Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          VFYvlxoqR9UyQfLrhgVKtf8JWGFgpjOsxkvkYCtH3tE=
Subject key identifier:   0F:63:54:1B:C3:E7:F2:C4:9C:82:CB:AA:95:23:8A:88:8B:E5:9B:E8
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       01962F3DAEDFCE52C052795503642C76CEE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          157B
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: 3u5ZahOyBhUNG6vDZ4hRGCrx5AE.roa (hash: HJZxVsPJLjA3XvzP/RTBRhqyf06FeLW1mBD5DxrU/Io=)
                          2: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: Q5Rs6h1sq++bcf+Ro4vr6bNmCiOP6Pwo+P4znXd3FDA=)
                          3: TbmmnzuLCLV_rT2NRsiOU33FB6o.roa (hash: 77EfzF4GhZr8ViG+a2ISE3I0NZzlCSQ7tOGtUqmlj6I=)
                          4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
                          5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ae:df:ce:52:c0:52:79:55:03:64:2c:76:ce:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=0f63541bc3e7f2c49c82cbaa95238a888be59be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:16:cb:8a:d8:87:c5:4e:df:c7:e7:74:ea:
                    15:63:8e:1f:e0:b3:fc:74:a9:2e:90:5f:22:05:1b:
                    19:62:a7:b6:ff:5d:cd:d6:11:3c:2b:a9:19:29:93:
                    a0:76:28:8b:93:62:40:b6:f8:53:ba:d9:6f:bf:8d:
                    ca:3d:f4:9c:cd:76:c6:ca:cd:59:f3:e7:3f:43:50:
                    42:03:87:4d:2f:53:3b:fe:0f:40:a2:77:d3:ad:9d:
                    e9:d7:73:97:0f:df:79:ad:d6:e6:48:09:6b:54:d3:
                    1c:ff:31:66:5d:3a:21:5d:94:dc:56:73:89:f5:bb:
                    0a:52:2f:b8:08:71:4a:c4:93:f2:2d:65:a7:9e:7e:
                    33:61:a2:fd:3f:14:72:30:e1:58:e3:4b:b3:30:8d:
                    28:32:36:9f:21:32:3a:3d:df:41:27:0d:12:d0:4e:
                    73:73:c3:15:b9:ca:7c:05:ed:e2:07:96:c9:2d:2c:
                    28:d5:ab:5f:f3:6d:91:1f:34:9d:50:34:81:0b:74:
                    73:e4:75:18:cb:2a:7f:2a:78:08:8f:80:43:92:85:
                    44:18:c3:77:af:53:ac:1f:b3:ca:0c:a8:e6:0b:27:
                    d9:99:91:a9:44:37:68:8e:33:22:ab:84:60:8f:6e:
                    0e:41:7b:d9:a0:77:6a:fa:d6:d9:96:2f:97:8c:9a:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:63:54:1B:C3:E7:F2:C4:9C:82:CB:AA:95:23:8A:88:8B:E5:9B:E8
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:50:7a:2d:50:01:59:30:d7:57:bc:e2:87:f7:ad:24:c2:
         14:9c:04:ed:42:82:49:e8:52:16:f9:2b:2d:05:f9:ac:76:79:
         3b:d2:91:f6:d8:7d:5f:52:9d:75:29:08:d0:fb:43:1c:fd:f1:
         74:a7:24:76:cf:84:50:4d:c3:82:c9:d0:54:37:d4:91:56:02:
         ad:52:60:34:45:6c:33:dc:1d:74:a1:1c:d5:e2:d1:a9:2e:21:
         e3:1c:d6:58:f3:69:96:70:24:71:bd:40:c4:0f:4e:58:c1:ae:
         de:dc:26:6f:80:b0:53:cf:0d:3d:d3:4e:ff:87:0b:59:66:71:
         e7:70:08:4f:04:fa:e6:96:f6:96:b4:cd:2e:fd:43:ac:9b:0f:
         a9:93:34:a4:e9:9e:fe:a6:13:1b:fd:bf:06:2e:55:c1:4d:03:
         ae:0c:36:5d:87:4b:b8:f0:4d:05:58:69:28:7a:d6:fc:a9:90:
         ae:1a:6a:90:60:67:96:02:79:fb:0f:ae:ea:51:0f:01:f2:4e:
         9c:9e:04:ce:1a:0e:8f:99:55:79:2b:0c:eb:4d:1c:65:ef:cb:
         01:02:72:9f:35:d6:bf:34:0b:e6:0f:0d:27:6c:14:92:77:10:
         63:24:87:6e:d4:2b:5e:22:14:11:d9:33:66:e9:93:a8:f0:67:
         bd:39:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----