Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File:                     tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier:          5TTkdAq8qfZDAQrEVybFSOCMLN1U0ue0NpT0NIiP0rQ=
Subject key identifier:   E3:23:C9:3D:D8:0F:06:D8:12:29:76:E5:88:6B:F3:3C:7F:10:49:B7
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer:       /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial:       01962E991194E9527817B0AD895825F699D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number:          0C69
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: IyUSdY+kO8VbrGtcBFQDE/fwPAdSGQC5oUz00UhOYrM=)
                          2: uvCFX9itk7RPxPZl6lvvghFjg1E.roa (hash: P3N8o135VPbcqFaS3kCnXkMSVi3GCBY96T9QuQyMyig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:11:94:e9:52:78:17:b0:ad:89:58:25:f6:99:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=e323c93dd80f06d8122976e5886bf33c7f1049b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ce:12:95:d0:44:25:c5:d1:6e:9c:76:a5:1c:
                    f0:ab:92:a2:7f:c4:56:e1:dc:86:ac:4c:d9:41:3a:
                    b2:87:e9:ab:3f:06:4d:87:b0:89:e9:ff:87:93:a7:
                    7f:ca:65:73:64:38:ba:a5:94:37:bf:ed:50:db:6d:
                    06:7a:94:ad:5c:14:b4:05:45:e5:91:45:02:7a:1e:
                    f1:a5:3c:54:1d:94:af:7b:2f:b8:c7:ea:1f:ad:11:
                    1d:ff:f0:69:ce:7b:9c:10:be:82:cf:55:c2:b4:a2:
                    61:e2:9e:12:a7:2a:4b:e8:8f:f6:15:02:11:9f:7b:
                    9e:2e:05:eb:e9:d1:f1:d9:5b:33:44:53:9e:56:91:
                    e7:52:c4:de:ed:67:84:8d:d5:87:24:c7:d3:ed:fd:
                    75:80:9b:47:80:f7:42:89:25:18:9c:07:3b:f3:6e:
                    a6:e6:ef:47:36:db:b7:4e:33:a3:6f:46:fd:9f:75:
                    22:43:23:ac:da:75:c7:44:20:e6:2f:74:e7:54:84:
                    fb:e4:54:a9:41:67:63:99:a0:b2:37:57:33:24:e6:
                    52:c1:ff:f5:94:00:ec:05:0f:50:c5:aa:89:64:65:
                    ca:a9:d8:b5:f7:54:bb:87:2c:fe:16:2d:d3:f2:e5:
                    14:a2:fa:12:50:ab:ea:e2:5a:fe:3a:ec:37:cc:e1:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:C9:3D:D8:0F:06:D8:12:29:76:E5:88:6B:F3:3C:7F:10:49:B7
            X509v3 Authority Key Identifier:
                keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:32:4d:f9:ba:27:4d:7f:b3:79:cb:0b:06:f3:9b:eb:d9:74:
         e2:35:f6:2f:25:73:1a:90:cc:04:73:d4:64:41:fd:7b:f2:0c:
         3d:b4:33:e2:ed:b2:49:22:93:c8:2a:67:4a:a0:1d:b8:36:64:
         6a:ee:8c:bb:03:31:cc:36:15:a9:27:ac:62:49:11:bc:d7:ce:
         b1:a6:30:4e:3a:35:5a:0f:dd:04:1c:3b:f6:e3:3f:91:37:97:
         18:0e:4c:f4:d2:95:e3:74:66:f2:bc:93:64:f9:7e:05:96:6a:
         6f:18:74:02:3d:50:3a:ea:bb:f9:8f:5e:64:de:15:6e:73:e1:
         a3:bf:68:86:7c:66:d6:8e:d8:da:86:9c:49:b3:05:11:e5:0c:
         33:4d:e9:1a:85:3b:97:d3:52:ba:b4:8b:ae:8f:45:51:ec:4b:
         0d:d6:bf:a5:6a:7f:75:04:df:5b:a0:44:29:57:ed:d6:c1:b8:
         50:65:f0:25:27:fd:25:e5:e2:67:40:28:0a:c2:8a:83:5e:08:
         ee:98:99:23:19:1e:3e:7e:16:8a:39:18:b9:57:b0:31:d6:a6:
         56:6b:d8:85:6a:bd:e8:48:3a:92:89:d3:d1:8c:2f:06:07:78:
         4f:55:f0:df:fb:0a:3d:00:64:ce:2c:d0:20:86:08:74:20:4e:
         13:0b:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----