Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File:                     R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier:          FsvY8v+ICBtonDZ5wzvkDrPcJwhbN6D3Owe5whXBbTI=
Subject key identifier:   87:B4:F9:57:6B:A3:57:50:D9:C0:93:E1:01:43:28:01:E5:44:46:2B
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer:       /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial:       01962F742E8A7B6531CB5C5383884A0E32F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (hash: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=)
                          2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: u61pM9zobSntGFZ/d2GsYzelK1/YexvHUn/AGQghJL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2e:8a:7b:65:31:cb:5c:53:83:88:4a:0e:32:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=87b4f9576ba35750d9c093e101432801e544462b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4f:0c:a4:be:e1:7a:e3:40:6b:6b:0a:a1:6d:
                    0e:ca:9f:92:39:8a:ef:2a:b5:19:76:39:c7:ff:96:
                    f5:3b:78:ad:18:2d:52:fc:2f:bd:08:98:c8:4f:f7:
                    47:df:54:16:04:46:f3:c9:5f:eb:75:ff:97:f2:3b:
                    c8:33:35:e9:02:54:05:11:fb:65:62:56:66:5d:71:
                    33:f7:c5:ea:ee:70:9e:67:e8:5f:32:59:13:24:ff:
                    62:ab:66:a5:3f:00:be:d6:8e:2e:cd:5e:e9:ca:a5:
                    b5:76:0c:f0:4c:aa:3b:4c:bc:c0:71:3a:d6:ee:4f:
                    24:55:fe:95:38:47:f1:f2:7d:76:ac:ca:b2:88:09:
                    fe:4b:9b:af:03:86:bc:a6:5b:98:11:c8:4b:82:5d:
                    18:3d:c6:1d:ae:9b:53:f2:e0:63:d7:23:bf:17:3a:
                    cd:79:d7:f3:a0:f9:08:4f:c2:a5:42:1e:7c:66:a0:
                    b8:50:20:db:d9:22:6c:9f:bb:bf:7c:df:6c:58:26:
                    de:4f:26:aa:7e:d7:ac:51:b7:23:fb:e5:cc:6e:bb:
                    ef:ab:b5:f1:ae:0d:d9:9d:d3:a6:ba:87:b1:ec:7f:
                    72:03:8f:bd:1c:3d:a4:1d:a6:9f:f7:16:90:33:f2:
                    50:5a:d1:ec:71:21:59:ba:eb:79:1f:af:3d:eb:e0:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B4:F9:57:6B:A3:57:50:D9:C0:93:E1:01:43:28:01:E5:44:46:2B
            X509v3 Authority Key Identifier:
                keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:1d:d0:57:12:b7:2f:12:96:60:39:cf:cf:9b:ad:0b:2e:
         0c:19:33:96:2d:63:f9:04:6d:24:d1:a4:99:76:43:1b:6c:de:
         50:d1:e5:61:45:db:ee:39:06:a2:8a:72:37:3d:a1:62:a3:2c:
         0b:7a:77:a1:93:2b:49:22:46:78:72:8a:ce:bc:d4:a8:ac:2b:
         23:64:c9:12:ee:83:b4:1e:7b:78:55:86:8e:87:89:70:64:8e:
         f3:bb:09:76:2e:c8:d5:1b:20:d8:78:4f:e6:ac:bb:03:17:b0:
         73:66:6c:76:07:f7:d0:77:d3:ce:58:c2:92:e6:d5:b8:3a:14:
         20:b0:c6:56:23:c5:cf:89:e5:75:a0:00:cc:ce:8c:c2:5d:03:
         57:99:f2:dc:67:49:f8:69:b7:ca:71:c5:46:fa:4e:31:b1:b6:
         c9:a6:66:d2:80:da:e9:aa:7b:b5:25:a8:be:1d:72:bc:32:e7:
         a5:f2:a9:e0:cc:f0:ce:dc:9c:95:66:69:37:97:2e:2c:da:03:
         ea:15:6f:83:7b:9d:6b:af:3d:54:66:4a:08:f6:3a:75:11:e9:
         67:c3:14:b3:1c:60:60:97:1a:24:c6:8a:57:f5:e2:33:a5:04:
         9b:88:d3:71:cb:98:90:1a:6e:4b:86:3f:32:a5:fd:f9:a1:e9:
         11:34:1b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----