Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft
File:                     tPszH6QvtFHkVRxvkcu5wZ7jek4.mft (raw, json)
Hash identifier:          Qp17KWuePp1285zhiSDh7ML8vWTasZ/4taiX6noMXeg=
Subject key identifier:   90:7F:27:29:8D:F4:C0:E8:46:8E:AE:20:34:50:AC:AB:9C:4E:E1:4D
Authority key identifier: B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E
Certificate issuer:       /CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
Certificate serial:       01962FAB3CBA7EA6C88C0985C7CD7BB20F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: DvRXNlTCR35yGxJPggKI6LQ1TXY.roa (hash: uCs5edSvBBj2KY6s6HL8wAMD7pMX49G3e3NvxavAQGo=)
                          2: tPszH6QvtFHkVRxvkcu5wZ7jek4.crl (hash: KcXtfv3Ll32RL9+0kBAb9rCXXoCDh7lRExoRz2DkehI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3c:ba:7e:a6:c8:8c:09:85:c7:cd:7b:b2:0f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=907f27298df4c0e8468eae203450acab9c4ee14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:28:c7:37:ef:da:d1:c7:bb:5b:9f:28:75:90:
                    5c:0f:cb:cd:67:ce:3b:44:c0:3e:31:0b:4f:dc:e4:
                    f8:48:38:5f:d4:b1:7d:e6:61:24:6c:6c:e2:2f:a4:
                    e8:40:ee:05:2c:7d:53:71:45:24:a8:cd:97:44:77:
                    74:75:d4:a0:ad:5c:8f:bd:36:55:c3:e9:dd:01:fc:
                    72:b7:cf:55:02:63:92:9c:b0:42:1b:05:c8:c2:ff:
                    f9:b1:92:07:9f:9e:3f:44:db:4c:2a:63:e0:1e:6f:
                    9c:bc:d1:3c:20:33:cf:50:e7:a8:65:98:c9:cb:dd:
                    81:13:09:30:4c:d4:6a:06:9d:4b:9d:6e:36:47:de:
                    ca:87:c2:80:3d:a8:de:18:ce:1c:df:a3:0a:fd:d1:
                    cc:37:6b:43:4d:0f:4b:6f:b0:77:b1:0c:cf:6d:62:
                    8c:72:0b:ba:b0:32:61:09:a3:46:41:80:7a:ea:b7:
                    d8:a5:86:0c:3d:fd:8d:4b:9c:59:2c:66:80:61:c1:
                    80:13:a1:33:ba:3f:24:52:c0:cf:6f:eb:f9:7c:75:
                    01:53:67:6f:f0:dd:cb:3d:84:48:de:27:56:17:88:
                    87:4b:9d:b7:82:87:db:5a:41:51:a2:5f:67:b1:fc:
                    6f:9f:79:63:97:35:11:22:d2:41:7b:81:16:97:22:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:27:29:8D:F4:C0:E8:46:8E:AE:20:34:50:AC:AB:9C:4E:E1:4D
            X509v3 Authority Key Identifier:
                keyid:B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:8a:a8:db:2e:88:85:7f:b5:e0:ff:25:37:b6:9b:49:ba:
         8a:da:8b:61:3a:ad:8b:2b:5c:5c:c0:74:6a:36:9b:32:d8:8f:
         41:ee:1d:cd:be:85:7e:4c:13:2c:2d:4e:48:b0:38:0c:3c:d3:
         c7:28:d2:b1:08:41:e7:64:26:ea:b2:1c:48:7f:7f:b7:ed:06:
         2a:f4:53:8e:a1:41:82:21:75:c2:84:62:0f:dd:12:57:28:f9:
         2f:3f:26:4a:8d:6e:25:2d:b2:cf:a5:e9:16:2b:62:77:7d:ea:
         6b:76:88:9c:b3:00:0b:61:fd:3f:10:0d:bd:31:64:62:a3:ea:
         76:f0:8e:ed:ca:3b:ea:ed:c0:d8:e2:88:a2:52:5e:5d:9d:a2:
         6b:1b:11:5a:37:0d:6f:ea:d1:c1:38:09:b2:ac:80:58:a1:1a:
         67:e7:08:5f:c5:cd:51:33:b5:9c:b0:eb:a7:c3:05:85:ce:f7:
         bd:9d:67:22:0c:96:5a:a2:fe:02:56:d3:42:8f:a7:ee:d2:27:
         5f:34:f5:14:eb:83:1c:cc:8d:99:ec:bd:2c:85:9e:49:d4:17:
         a7:85:14:be:a1:a1:ac:b5:17:d3:1f:a7:b0:ca:64:c2:25:76:
         f9:d3:18:40:f8:4c:a5:4f:0d:be:17:90:38:0c:d2:9a:21:fa:
         46:e8:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----