Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File:                     tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier:          s4J6A2+sAsIvB4BWlr2oU+Q88vSInX0HkCsItxYARKE=
Subject key identifier:   7C:CF:DE:38:51:0C:5F:35:79:D6:93:80:64:7C:7F:44:9D:D2:FF:42
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer:       /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial:       01962E998BC1EA00F0EE0D55602CE7A76710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number:          0844
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: 5moGvKAoN95-3rdirRXOwCahhvs.roa (hash: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=)
                          2: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (hash: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=)
                          3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: bklCCjfIn5MYjSty1u4lHeUM9NtiM2gDTEMfipAazsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8b:c1:ea:00:f0:ee:0d:55:60:2c:e7:a7:67:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=7ccfde38510c5f3579d69380647c7f449dd2ff42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:ff:f3:23:0e:8c:1b:41:d6:73:42:da:00:
                    97:b2:2a:cf:8f:af:b5:26:e1:7d:3d:44:92:1a:e5:
                    af:d2:28:2f:b6:87:04:7e:4b:a3:c3:50:3a:c0:c2:
                    70:e2:32:ac:ca:fe:12:04:51:5b:ed:2f:d9:1e:bd:
                    18:93:65:28:44:b6:ed:3b:39:4f:21:81:93:b4:47:
                    25:d2:4c:8b:6c:c1:93:62:a7:c2:ef:28:99:3f:92:
                    15:ca:74:91:33:3e:75:f4:9b:02:72:a4:ff:21:a4:
                    9f:dc:20:95:69:32:c2:ea:1f:02:ab:4b:38:a0:e9:
                    48:4e:31:46:4f:bd:73:53:3a:76:6f:91:bb:58:e1:
                    06:ad:ab:49:b3:08:52:ee:5f:41:71:15:55:b8:f2:
                    5b:a1:e7:35:d8:b3:57:b4:19:ab:bc:6d:db:bd:3d:
                    f5:48:bc:91:47:61:98:87:ec:df:f5:7c:64:92:3c:
                    9f:d6:4e:3b:9c:a3:28:78:23:e3:3e:fa:d9:e4:2c:
                    4d:b6:ea:9e:53:17:2a:d0:80:86:6b:7d:8e:a4:e6:
                    90:e2:98:cd:1b:ac:23:85:98:6a:b7:53:ca:d6:b3:
                    5d:d6:0d:94:bf:b4:02:fd:b5:33:f5:ed:38:c8:ac:
                    a8:cb:e7:f2:75:4d:1b:81:1e:e4:a7:9b:6a:5c:56:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CF:DE:38:51:0C:5F:35:79:D6:93:80:64:7C:7F:44:9D:D2:FF:42
            X509v3 Authority Key Identifier:
                keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ff:71:4c:2e:41:e9:fa:04:b6:8a:10:ab:1c:3c:c3:b6:c6:
         f1:1d:3f:76:54:85:05:fc:55:cf:f3:1e:0d:c3:9b:80:7c:96:
         8e:e1:0a:0a:c1:e7:b6:25:c6:9f:0f:d5:14:28:e8:83:de:07:
         77:68:c0:ce:9e:de:8c:9f:f2:f5:6d:7c:d2:32:ce:fc:1e:21:
         01:28:37:dd:05:ab:14:e4:3d:71:64:eb:b4:61:23:26:79:9d:
         b0:29:cb:33:a0:1a:ff:34:ae:b0:00:05:14:3c:f0:6a:44:c4:
         b0:fb:f8:6a:fc:f7:6e:4d:34:4b:4b:1f:a4:ca:68:27:02:39:
         3f:e0:9e:cd:d3:0e:32:b7:e4:61:51:45:1c:80:7c:61:f5:50:
         73:ab:a1:f4:5a:f9:30:67:9c:77:22:a1:9d:04:9f:7f:af:21:
         38:86:f7:30:ad:64:23:2b:96:65:e4:9d:14:90:2c:5d:cc:16:
         92:16:9c:d8:20:ad:bb:bf:c8:6f:0b:4a:a3:1c:ec:74:52:bf:
         95:a7:62:86:53:b7:9f:91:a4:16:7b:e7:21:cf:1e:1f:94:c7:
         bd:a6:3b:56:0a:b6:20:ae:ac:d2:ed:26:47:81:ae:75:d2:b9:
         c1:e4:6e:03:94:94:9f:68:f7:b1:6d:27:e2:2d:0c:bc:70:7a:
         60:ce:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----