Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File:                     tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier:          3/moS4jc/6yW0YLbF4PHe9uQI8OvLyDwhXdKGjGVFss=
Subject key identifier:   8A:BF:EE:17:28:78:E0:DA:56:9C:29:A7:D2:9D:D0:31:A7:8B:9E:B0
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer:       /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial:       01962F744E40002C685E96FF5C63197F8384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number:          0C62
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: Cr7WIZXJqqSxx1MgWk3fJvY56gA.roa (hash: W0p2Ng/L4A+CUhGlPSgje47dkJ8+aMEjdUAnh4zo9Rc=)
                          2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: NNzq8tA7UDk4tvYObVRrAIefqiOuzEsWUBMK2buUDyQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4e:40:00:2c:68:5e:96:ff:5c:63:19:7f:83:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=8abfee172878e0da569c29a7d29dd031a78b9eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:82:96:27:67:90:b0:57:c0:0a:1f:67:40:
                    0f:51:32:a2:92:05:57:97:79:1f:7a:0d:ef:06:68:
                    9d:12:67:17:0e:36:5b:ce:15:27:36:29:3f:c6:a1:
                    aa:8b:b2:69:c3:cd:6b:fe:9c:f8:3f:24:af:3f:52:
                    5f:42:38:50:e4:b9:4f:82:74:73:fd:83:34:2e:88:
                    c5:64:4b:f0:a6:e7:fa:47:ba:89:d3:8c:e8:11:bd:
                    f9:ff:65:95:d8:f3:37:0a:99:7a:5b:02:b1:37:80:
                    58:9e:6f:89:42:1c:ea:8a:a6:70:27:cc:b5:99:e2:
                    f0:b7:09:e4:b8:de:4c:47:75:28:11:6a:83:52:ef:
                    8f:e1:8f:96:1d:79:25:f8:c2:c8:e2:51:0c:c9:ad:
                    c0:d1:e0:06:02:0e:64:24:e1:40:c4:d7:1c:13:40:
                    0d:43:f6:da:80:f5:93:34:d3:a5:36:7e:6a:8f:10:
                    6c:4d:e2:6a:32:ca:e4:cb:62:20:b5:59:42:3a:ac:
                    2b:f5:31:b4:36:ad:71:c2:18:2a:8b:ec:f9:ef:78:
                    67:17:02:6c:3c:83:33:9d:ce:53:48:e6:6f:fc:7b:
                    1d:f1:17:fe:cd:b1:7a:9e:c5:f7:6b:be:77:77:e0:
                    ab:ea:84:c6:69:15:9f:09:a6:bb:ec:86:41:94:e6:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BF:EE:17:28:78:E0:DA:56:9C:29:A7:D2:9D:D0:31:A7:8B:9E:B0
            X509v3 Authority Key Identifier:
                keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fe:a9:cb:72:8e:91:75:01:53:ca:40:c5:20:10:c0:15:d5:
         73:46:84:75:a5:02:01:70:01:b2:c5:59:dd:7a:3d:da:5f:59:
         4c:84:7a:6a:e6:57:1a:41:2d:48:e0:b1:ef:81:42:b8:92:d5:
         4f:9a:20:45:66:a7:e3:41:04:9d:fc:7c:e8:50:94:e6:2c:c3:
         5f:b9:b2:ec:71:d2:b0:dc:76:a7:34:31:51:8e:5c:fa:3a:d0:
         1d:bb:8f:32:92:d2:f1:4d:6d:da:19:2b:c2:2c:31:b5:12:65:
         79:66:5f:a2:6f:36:db:34:7a:24:3e:e1:eb:b2:97:d8:6e:d9:
         f7:15:d5:fe:60:58:ea:8c:28:66:a7:47:64:88:69:d1:bd:38:
         26:5c:bc:97:ef:eb:10:92:05:fc:04:fe:0e:23:1e:78:c6:68:
         ec:4c:43:7e:dc:e4:1b:98:c0:2d:82:df:5d:45:ec:e3:15:f6:
         d8:d3:9a:34:bf:48:79:88:e3:44:3e:94:a1:b1:1c:a5:b9:7d:
         13:ea:44:6a:08:18:7e:98:17:5e:50:05:0b:ae:ad:f2:d1:f4:
         7c:31:9f:31:fe:42:42:05:45:55:5b:1b:0f:9c:b5:22:6e:68:
         2e:bb:8d:ff:2a:df:96:36:53:c0:cb:66:25:fa:71:cb:5a:20:
         34:c1:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----