Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File:                     cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier:          4ciK0Ca2dXo3wet5moYownfZclTFKx06EnteaLjK1qw=
Subject key identifier:   6B:87:9E:3F:03:B5:CF:27:8B:AC:69:58:7B:FB:94:98:27:86:23:9D
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer:       /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial:       01962DF3B8438F1932EEC4DF8BE29F58DFA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: osN8YGM/nZ1yhpFg5i3pT5JVKaA9vC55vfgpQl4/U70=)
                          2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:43:8f:19:32:ee:c4:df:8b:e2:9f:58:df:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=6b879e3f03b5cf278bac69587bfb94982786239d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:18:d7:92:55:bc:01:3a:9d:54:f5:4e:e5:
                    2a:76:94:0c:db:3d:9d:6f:39:97:45:3a:3f:73:34:
                    42:96:f7:7c:d2:e2:fa:aa:58:a8:21:f2:08:24:98:
                    da:d8:48:53:84:53:c6:de:05:dc:b2:db:2a:73:09:
                    9d:9d:fd:ca:c8:bf:9a:18:ba:d2:1a:25:e3:f4:df:
                    9f:62:9a:aa:1d:74:51:c4:52:69:99:06:bf:f1:4c:
                    b4:77:09:d5:78:b5:f0:aa:c0:8a:19:d2:b1:4d:35:
                    9a:de:92:c0:ef:4d:94:27:86:75:1f:75:47:69:84:
                    20:00:69:d1:ae:8f:c1:ce:c3:04:f8:e2:72:cd:a0:
                    cb:45:98:63:16:c2:95:b1:e1:eb:42:83:52:bf:10:
                    a7:14:b8:30:a0:cb:bf:f6:4c:eb:56:22:e6:1f:0f:
                    e5:32:27:43:49:aa:eb:b8:da:f5:58:db:fc:3a:17:
                    9c:26:c6:6a:af:1a:79:89:96:8a:f6:44:c4:dd:77:
                    09:4f:4f:8b:36:d7:b9:b1:d0:f4:71:6c:09:f9:b6:
                    00:b7:32:95:4a:ef:1a:51:9c:44:ee:71:ec:a1:67:
                    5d:72:69:65:dd:8b:ae:24:27:c1:50:8a:79:b5:89:
                    a5:fa:14:0c:0a:60:fd:81:2b:32:7d:3a:7e:63:e8:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:87:9E:3F:03:B5:CF:27:8B:AC:69:58:7B:FB:94:98:27:86:23:9D
            X509v3 Authority Key Identifier:
                keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:08:6e:fc:d8:49:b7:27:ab:63:34:0d:79:db:a6:70:08:23:
         3b:ba:9e:5c:5b:99:83:69:7b:f4:28:07:4e:20:8e:13:95:d0:
         c0:bb:a0:45:74:a6:d5:33:ff:c0:47:af:5c:19:42:bc:4b:bc:
         a1:78:47:7a:85:ee:5a:77:ea:0c:d5:41:1a:4b:8a:7b:52:e9:
         92:b0:46:c9:d1:18:a4:e4:ad:d3:77:3a:f1:95:57:f5:e4:40:
         2f:ba:24:55:d6:77:61:a6:8f:4f:7b:01:aa:73:94:d2:3a:81:
         3a:92:db:da:64:7c:6d:c0:39:26:6b:bc:ed:f1:b3:a0:7d:e0:
         55:41:6a:8d:34:6d:62:73:96:a6:4e:c8:1e:ea:ba:53:77:85:
         e6:a0:c1:1c:a6:a2:89:50:61:c4:21:b5:11:fb:5c:18:f0:47:
         55:45:de:8c:37:6c:8d:5e:fa:df:07:06:06:f4:a1:32:58:62:
         98:1b:51:d0:b4:49:14:f2:b0:71:38:30:ce:ad:25:d5:a0:39:
         30:85:a7:bd:a5:ce:1a:26:3d:91:e5:8d:a3:14:43:dd:02:89:
         5f:73:1d:6f:e6:fd:95:7e:8b:7a:cd:ae:a1:f7:4f:14:f2:2f:
         8d:dc:87:58:f4:36:7b:14:5e:2e:bb:53:bf:0c:4e:8d:e5:13:
         e2:67:b2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----