Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File:                     cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier:          CEVDoFLnHhLcdy9GEahnF8vATOYduNnCi3RomOZzjF8=
Subject key identifier:   C9:05:78:14:AC:FE:0C:FC:DD:46:00:B2:59:1E:BC:19:7E:71:02:04
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer:       /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial:       01962F74447AB521FD2632471905C6E86A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number:          01E3
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=)
                          2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: IAycO7blvl+6Jusha1+lz2nUTqOzdh2tchZv5gx9j+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:44:7a:b5:21:fd:26:32:47:19:05:c6:e8:6a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=c9057814acfe0cfcdd4600b2591ebc197e710204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:ea:fc:43:94:5f:ee:e0:89:06:7c:22:9c:
                    82:b7:01:5d:e1:12:0b:72:1d:2e:fb:99:b8:80:11:
                    92:fa:45:53:15:22:b8:9c:db:fe:c1:e3:a1:29:e9:
                    bd:12:44:9c:1a:f6:48:fe:2a:4c:9d:f2:5d:b2:f4:
                    e9:ef:cc:ce:1c:f2:63:74:f2:f0:ad:30:56:1c:24:
                    5c:0c:9e:38:9a:df:04:12:e4:56:36:b7:81:75:42:
                    b6:28:19:4e:3d:e2:aa:8c:3f:aa:79:4b:da:23:fb:
                    21:4c:7b:d0:9c:6d:ba:c0:c0:cb:02:fc:de:70:5b:
                    f5:0f:53:d7:2d:a3:54:2a:6c:47:9a:c1:99:c3:56:
                    32:66:13:d8:61:80:ad:34:cf:95:56:c4:0f:6e:df:
                    53:b4:56:2e:ec:3a:28:da:fd:86:52:83:3d:03:24:
                    76:f7:5d:12:3b:6a:e2:c8:94:51:fd:38:fa:a3:e3:
                    f9:0a:f5:33:0d:c1:cf:db:f8:3b:2d:fc:b5:5d:20:
                    09:c5:b4:ab:bb:1c:c6:9b:57:58:76:08:7d:07:d2:
                    1b:b6:7c:52:26:d0:69:31:60:86:b8:65:99:71:f2:
                    2b:68:45:b5:d3:f8:57:df:25:df:04:0b:5b:09:24:
                    df:e0:b8:b2:ae:6f:14:54:fe:13:d4:43:77:40:a0:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:05:78:14:AC:FE:0C:FC:DD:46:00:B2:59:1E:BC:19:7E:71:02:04
            X509v3 Authority Key Identifier:
                keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:a9:28:56:79:93:b7:6c:02:84:c9:a3:df:76:45:62:d3:
         38:ea:94:95:e8:17:78:e2:03:ca:8e:e4:3e:8c:cf:91:42:12:
         3c:de:64:f5:66:84:4f:10:1b:eb:c9:6d:f4:53:9d:8d:ed:d8:
         09:6a:71:f4:0a:1d:20:5e:58:16:75:f1:51:c6:dd:4d:46:a1:
         7a:50:92:4b:eb:0a:ed:4b:e4:21:93:2b:20:68:2c:77:b7:0c:
         56:fb:8f:76:15:ca:58:c7:4d:5b:40:4b:54:77:d2:1f:eb:7a:
         69:6b:21:ee:98:35:86:d6:15:cd:de:bb:f0:d7:5f:f2:b3:5c:
         73:90:0f:22:03:72:b0:49:4e:09:44:65:c8:6f:d5:83:00:91:
         0c:3b:eb:67:98:c0:e5:73:23:f1:a3:bd:4a:db:4f:12:06:be:
         db:95:81:e1:f3:0e:8f:7d:f9:05:94:11:98:04:9e:ef:58:60:
         ab:32:7f:c1:46:f4:a9:74:a8:9e:17:03:a5:5b:df:86:0f:d4:
         1e:53:04:30:e7:a3:51:e4:2c:55:0d:bc:0c:2a:d5:23:70:ce:
         9a:8b:a6:a9:20:74:be:61:51:aa:49:e3:bf:76:e4:6d:39:c2:
         9d:47:45:80:f8:ee:07:27:4f:a6:81:f1:16:b2:ff:b1:eb:16:
         fe:71:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----