Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
File:                     cHl9sHv21Fl6wtyL40-JKYAI8s0.mft (raw, json)
Hash identifier:          G9QnTlS4w5UC3BxnZwN1SXlvtnojbpUmQ39hcRgBf/E=
Subject key identifier:   E6:39:89:44:A1:65:9D:DA:73:F3:5D:AB:A6:BE:F6:33:11:5A:73:60
Authority key identifier: 70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
Certificate issuer:       /CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Certificate serial:       01962E2B451539BE2780E8E25C932176A011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: aSlfyLBw9tgMgXUQzZob6GMDMuM.roa (hash: DQ6riuAx/+y5wvPOEmkDzdZnToFJiPSBUt3sxo+9O3s=)
                          2: cHl9sHv21Fl6wtyL40-JKYAI8s0.crl (hash: O2wLBFpdZr+XZxHANp5GHT7+qhlI+KiBGFJc0OxYPXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:15:39:be:27:80:e8:e2:5c:93:21:76:a0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=e6398944a1659dda73f35daba6bef633115a7360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:5a:e9:9f:f5:1c:00:c5:4c:7f:08:01:af:
                    f5:c4:84:ff:b7:a1:18:47:47:bb:5e:7f:6b:67:a5:
                    01:a0:2e:00:06:e5:fc:ee:9c:71:f1:10:27:e8:d0:
                    e8:e9:11:60:42:68:d5:64:44:0f:8d:4f:4e:3a:cd:
                    7f:9d:b9:f0:7a:b4:1e:ca:04:89:87:f3:0d:be:d7:
                    a1:36:3f:fc:f7:bc:af:a4:bd:ea:ec:17:f3:91:8c:
                    ba:4c:3b:fd:0d:6d:0b:b9:5a:98:99:e1:71:fd:b2:
                    a8:db:03:40:1e:6a:58:ef:5d:50:c8:76:35:77:16:
                    b5:8b:85:71:6f:6d:34:c5:e0:5c:4f:f6:43:85:be:
                    13:76:6d:4f:d2:56:fd:21:a2:22:43:a9:ef:a4:89:
                    8f:d2:79:8c:93:97:30:df:82:65:16:17:ec:5e:19:
                    5c:0d:ab:63:e3:fc:3f:a2:f0:36:06:6c:72:30:a9:
                    63:73:f6:19:0d:2a:58:e3:76:b0:69:3a:fc:1d:b2:
                    d5:e1:25:31:44:ad:96:b9:c0:d3:a7:c3:ad:89:27:
                    36:e2:e0:a3:66:cd:f0:e1:e9:82:3b:a7:c3:fa:48:
                    c0:6b:86:77:6d:a6:f3:20:52:57:f5:e6:b9:b6:b5:
                    ff:1a:66:0a:5c:6b:37:de:57:6b:a1:10:97:6c:c8:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:89:44:A1:65:9D:DA:73:F3:5D:AB:A6:BE:F6:33:11:5A:73:60
            X509v3 Authority Key Identifier:
                keyid:70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:55:7e:eb:59:25:0f:7c:56:99:9d:5e:95:df:42:6f:10:
         b0:2b:ec:c4:12:da:dd:83:aa:f7:20:51:cd:54:df:e4:f7:44:
         6c:f3:c6:27:a3:7a:22:c9:32:55:a4:b5:1d:58:26:89:3f:c2:
         87:99:cd:8f:09:5a:4a:76:4e:fa:57:d0:67:67:32:3a:3f:a1:
         16:c0:40:91:62:d1:6b:56:ef:b6:93:c7:39:38:26:91:a2:15:
         f4:11:de:d3:72:c8:2e:14:11:90:bb:c7:60:60:66:0f:72:09:
         d3:77:9c:e7:26:f9:7d:0d:66:fc:cc:b8:e6:dd:7c:d8:1b:60:
         c0:ef:6a:a7:74:56:58:46:e8:2d:24:fc:59:88:5e:70:ad:57:
         ff:66:f6:e5:aa:ea:3b:20:c5:f2:11:24:22:d0:2c:f5:60:e5:
         44:f0:cc:b4:1a:7c:9f:5f:f9:cf:da:c8:66:27:62:f2:09:5e:
         4b:06:69:ca:2e:27:f0:1b:08:8a:9f:4e:6e:c1:5a:1f:5c:66:
         ec:52:62:cb:7d:e3:14:93:95:f4:1d:97:46:87:b1:94:e6:d1:
         be:52:93:f8:9d:ee:e4:46:9f:4c:97:0e:3c:d2:cc:42:2e:01:
         aa:a5:c2:d2:46:48:42:db:1a:4f:17:12:99:7e:d2:19:f2:f1:
         04:0e:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----