2:c8:5f:03:fd:42:9a:24:40:62:a4:fc:cf:
                    74:b8:2a:bb:c4:9f:10:55:32:d6:3d:1a:c8:50:3d:
                    6e:6f:66:3b:0e:84:e0:f8:89:8f:9f:7d:bf:63:5e:
                    b8:54:8d:59:e1:f4:b4:cb:8a:59:83:3b:c6:0c:60:
                    1a:d0:de:ed:4c:27:77:12:57:73:0f:7e:7f:76:39:
                    15:e1:82:1c:30:ab:5c:9a:e4:f7:6a:08:af:b7:0c:
                    71:1f:89:30:ff:04:f1:f8:38:13:6a:a9:7d:03:40:
                    52:22:84:2a:f7:8d:34:81:fc:9b:06:9d:d5:6f:1a:
                    76:a6:28:44:be:31:e3:a9:0b:88:f9:21:6a:e6:3c:
                    0f:9d:fa:93:38:d2:aa:1e:b8:12:e2:cc:3e:de:97:
                    5d:f1:aa:3d:76:0d:4b:21:33:2a:44:5f:2f:eb:c2:
                    d0:48:7a:19:b2:03:14:20:97:f0:54:b7:f3:59:86:
                    e9:19:53:5e:35:d0:46:64:52:6c:68:53:36:ed:bd:
                    28:19:1d:35:ff:19:1c:93:e0:67:70:4e:82:f3:0f:
                    79:00:67:31:75:58:43:04:a6:49:72:7d:ee:48:d8:
                    ae:0b:fa:04:ee:8c:34:1b:3d:8e:62:68:6c:6e:a6:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:24:B2:F2:96:F9:C5:1E:01:92:43:BF:39:D1:87:34:D8:4C:DC:16
            X509v3 Authority Key Identifier:
                keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:12:5e:02:33:fc:86:5c:00:eb:16:61:4b:85:c4:b1:b7:68:
         0e:cb:0c:5f:e1:8c:73:db:a6:97:76:03:aa:f7:fb:ae:86:aa:
         72:c5:37:24:6f:79:1a:d8:7b:c6:41:34:ed:d6:cc:ca:09:e0:
         9b:c5:27:d5:bd:af:10:61:3e:5d:66:a0:cc:0f:2c:c8:6f:6c:
         29:23:09:23:60:12:7b:22:e2:a8:1a:c1:8f:6b:26:9e:d3:37:
         26:0c:cc:6e:3a:9e:f7:4e:ad:e4:98:e6:bf:99:e9:ea:bb:6f:
         13:fa:5b:74:62:4d:62:41:e1:f3:43:72:07:b4:2e:c4:25:c1:
         f2:e6:78:43:e9:95:6e:74:12:aa:76:21:76:1b:aa:d7:3a:5e:
         4e:77:bd:e5:f6:8b:78:9a:f2:bc:d7:6a:af:e7:c2:59:d1:37:
         97:3d:3b:44:d8:af:78:a7:3a:aa:5b:fe:07:a0:7c:f3:f1:c2:
         c0:58:ef:19:3e:58:f8:cb:a1:b2:13:a4:8c:42:14:63:0d:da:
         d1:e3:09:a6:f8:33:41:b1:ea:eb:f1:ed:24:1a:af:da:9d:32:
         1d:80:45:88:9a:dc:3a:22:a6:66:e0:3e:12:d2:21:f6:3d:0f:
         8d:c5:0d:f1:d0:42:84:c9:e6:3e:2b:68:98:6a:0a:35:3c:e0:
         12:fe:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----