Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File:                     t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier:          UmhZ309rW3Pq8kVsgQb2B3WD+BLDaColtA+dIUaK0Qw=
Subject key identifier:   1B:E0:4B:D8:8F:08:F2:FA:E1:48:38:02:F8:0C:EE:09:51:46:4D:32
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer:       /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial:       01962E995B49EF67B654B5D3C71F3F121462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: 4k2m6oWhbCxHwu7ZoOs8FYwRSeo.roa (hash: 0X2CSeSS5EmJeG6XWlWGwSVUMGQ8gwE0QRYVBIvMpS0=)
                          2: DVTN6UDTMLciD2vdICL_CmxW5h0.roa (hash: lGGJwHWs8Ee+gESMD4HQV9LD4VTGYiiCY92mtSXN+g4=)
                          3: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: kkHMp519zflgmzPDl8iDMTvZs8fTqjmPdOQ0UayibBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5b:49:ef:67:b6:54:b5:d3:c7:1f:3f:12:14:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=1be04bd88f08f2fae1483802f80cee0951464d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:bc:95:c2:c7:c1:7b:0d:da:7e:d6:77:81:
                    43:69:97:dd:b2:c5:20:c7:b0:e8:58:fd:84:6f:fa:
                    a0:21:fd:58:b5:62:c1:cf:9e:50:91:09:fd:7c:b9:
                    3a:0b:5b:65:d4:55:25:4b:ec:52:52:d5:88:15:b0:
                    14:a1:77:10:96:6c:c0:1b:98:a3:06:8c:eb:5b:c0:
                    be:6f:15:e5:1b:54:ec:3c:f8:9d:5a:8f:ea:41:75:
                    84:6c:29:f8:6d:05:00:10:c7:a9:2e:ac:de:12:15:
                    55:8f:c5:ab:e4:3d:6e:d8:a1:5b:16:7f:9b:92:80:
                    be:26:28:84:02:f2:07:f9:4a:d0:97:45:59:09:1d:
                    2e:70:32:d2:16:69:30:82:ba:46:56:28:30:61:89:
                    d1:fd:1a:47:64:a5:82:bc:4f:7a:b6:a3:b1:8b:8a:
                    37:00:c4:5b:50:44:76:fd:8c:46:67:d4:0e:8e:e9:
                    b8:ec:d9:7d:6d:d4:9e:25:30:ad:60:28:67:95:b3:
                    f0:7c:2e:5f:7c:90:09:dd:84:f3:ec:79:79:ac:82:
                    fe:c5:cd:7b:0c:4e:f8:d6:01:fb:40:1e:da:62:9c:
                    3f:87:e7:55:1e:1a:e4:0f:51:d1:c8:09:ce:6c:e4:
                    a4:38:84:df:1d:87:ee:38:e7:8d:30:da:b1:eb:f6:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E0:4B:D8:8F:08:F2:FA:E1:48:38:02:F8:0C:EE:09:51:46:4D:32
            X509v3 Authority Key Identifier:
                keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:36:c2:e3:86:4f:d1:63:2e:fb:ef:ba:50:e9:fb:c1:ec:a8:
         c5:c5:53:d1:42:85:20:3e:ff:b6:3c:97:00:dc:b5:5e:b8:5f:
         bd:e7:8b:ad:ec:08:27:25:72:bf:9e:a8:1f:a0:6f:89:45:b2:
         c0:aa:cc:65:eb:6a:57:46:d1:62:d5:0c:84:13:1e:ac:d5:0d:
         80:11:d6:89:1b:4b:82:e6:47:b0:03:43:c9:48:57:3a:eb:4e:
         69:b8:be:54:57:19:ac:ac:cb:34:cb:14:86:36:2e:14:a8:5a:
         95:1f:e4:ac:4a:94:4c:7f:2b:2e:43:ee:8f:0a:d3:2a:46:2d:
         2a:d5:5e:06:d0:08:1f:bd:6e:34:2f:2d:a0:d2:e8:7b:dd:af:
         ce:cd:07:43:d6:71:8d:51:9c:4d:b3:43:0b:a2:cf:27:e5:e7:
         a8:77:b2:64:0c:97:fd:35:84:fd:54:a7:a2:16:2d:92:1d:03:
         94:40:df:ae:9b:3b:d4:d8:5a:55:48:66:19:a7:ce:c0:2f:aa:
         08:59:7a:25:13:99:7c:fd:fa:5a:a0:cb:af:53:f8:7c:ad:fa:
         28:98:16:3d:f5:2c:df:59:8f:81:0a:fd:16:b3:73:0a:5b:52:
         5f:68:ca:c7:58:ff:e7:6a:16:88:79:c7:b5:56:4f:57:00:0e:
         00:a2:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----