Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          EfkaW3zY9fJfJ2aLV0Qwfjq/AX8Gr222LoTniVfNdEE=
Subject key identifier:   45:45:8A:79:0F:E5:EA:42:10:BD:63:27:AD:C1:23:7F:EC:0D:52:2A
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       01962E2ADB69B5152AAA65D367B8D892EB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          0434
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: jruZxZ6v3fQQDOP1XhyiLrCoyWo.roa (hash: JwmXnt+QW5OLkAvlfiLvs8bXFlLMvqHA2E9khKbsWec=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: pp3SO5PkeT+bVc3EwUKgXDEqv4r9s4mSjdM6lKVG94k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:db:69:b5:15:2a:aa:65:d3:67:b8:d8:92:eb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=45458a790fe5ea4210bd6327adc1237fec0d522a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:0a:8e:8d:54:d5:97:8e:00:f0:d2:39:ab:
                    94:b3:a1:b1:d3:29:6b:22:8a:ca:c8:48:7b:0f:40:
                    69:ba:92:aa:d3:86:50:f5:b2:1a:4b:2f:2c:93:98:
                    e0:5c:77:4f:ec:cb:0c:bc:53:85:66:e4:9b:cb:35:
                    cf:58:3a:71:19:32:ce:a5:e1:0c:23:46:01:f0:a4:
                    94:63:4e:d8:e5:b9:10:64:b6:f2:73:9a:d6:ef:9a:
                    99:f4:6e:07:a1:e2:8a:92:28:ce:0a:c5:c5:d0:4b:
                    45:c0:ff:dc:3e:87:c0:1e:71:f8:1b:5b:0a:53:45:
                    53:73:35:e7:ea:6c:2c:ec:71:d5:bc:28:c4:08:63:
                    6a:ff:f8:8b:55:10:40:21:7f:0e:8e:8f:40:40:eb:
                    cb:66:7e:cf:cd:53:3d:39:e8:59:6a:ee:eb:46:38:
                    ce:67:a1:2b:6b:fe:2d:f9:6c:13:ba:74:ee:87:14:
                    72:24:28:7a:22:0c:7c:12:c9:33:09:8a:57:7b:60:
                    19:eb:85:35:30:23:61:2a:0f:84:71:0f:66:e9:09:
                    4d:55:68:8a:f5:96:db:33:6e:dc:1e:28:71:ff:83:
                    1f:c8:6e:22:66:09:bf:cb:d6:62:dd:5b:83:8c:aa:
                    66:e3:d2:66:f5:37:2c:2f:46:a8:0a:e6:4a:ad:11:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:8A:79:0F:E5:EA:42:10:BD:63:27:AD:C1:23:7F:EC:0D:52:2A
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:99:cf:bc:92:a3:cd:24:88:37:e4:55:79:fe:1b:c2:f3:3f:
         63:1b:7c:48:b7:c0:7b:45:0d:01:cd:0d:d3:09:be:37:01:a2:
         9e:14:92:6f:3a:9f:af:f9:44:c0:2f:cf:b1:9f:30:bb:6d:d5:
         61:7e:fe:9e:b9:af:46:b8:7e:28:4d:f6:64:69:6c:7b:d7:a2:
         c4:03:99:75:20:cd:1e:97:77:53:1a:8a:b8:97:6a:1c:43:73:
         56:bd:b4:fa:55:1d:6b:8e:e0:3a:c9:eb:cf:59:c0:e3:9d:9c:
         aa:f3:c0:9a:e1:b8:80:8e:9e:e7:b3:1a:6c:ac:aa:24:6d:56:
         50:fd:5e:a5:bb:3b:c5:54:d0:b6:c3:12:83:23:e3:e8:6b:1e:
         72:d2:df:39:ac:43:e9:df:b3:d0:8d:69:95:de:d6:b9:1d:67:
         30:f8:ff:2b:a0:82:0b:fe:a4:e6:b9:6f:01:7d:f3:be:3e:3f:
         e4:43:cf:69:16:85:61:82:69:a5:e8:ac:25:13:1f:97:10:19:
         af:25:5c:80:a2:c8:ed:f7:88:7b:5f:c6:96:ef:21:07:e2:9e:
         0f:e6:f8:e5:ad:f3:be:11:49:f0:25:7f:6a:29:29:9f:cd:89:
         f2:7c:94:e3:0f:e1:1b:05:cd:09:5d:41:c8:0b:cb:8e:8e:d6:
         75:a1:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----