Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File:                     txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier:          DYZwurw7Bi65ggkOgOPLTyPQV+0pMoMUUqI9pA9QCVU=
Subject key identifier:   8D:44:C0:1B:39:8A:AA:1D:1D:3C:FA:41:96:74:63:46:E8:D7:73:95
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer:       /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial:       01962F74BF2AF792CA899F62123B1A875560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number:          0F4C
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (hash: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=)
                          2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: 5lQZUXX/7O6YUNz2NVVkbHZes/dKj/GgMpiZ6lprDJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bf:2a:f7:92:ca:89:9f:62:12:3b:1a:87:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=8d44c01b398aaa1d1d3cfa4196746346e8d77395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:00:74:b4:18:4d:c9:c2:c1:ff:bb:d4:1b:
                    d0:cf:ad:1e:34:7f:c4:68:1c:59:5a:b2:d1:97:34:
                    26:8c:aa:c5:10:48:2d:9f:12:6a:18:78:50:f8:fd:
                    10:67:db:21:08:e2:a7:5b:1a:a2:b5:27:f9:b3:37:
                    8f:58:d2:ea:92:b4:d5:41:e5:6f:c3:b3:03:3a:08:
                    ad:38:70:85:fe:5f:3c:10:38:67:1e:86:85:3d:6d:
                    c3:73:02:76:60:a4:3d:f1:cb:9e:de:47:94:33:06:
                    50:87:61:33:12:1f:7b:b9:c3:ea:9a:52:a6:1f:93:
                    b6:35:ff:45:87:30:be:4c:33:02:26:6e:fe:29:e5:
                    99:57:ab:e0:40:f3:92:68:5b:75:a9:24:58:30:c2:
                    45:64:d6:1e:30:87:03:32:b4:70:57:4d:2e:2e:70:
                    f5:6f:c6:b1:ed:2d:4b:4c:e4:88:20:27:0b:95:d5:
                    9a:cb:77:35:5e:8e:b7:80:32:21:03:b6:54:4f:8e:
                    44:de:f5:14:7e:20:14:de:00:30:2d:62:80:97:d2:
                    cc:3a:e9:fe:96:27:06:89:e3:0c:a3:9c:37:57:36:
                    58:31:1d:49:fb:6c:75:17:53:8c:ac:09:ae:ef:9f:
                    7f:a3:02:fc:c9:17:a2:37:a2:11:b8:1c:05:da:74:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:44:C0:1B:39:8A:AA:1D:1D:3C:FA:41:96:74:63:46:E8:D7:73:95
            X509v3 Authority Key Identifier:
                keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a0:12:37:69:fc:ad:fc:36:54:26:a9:72:92:af:90:c5:a1:
         ae:4b:df:7f:07:06:42:97:cc:4f:40:f8:fb:4e:77:8b:f5:7b:
         64:1e:45:02:6b:8b:1b:40:17:63:13:30:c2:36:42:94:ac:3e:
         69:40:dc:a6:0f:a4:aa:08:a0:24:3c:2e:b7:d9:86:ab:83:e5:
         03:74:e4:a3:39:f6:0e:4b:85:33:c1:82:e5:11:93:51:60:47:
         61:87:61:db:74:2e:dc:78:6a:19:ea:e8:38:3c:a8:a9:0d:35:
         8a:29:a8:81:0d:3a:42:80:7b:44:28:de:66:d9:4f:73:7f:0c:
         04:56:4a:b9:2a:d7:d2:c3:f1:f9:c2:8c:f6:0d:ae:3c:48:28:
         bb:08:95:c1:42:83:0a:f4:ce:b1:e1:ad:55:68:44:70:38:ce:
         d4:a1:2e:d9:01:c2:ba:b9:36:c8:c8:f6:ee:59:e2:d3:55:00:
         33:18:ac:16:85:c2:94:c0:3b:e5:49:34:9e:b9:42:14:28:97:
         2a:19:dc:02:50:21:48:5b:dc:c9:6f:88:17:b8:4f:4e:e7:66:
         74:0f:7f:dc:09:9d:71:67:b6:d6:4c:5e:e9:ed:38:cb:cc:40:
         cb:85:ac:74:95:32:1f:5c:87:05:df:d0:6f:a8:e0:82:40:07:
         8c:88:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----