Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          +HFq1xTyF63FNotKA8XLlRFEiyEv/8vzOPbsmNBTbDQ=
Subject key identifier:   F2:05:F6:19:F5:81:6B:99:67:3C:B3:C2:22:C9:79:73:D6:46:7F:C6
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       01962ECF5E57E73432A7E26C14064A1333C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: 5jwygws2szQICkFAbQDt0DfTE24.roa (hash: CRuVg76LibQeWgQvKJXvsry4Ac92m/NILVupnVOrdIE=)
                          2: 8i0pFHh3jLLr_PpCWW1tgeOnNls.roa (hash: zniHfjj60ALgt1todbQ0gmqBBGRN1w6Z180L0gimowg=)
                          3: M-D765qKLa5rpx98GwEizjipWV0.roa (hash: sZVekYH0lnyQrwkjPmHgYKbukfVk03AtK4DNYJI9l9w=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: b8M+h4hBlU07XCzgzEe2HqPN7E4ezMT+oaekFW/KuCo=)
                          5: ehgAzBDC5TDJSiS2woTLYA9Z-4E.roa (hash: K6RVhNClpsXwi3nvwOK5VpovbryAZNiXfSXsDcn1PP4=)
                          6: vOfFSwnv08l6OdPeZZK6ruAsY5E.roa (hash: HCrYAQ+7uNSAWRDrRhQ/VN8mpYkiEOW8ifFbRzWfvZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5e:57:e7:34:32:a7:e2:6c:14:06:4a:13:33:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=f205f619f5816b99673cb3c222c97973d6467fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:bf:a9:17:b4:d5:e9:86:4c:28:e5:50:8f:
                    9d:ca:f7:0b:f0:7f:10:9f:dc:bf:70:cf:2c:d9:5a:
                    bc:a8:19:01:27:7e:78:3a:da:6d:49:41:e1:e9:21:
                    0c:b8:d4:ed:a4:88:fc:5c:5d:5a:32:57:c3:80:c9:
                    c9:3b:aa:3e:94:a1:e9:02:78:8d:95:02:24:2f:8a:
                    a6:82:e7:98:68:ec:c5:1b:4c:88:b8:ef:08:87:b8:
                    8d:9f:87:bf:70:d5:6d:37:e8:39:f3:3e:34:34:fa:
                    1e:61:3a:bf:36:f3:c7:dc:0f:15:da:9a:7a:6a:89:
                    6b:2f:00:b8:64:b7:c4:b9:94:a5:e9:1d:36:3c:0e:
                    dc:f4:23:6b:2f:70:50:c4:f2:52:88:f4:66:c4:48:
                    d7:df:05:26:b1:01:8c:d3:ec:9d:67:9f:39:7b:5d:
                    a9:37:b0:7b:6a:87:d0:d1:a5:35:c2:26:39:29:fb:
                    cd:22:21:5a:48:0a:d6:91:79:0e:de:4d:f0:e3:91:
                    5d:71:89:6f:48:aa:3c:e5:eb:c4:89:df:8d:03:e6:
                    79:da:a7:4b:fc:9b:db:b7:25:30:80:de:e2:c2:06:
                    81:19:cb:75:4b:81:a7:05:dd:c0:17:0b:58:ea:82:
                    83:a2:5a:4a:fa:3d:7a:5c:09:6a:d2:a6:ba:ee:5d:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:05:F6:19:F5:81:6B:99:67:3C:B3:C2:22:C9:79:73:D6:46:7F:C6
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a1:60:0f:1c:62:5f:47:cd:7f:e7:64:c7:67:2c:f2:df:2f:
         35:83:d9:ca:0a:fd:4d:8f:9f:bc:6a:39:96:f6:40:a2:36:ef:
         ac:b1:8f:1c:95:6d:aa:4d:61:6a:3c:89:7b:1c:b2:61:17:6f:
         9c:df:c3:2d:91:85:2e:d2:59:bd:c6:22:8b:d2:76:de:ce:61:
         c0:8a:cc:19:a0:a1:50:4c:bd:5b:2c:8d:4c:0f:4f:1f:cf:4b:
         87:af:30:f5:17:f3:76:9a:2c:56:0d:d1:c5:7a:a5:61:6f:93:
         dc:be:8d:be:f1:d9:ff:28:7d:3a:6b:df:94:56:e4:83:e0:50:
         b0:0f:0a:49:74:02:1e:09:95:7c:df:d0:07:76:a0:65:36:9c:
         85:16:c1:12:d2:e6:3a:2e:91:72:d5:cd:ee:84:49:f0:e3:42:
         7b:e5:4b:7d:6f:e1:35:7e:ec:12:a7:ae:72:e0:4a:ff:18:c6:
         c3:57:a7:1c:43:46:98:e1:a7:0f:86:3e:3a:e1:8f:57:12:80:
         3b:a0:1a:7a:1b:4d:07:3a:4e:fd:f5:f9:db:22:8c:ed:cd:7c:
         a1:c7:20:d1:8c:33:e0:3b:55:1e:9f:cd:a0:4a:37:c2:74:b4:
         9f:92:79:1a:a3:d0:7d:90:c9:95:f0:79:f5:c5:5c:59:9b:fc:
         13:c4:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----