Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File:                     cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier:          6fPfoxOZWvth6Cl4U2EjjDzHtMLx1RygZHPBTXmfOw0=
Subject key identifier:   22:59:BE:A4:F1:EF:4E:10:61:0E:4D:99:8A:24:70:0D:A6:22:91:F6
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer:       /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial:       01962E61C64F25A0D1B0D670A29715812874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
                          2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: Bgz5OFrCDl7mfv95guk9R4KpiEB8HLU/UK+ijXuwBJw=)
                          3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c6:4f:25:a0:d1:b0:d6:70:a2:97:15:81:28:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=2259bea4f1ef4e10610e4d998a24700da62291f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:45:98:81:c5:43:b1:bf:bf:e2:ec:9c:7d:
                    52:75:18:66:8b:c2:bc:9c:33:f2:e7:10:08:04:67:
                    ed:7a:0a:17:15:7b:82:7e:bd:39:b0:0e:c3:00:37:
                    53:c1:41:f0:f8:73:b6:46:21:95:4d:ee:ce:de:d0:
                    8e:10:3b:fd:a4:83:88:9c:ad:69:66:88:09:58:15:
                    63:02:6a:eb:e6:22:ee:ad:c0:d4:52:59:c1:6a:33:
                    d3:e9:2f:7a:0a:38:75:f6:a1:4d:ae:0b:94:b5:ca:
                    9d:f3:70:62:c8:b9:7b:44:c6:80:8f:c1:d9:c7:00:
                    92:d6:ad:e1:d1:a1:d0:59:29:28:ec:55:d0:d2:86:
                    c9:ee:1c:08:42:ea:8c:b7:12:68:24:d4:91:d1:e1:
                    65:aa:1b:38:89:9e:f1:a3:e7:f9:9d:6a:c4:35:79:
                    66:fe:60:1c:24:36:3b:16:13:ec:0e:e2:de:9c:f8:
                    5d:d5:29:6f:7c:40:50:b4:3c:cd:0d:9e:47:96:b3:
                    32:54:c7:b4:a3:1b:05:69:2f:85:f7:c0:37:da:d0:
                    3d:f2:5f:1d:ba:06:7c:16:ac:4f:91:a7:70:59:9f:
                    1d:e0:b9:79:82:3c:8a:2f:b3:67:00:b0:70:5c:0b:
                    3d:6e:a8:a2:f3:0e:da:ab:e7:ca:4a:b5:47:07:b1:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:59:BE:A4:F1:EF:4E:10:61:0E:4D:99:8A:24:70:0D:A6:22:91:F6
            X509v3 Authority Key Identifier:
                keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1d:26:7a:75:be:f1:23:be:57:21:8b:c2:44:2e:22:24:29:
         a7:8f:fe:1c:7a:7e:78:27:ad:a9:3c:2d:17:49:da:16:ac:7e:
         18:27:8c:f7:b4:02:b8:19:f0:e7:b6:55:1e:6c:b2:70:fb:df:
         70:2f:0b:3c:e3:0b:1b:da:25:1c:75:04:c1:52:56:4d:de:06:
         a3:82:c4:86:f3:e7:45:cd:4a:32:af:4e:d8:05:86:35:e3:c6:
         0d:43:88:ca:e1:e4:bb:07:e6:9f:56:64:e3:9a:39:4f:d1:89:
         5f:51:d8:90:22:8a:d7:70:a3:80:41:c6:9f:62:46:50:91:4d:
         a4:a5:b1:f7:af:2d:cd:b9:30:43:16:3c:41:25:f9:c2:05:a1:
         2a:f1:ae:2d:d6:14:1e:12:78:e3:9d:4e:14:dc:57:8f:94:a9:
         b9:1a:1a:95:0e:d0:ec:51:c3:24:31:d8:1f:2b:58:0f:e9:06:
         00:8d:29:64:83:eb:a4:f7:57:c7:5e:34:26:57:98:ad:b6:3e:
         3e:40:e6:81:a6:74:47:b2:59:5c:2f:ce:53:cc:f2:97:ee:30:
         64:53:bd:6b:5e:0e:ea:bb:68:cd:c6:17:5a:5c:e2:9e:9f:3e:
         a5:36:cb:9f:f6:cf:6d:17:4b:95:a4:36:79:30:3c:bf:32:90:
         28:41:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----