Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File:                     txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier:          uE3zrQYFkkhut0l/TylUVlmGtMm0r5lb68kfQNvxcjc=
Subject key identifier:   1D:71:7B:41:C6:2A:EC:63:5D:5B:C0:13:B4:69:94:47:5D:69:E7:50
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer:       /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial:       01962F0699FFB4B3DD3CDCAB708461000FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number:          02DF
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
                          2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: cQA6XVT/QtNsplIrG+OBLfuldL7YcLroZqElbKiVlgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:99:ff:b4:b3:dd:3c:dc:ab:70:84:61:00:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=1d717b41c62aec635d5bc013b46994475d69e750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:5a:aa:8a:3e:4a:66:1f:7f:a5:7d:e3:4f:
                    aa:41:14:a8:0f:a0:16:7c:79:26:ee:c8:1d:7c:a7:
                    1a:21:75:73:5e:86:62:11:e3:51:eb:a7:35:ac:8e:
                    75:96:33:c1:dc:09:05:bc:0e:35:bd:92:95:02:4d:
                    87:d3:b3:28:f3:35:c2:be:7e:58:ea:71:b8:8f:7e:
                    8d:e1:16:5b:97:90:44:cd:8a:93:ee:7e:e1:34:fb:
                    0d:42:bc:67:aa:b3:a7:3a:e3:fd:45:f2:55:47:d7:
                    99:3b:02:a2:e5:3f:08:c6:3b:d8:c2:43:5f:a5:ac:
                    41:b1:12:24:bb:44:c1:cb:e2:6b:d1:dc:82:8f:6a:
                    95:3c:f1:52:fa:f7:94:aa:fe:52:55:62:0a:91:78:
                    2f:dc:65:b5:4c:59:ce:d8:c0:ec:ad:c7:1f:33:a1:
                    35:b7:96:fd:6c:b8:2a:e3:52:b6:13:3b:9e:d0:5d:
                    ce:9c:5c:e1:b1:aa:cf:2e:70:10:0a:69:b1:22:97:
                    be:d4:8b:3b:ea:90:40:80:57:59:d8:f9:c2:dd:d2:
                    43:41:62:1b:bf:5c:64:bd:b2:6c:13:0a:d1:0b:a4:
                    4b:95:7c:94:dc:8e:a8:02:e3:19:d1:d6:0e:0f:08:
                    ee:e5:20:c2:d8:7c:84:81:80:f2:99:cd:c1:f9:05:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:71:7B:41:C6:2A:EC:63:5D:5B:C0:13:B4:69:94:47:5D:69:E7:50
            X509v3 Authority Key Identifier:
                keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:48:50:f6:8a:08:96:82:8a:78:8f:bb:b4:b4:63:90:18:e9:
         9b:09:fc:a2:e7:94:39:da:a0:52:fa:f9:27:5e:91:5b:e8:44:
         b9:46:b6:5f:9f:c9:ab:99:de:16:e3:9e:f3:16:fa:69:14:75:
         3d:2e:ae:49:cd:82:63:1f:81:cf:74:b6:a7:68:4e:f8:b6:3e:
         12:67:80:8f:81:b9:c1:a0:b8:f9:2c:75:68:0f:49:eb:55:e5:
         96:25:d6:5a:ac:d9:b0:fa:e9:1a:92:c1:cd:33:e5:48:10:9c:
         af:98:fd:0c:9a:54:d0:72:79:ba:93:a5:43:08:27:73:7b:7e:
         1b:31:47:08:dd:e8:49:9a:00:cc:fe:e0:b8:33:28:52:d9:3e:
         5a:31:14:b2:32:90:75:50:53:14:9b:58:c4:e8:03:b1:cd:0d:
         94:e2:0a:a7:c7:5e:35:bd:3e:3b:a4:da:85:e6:32:d1:06:56:
         29:d3:c2:54:5c:ea:12:4b:18:41:95:63:c5:33:08:8d:fe:bc:
         0c:a8:6f:69:88:f7:6d:e6:ca:d9:eb:e4:8c:f3:bf:44:99:ad:
         cc:85:7e:c9:e5:e3:a4:fe:72:c1:c1:5c:f2:9b:1f:1f:1e:f5:
         61:e8:e2:ef:b0:a5:01:be:65:7a:1d:10:28:fb:33:6a:30:1a:
         34:77:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----