Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File:                     TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier:          buKyruuq1vYrUZFM2pVkFy5UYRwEamzG9pje48NstY4=
Subject key identifier:   57:F2:30:89:1C:76:C7:CF:AF:1A:EF:63:97:35:5D:FC:70:FC:2C:49
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer:       /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial:       01962F74DC157B4F404C1BE011F42F3C2E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: hknbokTrx2zvLSJKRDgChLLTOmSa+FpC1FcFZkZwmIo=)
                          2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dc:15:7b:4f:40:4c:1b:e0:11:f4:2f:3c:2e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=57f230891c76c7cfaf1aef6397355dfc70fc2c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:b1:cf:a4:76:70:38:88:c7:84:35:18:02:
                    7d:76:24:f4:56:37:d4:d3:71:12:84:50:d0:00:ba:
                    35:d1:04:95:58:0e:9b:53:03:13:99:67:c7:46:75:
                    91:f4:3f:f3:69:31:bc:28:1f:e6:65:b0:82:12:99:
                    f4:ce:08:39:4a:55:67:9a:b9:de:89:c8:cb:94:2a:
                    64:d4:4b:19:fc:f2:8a:b3:6e:87:1e:30:7d:0c:77:
                    28:c8:81:1f:b2:ec:7f:ea:40:73:ec:85:2c:c3:2d:
                    9f:51:d5:17:23:17:a4:69:87:a5:d6:3a:d3:36:be:
                    09:a8:f7:1f:3e:1d:4b:48:83:71:d3:9f:94:fa:a2:
                    70:6c:d1:ed:73:5b:c7:6e:47:eb:aa:e8:a4:4c:84:
                    be:ba:6a:aa:36:8c:6e:2c:34:df:73:97:8e:31:95:
                    4b:49:05:04:af:62:d6:9a:d0:d6:6e:51:70:70:f8:
                    d9:62:6c:63:59:17:a1:9a:3a:6b:11:8e:3c:b9:3e:
                    3c:bd:b9:a5:99:30:38:f1:54:ba:ad:d8:0a:50:40:
                    46:10:3b:ce:52:d9:47:71:64:5d:5a:8d:93:0b:fe:
                    0a:b1:9b:0e:01:b1:7d:c2:85:c9:e9:bc:3d:6b:fc:
                    54:4f:c3:be:a0:e6:54:11:3b:73:ff:f7:f4:62:20:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F2:30:89:1C:76:C7:CF:AF:1A:EF:63:97:35:5D:FC:70:FC:2C:49
            X509v3 Authority Key Identifier:
                keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:49:52:19:2f:19:59:5b:8b:fe:2d:76:f0:b7:26:77:b0:43:
         da:e3:6c:ed:b1:11:a9:de:51:fe:4e:44:d2:ba:8c:0b:98:9e:
         6a:46:b3:f3:98:bd:21:e1:61:c9:df:60:98:35:79:b9:39:ce:
         67:aa:da:be:05:9d:fb:60:13:41:37:48:ad:a2:91:0f:30:22:
         d9:09:3a:99:6d:8f:b0:ef:10:e0:f4:a2:03:c5:60:34:d6:78:
         dd:78:e5:ae:c7:d3:48:aa:ac:3f:b9:e0:3f:19:d2:fe:8a:63:
         2b:74:ac:b3:89:8e:2d:7b:53:59:49:b8:d3:e7:06:a1:39:1d:
         4b:59:d4:a9:64:61:1e:9d:77:51:88:e3:5e:7e:1d:cb:2d:32:
         0c:98:d4:95:e3:59:72:88:64:7a:d7:39:23:21:04:74:f5:63:
         94:85:d9:ef:d0:28:bb:aa:d8:15:ca:77:92:c0:6c:02:3b:4e:
         80:ac:bb:f7:02:42:a6:51:fc:ee:9f:b2:3e:60:95:e2:f3:af:
         ca:0a:19:0e:83:e6:4f:31:9e:f9:f7:e5:54:16:51:8f:93:ad:
         fc:7e:ce:ad:92:fe:13:a8:94:b5:e4:73:63:98:a4:24:8b:fd:
         50:46:bf:c2:27:29:a6:2b:14:29:37:b2:a4:1e:75:a7:6f:21:
         88:bf:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----