Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File:                     tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier:          sK5rltR8dxR8si8Uai1I6hNpGWmvbFHnWK1EdpiwPD0=
Subject key identifier:   2F:79:D0:B2:A7:90:E7:1F:2B:17:68:87:AC:4C:EE:41:5E:1E:96:3D
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer:       /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial:       01962F3DB969DEAD81A1C5263E4CC2CF1A9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number:          0433
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
                          2: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: GZuTTbfNzepW3JmnkMWidb0ABFra72aNN090ccuSn/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b9:69:de:ad:81:a1:c5:26:3e:4c:c2:cf:1a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=2f79d0b2a790e71f2b176887ac4cee415e1e963d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:93:c4:e1:25:33:e0:7a:d0:d5:48:d7:59:
                    fa:2f:7c:8b:d5:27:1d:d1:67:4f:07:24:23:66:81:
                    30:da:56:1c:eb:63:67:fe:f6:a1:75:d5:fc:70:c7:
                    7a:a7:c1:f0:df:6f:d7:50:1d:d1:6d:b1:7d:04:59:
                    cb:8d:bf:c4:91:da:b9:82:fc:4e:c8:cf:d7:12:6e:
                    df:13:27:09:53:f7:8d:b1:80:bf:49:73:04:00:ff:
                    9b:d9:7a:9c:dc:8d:e4:64:de:3c:2c:bb:8f:e7:7d:
                    1d:6a:38:65:de:de:98:da:a3:4c:47:d8:45:6e:2d:
                    60:87:d0:00:7c:6c:40:3a:b1:b1:a6:68:8f:2d:89:
                    7a:94:e8:3e:50:98:4e:09:45:ec:0c:69:0d:ce:d5:
                    ac:97:3d:9a:0b:cd:a6:33:38:fa:4b:70:1d:c7:c2:
                    e9:4f:53:56:0d:8d:68:c7:7e:75:11:79:d9:b5:36:
                    23:d7:0d:16:81:c8:73:19:95:e2:ab:cb:54:25:c8:
                    5d:cb:88:cc:84:d6:94:cc:61:4d:68:ec:63:19:07:
                    60:16:d8:13:39:86:01:6f:15:5e:01:ce:55:34:19:
                    fc:e0:ec:bd:d6:d4:36:e7:c7:47:48:7a:35:ea:0f:
                    46:ee:3c:3f:20:74:46:19:b1:bc:13:02:65:01:a4:
                    a5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:79:D0:B2:A7:90:E7:1F:2B:17:68:87:AC:4C:EE:41:5E:1E:96:3D
            X509v3 Authority Key Identifier:
                keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:86:b4:f7:08:21:85:16:97:64:fe:b0:27:0f:3d:bd:df:19:
         e1:31:2e:eb:f9:ea:fc:5f:1c:f7:33:61:90:9c:38:26:37:a9:
         53:05:fd:79:25:51:2d:85:80:d6:90:12:64:7f:4f:eb:f1:88:
         97:b1:f7:bf:f1:5e:fe:64:15:8a:93:2c:f3:db:46:85:57:65:
         63:8b:51:6d:06:db:72:1d:cb:9b:20:83:72:fb:bd:ac:da:90:
         47:b6:b5:f9:c3:96:12:c2:16:27:8b:39:a9:0e:5f:e8:7c:3f:
         ac:65:cc:13:4c:21:fe:e7:85:73:69:45:c7:11:58:58:31:f6:
         30:bf:5a:3c:fb:1e:7f:d3:18:da:e4:75:21:4d:52:5c:77:c4:
         4e:78:6c:90:9d:1e:72:ba:4f:57:d6:6c:7a:b2:aa:9c:42:d3:
         1d:e0:4c:07:b4:a7:a0:c3:fe:f8:e9:11:1d:20:2f:63:c4:57:
         71:3f:19:5c:4c:ba:8f:f8:c1:4b:7f:f9:91:8c:7a:e3:e6:64:
         99:71:02:e7:37:9e:21:9a:d9:9a:eb:d5:54:c9:a2:ec:20:67:
         8b:da:4c:84:aa:47:29:74:d7:51:e2:82:7b:b9:bb:b2:5e:63:
         e8:9d:b2:b9:c7:5a:0f:f6:c1:63:1d:db:95:67:c5:5a:b2:42:
         db:2a:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----