Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File:                     tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier:          HR8CCV/FKB5eWEHqLOHWMefS32qmaJzNns2ZX53mOoc=
Subject key identifier:   89:6F:D2:15:C8:1A:79:0D:25:92:DA:31:D6:5B:F6:59:1E:17:F6:6F
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer:       /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial:       01962E98C0D603F53F068FC6307E2F644445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number:          0B47
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: d8KRFEMTNPZUkxlXfVVjfcnwU+brJJN5EUuujiu3o1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c0:d6:03:f5:3f:06:8f:c6:30:7e:2f:64:44:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=896fd215c81a790d2592da31d65bf6591e17f66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:d8:94:44:97:90:9f:5c:e0:08:69:ac:86:
                    86:ad:5b:fa:c4:27:33:b1:ee:69:ff:67:8b:11:f2:
                    d3:84:0c:a7:38:71:b3:7d:6f:fb:bc:31:a8:47:13:
                    6e:99:4d:c0:8e:70:22:64:9d:7c:24:54:c5:49:7d:
                    da:2a:df:19:dc:6c:c5:80:be:af:99:b0:3b:23:1e:
                    f4:11:0e:40:bb:03:e0:0c:e7:48:7a:1f:07:ce:19:
                    d7:d1:21:3e:d1:d0:0c:4c:1b:8f:cc:f5:41:d2:23:
                    ab:e7:1b:55:14:56:af:64:35:30:b9:32:42:4e:71:
                    b3:2e:2e:2e:9d:fa:53:89:91:39:68:ee:93:39:da:
                    26:bc:70:28:45:db:0c:ea:51:35:8b:ed:42:f8:21:
                    8f:38:13:03:e3:44:ea:5d:9b:84:6a:0e:06:30:f4:
                    11:cc:da:9c:1e:99:9d:ea:f8:ed:1e:63:fb:ee:48:
                    f5:7e:d2:bd:28:f9:7a:df:86:ef:68:83:59:0a:a0:
                    23:9a:0b:d2:b6:70:ab:94:74:f2:6d:c2:f4:c4:a9:
                    50:c2:38:95:9a:68:cd:ad:bf:10:ff:e2:ed:48:be:
                    d7:1c:a6:12:94:0d:0a:29:88:15:77:fa:6e:2c:96:
                    e6:45:5a:b7:b0:cf:21:6a:4b:32:21:b1:89:85:54:
                    dc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6F:D2:15:C8:1A:79:0D:25:92:DA:31:D6:5B:F6:59:1E:17:F6:6F
            X509v3 Authority Key Identifier:
                keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:8c:22:b6:20:0c:f2:91:8d:94:04:77:a2:4c:ee:d3:68:
         12:85:dc:0d:28:c7:5a:5b:24:4f:64:5c:cc:38:5b:ce:19:47:
         dc:a7:3d:03:6f:bb:a9:f9:6f:85:92:29:ef:d2:eb:c0:38:d8:
         99:3c:45:33:4e:40:b5:4a:c8:70:06:d0:ba:9f:75:38:98:1c:
         52:c2:f7:c8:25:97:88:0d:34:e6:d0:46:8a:40:ef:26:07:6b:
         62:a0:40:6b:0b:ca:e5:51:c9:4a:29:11:9f:78:e4:3a:c8:5b:
         3b:3a:b5:0e:da:2a:13:63:ee:ed:b3:6c:90:83:3c:7d:ad:90:
         34:0e:6c:fe:8b:ba:da:5b:02:87:c1:53:ac:06:c5:c4:84:93:
         b1:e4:4c:36:02:d4:22:65:01:d8:a2:de:fe:fc:17:66:7a:49:
         6e:e8:59:d3:76:e4:88:c5:86:17:86:7b:df:72:a8:97:fa:cf:
         f2:fb:95:78:32:61:49:c9:cf:10:a2:ab:44:11:24:14:42:c3:
         af:cc:0b:bd:ff:2e:d0:28:fb:e2:e2:84:83:f1:15:db:1b:1b:
         00:7c:d0:dd:0e:d8:ca:d3:ed:43:c8:c4:48:35:07:e5:a3:7a:
         d9:9f:ed:ce:19:2c:f2:25:cf:13:f2:e2:13:e1:c5:bf:0c:6f:
         f5:fe:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----