Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File:                     t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier:          pq3Y5+NZIZp0ADgRWJXSqnUKZOqKtTmfIO0JZxwy3YY=
Subject key identifier:   87:A0:1E:59:A9:C5:33:7E:B3:B2:6A:CD:F8:6A:2E:F7:D6:C3:3F:DB
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer:       /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial:       01962E620858769E59D7722C610B7F2DA1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number:          0585
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=)
                          2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: +9LgOorgCZHqP6acjU5f3RDp5DO7RTrESTdqhkqRdUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:08:58:76:9e:59:d7:72:2c:61:0b:7f:2d:a1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=87a01e59a9c5337eb3b26acdf86a2ef7d6c33fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:6f:eb:7a:c9:89:2f:66:39:95:63:74:12:
                    a9:89:d7:df:e3:3d:97:27:3b:c4:a5:38:97:4d:b5:
                    d7:71:20:9c:c2:95:b5:d8:67:ef:92:92:38:69:9b:
                    e0:1b:76:87:8d:41:0d:b5:e3:b7:c9:9d:da:5e:51:
                    56:33:b3:f7:e6:3a:3e:66:bb:e6:55:eb:24:83:9a:
                    00:64:77:4e:fb:0e:8f:f1:21:46:4d:d6:73:c3:f6:
                    eb:a3:ee:8e:10:33:5e:51:2d:fc:57:17:39:71:ee:
                    a4:10:15:27:e3:f0:d3:9d:0e:20:84:43:47:19:52:
                    c8:7d:9d:c2:f2:a7:cf:cb:14:02:0a:5d:88:ef:95:
                    56:67:67:e5:91:77:83:5a:16:77:f2:66:3a:5e:93:
                    cb:d6:1a:21:fc:ec:dd:c9:2d:d0:ab:c4:8a:ec:3b:
                    8b:61:3a:5d:51:00:70:99:b4:29:32:d1:ec:57:c1:
                    9e:70:71:29:14:7d:93:ff:f3:31:ac:c5:5f:ef:91:
                    9d:01:12:2b:45:c4:ff:0c:ab:31:0d:0e:5a:0c:ef:
                    10:62:e1:d0:31:d8:65:6f:24:7b:ff:b7:f3:e8:e7:
                    20:68:83:1b:4c:b6:24:76:98:e1:28:e4:eb:b9:26:
                    f6:e4:d4:af:f5:af:70:43:de:aa:b4:f5:83:db:81:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A0:1E:59:A9:C5:33:7E:B3:B2:6A:CD:F8:6A:2E:F7:D6:C3:3F:DB
            X509v3 Authority Key Identifier:
                keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:da:5b:10:50:4e:3f:ed:c0:b3:5f:6b:ee:03:af:76:14:
         2f:4b:fe:f3:9c:d1:79:3a:76:74:c4:9c:ea:07:67:c6:d4:b2:
         34:6f:a7:19:1a:a3:a9:4a:95:ab:50:65:f3:a5:90:76:eb:2e:
         9e:d9:b7:4e:01:a4:af:ef:96:10:f9:ec:59:7d:e9:e4:a9:40:
         63:bb:2e:e6:e2:98:52:c9:26:80:17:6a:32:a0:a7:a1:66:fb:
         74:e9:a2:7c:fd:d5:36:32:00:da:30:33:39:15:47:41:f8:8a:
         62:8c:91:f6:1b:3a:02:fe:ee:4b:d6:5f:de:9d:6e:3e:25:76:
         e6:7c:b1:db:2f:14:0b:35:20:de:04:05:df:7f:ed:a1:ea:36:
         93:57:1c:68:0c:92:1a:0e:5b:fb:20:6d:90:4d:f6:c5:25:fd:
         ac:77:84:8b:b9:cf:a6:ce:4e:22:89:8d:3c:8e:28:d5:5f:86:
         ce:ae:07:ec:1f:d4:fd:0d:3d:e9:60:c9:c8:ff:f2:83:25:d3:
         97:9d:e5:6b:aa:ee:79:bb:4b:1e:f3:f5:36:76:e7:0e:d9:6a:
         3a:f9:46:14:e6:71:56:bb:01:b6:09:55:46:1f:65:f7:2b:7a:
         5d:24:76:47:0f:c3:65:39:ea:e8:48:76:90:2c:68:8f:ee:84:
         2c:b2:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----