Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File:                     tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier:          VYGLauKozuosuRML1lPlYewzvXZb5UStX/cB09BW+cE=
Subject key identifier:   45:42:D9:F7:7C:73:8D:33:42:05:B8:2D:61:BD:F4:7C:C9:74:63:DA
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer:       /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial:       01962FAB2AC4D349C3712040D3BD1FD2F4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
                          2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: w1mPjnV/Jbec6RO1o2+MrDW/770ulWnzaqV2MOgrIqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2a:c4:d3:49:c3:71:20:40:d3:bd:1f:d2:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=4542d9f77c738d334205b82d61bdf47cc97463da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:67:05:17:0d:0c:ab:c1:28:6f:b5:6e:90:
                    90:ba:67:44:b5:2e:19:f1:bc:ee:93:22:22:02:e4:
                    f4:81:4b:da:66:58:7a:81:08:ce:2d:34:7c:5b:c2:
                    f0:ad:5c:28:e3:2e:b6:ce:06:2c:56:4d:72:3e:70:
                    77:da:10:64:60:33:25:0d:44:e6:40:1e:32:d5:08:
                    94:54:f5:55:44:d6:07:16:aa:a1:27:3a:1a:ff:84:
                    a9:7d:ff:e5:55:1b:70:d2:69:97:df:87:f7:b0:02:
                    bc:72:e2:08:1b:13:a1:ef:90:53:4e:7b:ad:f0:cb:
                    55:35:da:1e:69:b0:81:0e:a2:0c:48:c1:eb:ef:f1:
                    08:bd:69:58:22:eb:c6:ee:19:d8:e9:8e:ed:71:f4:
                    24:3b:d7:7c:40:be:37:3c:1c:a9:57:e5:4f:1b:50:
                    c7:3d:4d:fb:12:dc:d1:9e:bb:2d:61:0f:07:34:16:
                    18:be:37:9a:84:3b:37:ff:5d:11:f8:73:5f:04:c2:
                    46:5a:3c:34:b7:df:2e:ba:89:0f:da:03:dd:ae:f4:
                    06:0e:66:08:16:83:49:2a:82:59:8e:42:64:4a:4d:
                    59:c6:49:1c:7e:99:cc:22:88:0f:d3:f8:7c:ac:5a:
                    d9:36:96:b1:70:7f:52:7e:8e:3d:4d:30:ea:c4:9d:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:42:D9:F7:7C:73:8D:33:42:05:B8:2D:61:BD:F4:7C:C9:74:63:DA
            X509v3 Authority Key Identifier:
                keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:eb:c8:67:f4:23:fe:71:b1:19:4c:a7:08:3c:96:75:0e:fe:
         a3:c5:6b:ea:37:23:09:27:6b:5f:9d:e4:de:2d:64:78:a0:63:
         2b:2d:d7:2c:fe:9a:cd:8f:48:f8:65:a2:f2:85:df:a0:9f:2a:
         40:ad:1b:18:59:6b:ec:cc:71:85:2f:bf:3e:43:3c:b1:bf:32:
         d5:c6:f5:76:54:96:d2:b3:d1:93:1b:b4:fe:3e:31:43:13:2c:
         ed:e0:cd:31:a6:b4:5b:eb:5f:45:0b:83:65:39:c9:be:3b:cb:
         b1:24:64:d5:02:be:ca:a4:6f:7f:e5:ec:37:d2:f7:51:05:23:
         29:e9:4e:a2:d4:fe:d5:59:7b:47:c8:08:0a:7b:3b:0d:af:a1:
         88:bc:43:f7:36:d3:9a:6b:5b:55:17:71:01:43:bd:b2:dd:f7:
         5d:80:3a:05:2b:62:13:15:21:34:33:94:83:2d:51:62:34:b9:
         d6:be:d5:af:6a:0f:d1:d3:13:be:95:58:56:81:73:01:4d:7c:
         bc:94:37:d8:85:b4:42:d6:a0:69:61:5d:e6:fb:bc:e8:6d:dd:
         89:55:d2:4c:fb:4c:4d:ff:dd:cd:57:9c:1b:bc:50:93:9f:e9:
         2d:49:70:da:09:e0:9d:c3:29:14:74:df:70:23:6b:80:c3:f7:
         53:2d:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----