Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File:                     tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier:          cZvV505+JtLD//bWhpWO70EuopTjJGVQbolzvW68yZo=
Subject key identifier:   18:28:CA:25:72:92:33:BD:AB:33:46:95:F1:8B:03:D3:DE:24:BC:D4
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer:       /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial:       01962F3D89E3F042EAF6705EA1EE24353316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number:          0346
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=)
                          2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: +61AlPdbrdJ0LHFx0V+KQi1o3TMiV21Gzcoz5BUqP5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:89:e3:f0:42:ea:f6:70:5e:a1:ee:24:35:33:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=1828ca25729233bdab334695f18b03d3de24bcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:40:db:ae:fd:e1:56:20:9a:45:ba:54:11:
                    06:fc:76:66:50:0e:c4:6b:65:d0:01:45:8a:f2:94:
                    4e:df:c0:16:f7:ab:8c:8b:0f:3a:aa:b9:db:e0:fa:
                    2d:a1:4c:96:de:15:fe:28:28:3c:e1:71:12:7a:c5:
                    97:f7:40:02:81:01:87:d8:f4:6c:29:f3:f9:23:c8:
                    e5:81:f2:cf:e7:ca:4b:ab:70:0e:37:8d:82:c6:dc:
                    30:44:2c:d4:ef:a0:b1:95:b4:be:64:bf:af:24:b8:
                    39:af:23:e6:4a:ed:1f:54:b2:88:c2:a1:a6:f7:a4:
                    f8:8d:22:64:16:4a:fd:78:e1:dc:ca:f9:4f:af:86:
                    0f:2f:cc:c9:10:dd:2a:2b:4c:03:e8:dc:30:37:f5:
                    a8:96:a4:11:c8:bc:aa:71:27:b2:e2:73:7b:e4:8f:
                    9b:df:95:ab:5b:36:3c:cb:53:43:ef:e6:fa:7a:d5:
                    cb:fd:43:88:5f:71:5b:9f:6f:2e:da:94:8a:cc:21:
                    73:74:69:53:c9:9d:43:f2:fc:d7:fd:ea:a9:3b:c2:
                    8b:b4:7b:97:3b:00:7f:52:a4:4e:05:79:fa:f5:81:
                    a8:b8:26:ea:bd:a0:0c:17:a5:9a:1a:b8:04:0c:87:
                    b3:90:2e:24:87:8c:b5:e1:f4:74:8b:69:ef:27:2e:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:28:CA:25:72:92:33:BD:AB:33:46:95:F1:8B:03:D3:DE:24:BC:D4
            X509v3 Authority Key Identifier:
                keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:32:8b:56:7f:f4:10:8a:85:df:de:a6:13:78:57:c8:e1:d9:
         c0:66:27:9b:03:71:c7:c8:15:5f:00:e5:5b:04:81:8c:5b:5e:
         e1:51:75:79:17:e3:d1:ed:70:77:82:f3:9d:92:7b:8e:b7:58:
         fd:91:10:c7:a5:65:20:8e:ed:e4:2b:b8:a2:49:22:b0:75:e6:
         83:1d:bb:8f:fb:6d:88:a6:16:fd:3a:28:0d:34:d0:b9:38:1a:
         e7:75:d6:b4:5e:a7:be:46:9c:af:f6:4f:15:c2:50:d6:6d:15:
         84:f1:79:55:82:5c:75:df:52:84:97:d3:bd:aa:3f:54:18:ed:
         92:34:e4:03:12:9c:db:ae:d1:bc:25:48:df:56:af:74:6e:df:
         41:88:6a:11:40:fe:b7:f7:7a:87:5b:29:18:45:8b:3d:d6:00:
         54:81:d6:99:4d:34:98:24:2c:f8:b4:91:68:23:5e:a4:83:77:
         fe:8e:19:52:80:dd:68:5e:1f:09:c0:57:9d:32:de:a3:82:b5:
         1c:89:ee:08:3a:c1:6c:73:2b:7d:89:14:ea:d1:7e:7a:0b:6a:
         f8:ad:ca:11:26:63:10:ea:7c:e5:2a:71:56:89:3b:87:0f:8f:
         93:d1:8b:9e:f0:32:8e:23:64:ed:b2:f2:bf:c2:fc:4b:af:6a:
         9a:38:ca:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----