Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File:                     S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier:          CTirGFm0BcfJT5I+AvyL8+skkMKR1MfpDHfPx/GXmrg=
Subject key identifier:   EF:54:66:5A:AB:5E:AF:0C:EE:E0:33:D1:7E:4D:5A:BC:47:B6:00:37
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer:       /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial:       01962E98DAB0D2F8CF66CC6E65E4824346B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number:          0C85
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=)
                          2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: XCb3X2Ew3o6at2mVpmoyQhLb7dESkPR80lqB3q56QQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:da:b0:d2:f8:cf:66:cc:6e:65:e4:82:43:46:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=ef54665aab5eaf0ceee033d17e4d5abc47b60037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:2b:23:1f:b6:cc:cd:eb:f4:4a:cd:c4:79:
                    40:a3:38:ec:aa:7d:b5:a5:82:ea:3c:f7:c8:70:ae:
                    89:65:3f:77:8f:b7:a9:9d:84:c2:56:af:37:b6:18:
                    59:0c:46:1b:2e:54:60:69:ef:6b:ab:fd:8e:7e:15:
                    60:31:a9:99:01:7b:2f:39:c2:52:52:25:14:aa:7d:
                    23:eb:bb:cb:88:a4:da:72:91:40:46:78:99:67:cd:
                    61:eb:f0:39:b1:87:f4:8b:ee:c5:36:8c:68:5c:d8:
                    10:9d:a9:52:bf:bd:58:66:f7:17:33:dc:5e:7a:97:
                    70:a4:79:bc:71:00:22:82:2e:6f:11:89:15:3f:f6:
                    40:41:ae:64:cf:08:64:7a:9a:7b:d8:35:62:b7:c6:
                    5d:69:ec:fb:00:4d:cc:58:03:d6:c5:80:e9:3e:8e:
                    8d:9a:09:10:e7:3e:ad:2e:f7:4d:1c:9f:3c:cc:60:
                    7e:25:8b:e8:fe:7b:f8:5c:17:77:71:00:4f:91:af:
                    b1:22:82:e4:08:1d:c8:26:f7:b7:a8:87:52:d9:ef:
                    06:c0:8d:74:ff:3a:b8:2b:01:b2:00:32:e8:44:11:
                    44:ab:b3:85:c2:18:07:3f:93:d9:8d:c9:e2:1b:46:
                    e3:31:ae:86:ac:88:54:59:6a:38:72:06:5a:4b:79:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:66:5A:AB:5E:AF:0C:EE:E0:33:D1:7E:4D:5A:BC:47:B6:00:37
            X509v3 Authority Key Identifier:
                keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:93:9d:9f:35:19:9a:c4:85:26:dd:16:69:18:a7:c5:b1:
         4e:bc:c6:8d:8d:4a:d5:b1:2b:b4:87:78:cf:ab:5b:f5:95:7e:
         da:c1:5e:3f:05:ea:25:9e:fb:e8:26:50:17:56:40:f9:58:6a:
         21:10:b7:0c:0d:58:a0:41:7e:d2:14:95:c0:c2:9e:c8:ab:cf:
         95:e5:2c:ba:bc:c2:cf:7b:37:01:c5:18:1c:7e:9f:36:f0:9f:
         1c:7d:d2:17:dd:8e:9a:08:e2:9a:d7:c9:54:d3:b0:17:63:24:
         88:8f:08:d0:01:f9:2f:a2:27:7f:31:e0:34:15:01:4c:06:99:
         f6:8a:25:c9:08:ec:ec:1c:8a:80:a7:d7:47:c6:9b:9f:c6:8d:
         35:a2:51:a4:f9:d7:82:d5:30:e1:50:6f:79:ba:3a:93:9d:c7:
         ef:5e:d4:51:16:4e:70:53:91:18:94:8e:01:59:75:6c:c8:95:
         e3:06:c0:05:ab:fa:0c:bb:11:b9:0f:d9:a1:29:c3:f6:ce:dc:
         ed:51:78:c0:b1:c7:cd:13:eb:38:e4:b3:df:f4:6b:f9:99:0a:
         10:eb:67:a5:16:d4:9e:e9:82:0a:6a:e2:60:53:76:97:95:57:
         2c:d4:30:93:84:0e:fa:91:3b:ec:36:2b:71:09:53:19:10:b7:
         3a:a7:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----