Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File:                     t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier:          Cz6U6vgMMH2dxC0/yGyslTAd1871Z7VTeWY/92Hfpfw=
Subject key identifier:   2D:42:7B:B1:0D:D6:EE:6E:BA:40:D8:DC:8C:2E:D7:E4:18:6A:34:0B
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer:       /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial:       01962DF3DEC9513886C3E11D713BD80FDD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number:          0D5A
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
                          2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: rEh1bOoRKKqCSyBcj2LjbROrpC8hKWQcoZWIAwdiM5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:c9:51:38:86:c3:e1:1d:71:3b:d8:0f:dd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=2d427bb10dd6ee6eba40d8dc8c2ed7e4186a340b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:0b:71:26:f4:20:f3:df:03:96:13:70:64:
                    12:ba:dc:53:5e:46:c5:cd:37:28:97:97:ae:ee:7a:
                    a3:c0:8e:c4:c9:b5:d0:57:7f:21:b6:4f:db:47:60:
                    9a:4b:f8:98:57:31:10:ab:49:08:3d:f2:44:32:79:
                    2b:43:d5:77:78:91:3c:93:35:7e:95:10:39:7e:bf:
                    b8:d1:f1:22:c1:77:62:a8:22:23:cb:60:49:f1:ea:
                    cf:9f:b4:bc:21:87:e1:b6:e2:3a:c6:29:99:1b:dc:
                    22:a0:4b:74:28:66:24:c2:16:95:aa:06:c9:17:4a:
                    bb:74:a4:e2:b9:79:0e:4e:f3:2a:50:ee:08:85:89:
                    c0:b5:06:9d:1a:fb:c7:3f:59:86:d9:a4:6e:07:1c:
                    7f:c5:2f:c9:15:93:ad:ca:af:7e:36:9a:22:78:0b:
                    39:55:af:1e:df:16:90:2d:4c:39:2b:30:a7:1f:de:
                    ba:04:18:bc:71:38:3c:36:c5:85:3c:ad:fb:d0:4f:
                    2a:8e:87:9b:dd:b4:1a:50:03:d6:16:8d:83:d3:b7:
                    aa:a6:aa:8e:05:b4:62:a1:f2:11:10:b4:ba:2b:1f:
                    03:af:f3:ed:b2:0f:89:47:1e:6f:d2:10:46:93:0d:
                    78:27:d7:8d:d6:0d:7f:33:1f:45:1d:b1:bf:e0:9e:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:7B:B1:0D:D6:EE:6E:BA:40:D8:DC:8C:2E:D7:E4:18:6A:34:0B
            X509v3 Authority Key Identifier:
                keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ee:b5:90:af:b0:3b:e6:d1:e4:7a:39:8f:ea:76:ec:a9:7e:
         42:8a:45:56:a6:37:95:65:62:4c:fa:fd:67:ae:d0:1c:0b:0e:
         79:fc:f5:27:5d:d0:29:7a:6c:22:75:4d:7b:97:c4:5e:cd:a2:
         15:81:0b:4b:1d:1c:cd:01:3f:eb:03:f4:34:e1:e7:7a:5b:c0:
         95:ea:d9:2f:d6:bc:0d:df:fc:12:88:87:dd:e5:22:6c:73:28:
         39:c1:9b:ba:a3:26:92:07:9d:d9:f6:8a:50:fd:47:28:99:94:
         4c:3f:3b:72:20:2e:b9:e0:5b:49:dd:fe:50:2c:11:4f:45:ef:
         f6:d1:0d:9f:e8:f1:65:96:fd:4b:b4:87:08:88:bc:5f:de:6f:
         d2:9b:23:1c:10:6b:65:e6:7d:7f:1b:6b:ae:12:7e:8d:f4:77:
         24:06:6b:08:77:3c:ac:0a:21:e4:f1:aa:60:3c:af:77:57:5a:
         14:13:e5:10:03:cf:c8:d8:24:fd:80:7f:50:50:50:b3:53:47:
         99:2b:3c:9c:f7:cc:6f:c8:1b:12:44:73:84:68:e3:1a:f7:1c:
         26:98:f8:bb:df:43:e9:97:6f:b8:94:28:b1:1d:5d:f4:ec:f4:
         25:7d:c1:0b:51:ce:33:48:92:ed:69:23:2b:0a:07:b8:86:95:
         08:52:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----