Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
File:                     cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft (raw, json)
Hash identifier:          Om4t9qZURWgBq7K3DVQnMDtkBtCzID3Q6Dq8mXRSOzs=
Subject key identifier:   A3:49:AF:80:D6:48:FB:2E:3E:F0:44:88:A4:EF:3A:01:CD:52:79:7A
Authority key identifier: 70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
Certificate issuer:       /CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Certificate serial:       01962F06918AC915223E22DF5964A68250B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl (hash: e+5kARf+fOKyAIjOupmVmt2UZqH8u9+QNGMfLdboIlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:91:8a:c9:15:22:3e:22:df:59:64:a6:82:50:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=a349af80d648fb2e3ef04488a4ef3a01cd52797a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:74:ed:43:bc:0d:f7:81:ad:7d:aa:21:d0:
                    3b:a9:ce:26:9d:88:35:76:06:16:99:3f:2b:e2:48:
                    2d:94:96:44:0f:d1:85:4d:df:27:1b:a2:7b:d4:12:
                    3c:38:6b:1a:18:e7:0d:8b:70:17:aa:08:5d:a2:1f:
                    de:9e:f9:bd:cc:aa:17:6c:0a:44:8e:b5:8c:1c:ef:
                    a7:c9:36:53:b4:f7:9b:fe:7c:f9:50:dc:2c:c0:2f:
                    68:4d:ef:7c:72:fc:45:d9:54:9a:ba:15:74:bf:25:
                    26:31:34:4d:e3:92:c3:7a:2b:8c:6c:5d:6a:c9:b0:
                    2c:96:10:df:3c:bc:bc:3a:e1:8f:8c:c2:48:8d:0b:
                    b0:13:ab:7b:00:eb:56:89:7e:5f:9f:75:4c:87:45:
                    36:02:7a:d8:d9:2f:92:62:74:91:ae:04:fc:e3:45:
                    c9:16:34:12:a9:0c:da:77:9e:54:52:e8:f4:d2:5f:
                    68:9b:c4:3a:87:18:d5:1c:17:24:34:83:6c:1b:54:
                    44:75:37:e0:dd:b6:aa:ff:6f:c1:6b:15:c8:a1:4d:
                    18:66:30:50:b5:cc:7f:36:b0:30:0d:41:fe:2c:38:
                    42:20:b3:37:98:dd:ab:49:58:98:a7:9f:71:05:cd:
                    7c:4d:19:d3:f4:87:d3:db:42:2e:75:77:90:ce:7c:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:AF:80:D6:48:FB:2E:3E:F0:44:88:A4:EF:3A:01:CD:52:79:7A
            X509v3 Authority Key Identifier:
                keyid:70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:73:9a:c6:07:29:06:f8:6e:4b:a5:7f:18:4c:1d:98:1e:cd:
         90:2d:8f:6d:6d:d6:ac:d2:70:0a:2a:0d:30:8a:da:ec:ad:67:
         d5:3b:49:56:73:89:45:d1:88:43:e7:b4:06:79:55:3b:9f:f1:
         f0:93:be:4e:70:be:b0:96:47:0b:5b:4f:d8:be:93:7b:8f:fe:
         f0:2d:c0:14:86:ba:6f:37:25:a6:9f:9b:27:51:e5:81:4e:ad:
         1b:76:82:30:6d:a8:6c:ca:1a:e2:3d:b7:22:bb:5f:3d:05:2b:
         0f:bc:f3:59:09:66:4d:68:1a:57:4d:74:c9:c8:52:07:89:71:
         94:5c:a4:ad:01:cd:2c:5f:d7:6c:92:b1:76:c2:e0:0a:a2:33:
         a8:bc:e8:04:e9:cb:f0:25:8f:99:b9:b2:fa:3a:81:13:e0:84:
         22:c7:91:97:f4:a3:30:63:e7:e6:5c:5f:71:b3:15:3a:9f:97:
         fc:d4:c2:d5:78:54:fd:ef:13:99:01:8a:df:23:12:08:93:9c:
         79:43:e0:60:c5:81:cf:eb:ee:ad:1f:96:2a:e5:35:58:97:90:
         63:be:6a:b2:7e:56:c4:74:07:25:57:bd:09:a0:ff:4c:35:e8:
         57:bf:d7:3c:fd:aa:84:4a:fd:57:05:99:11:8b:ce:8b:80:2f:
         a8:14:e2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----