Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File:                     tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier:          x+HGBkKKVEqzgqBARiyUmilfA569Kh/NEBo4WZqigHE=
Subject key identifier:   FB:9A:74:78:1C:AA:13:69:8E:DD:07:EA:56:FF:CE:F3:8A:CC:7F:75
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer:       /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial:       01962F0681A89491F6CC5F472A31B7AAA197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: iQxCTqJc23IztH0qMtXGhii78xc.roa (hash: b/32KuHdgss/tEEpqliyL9nGxIGy3IsYTip4QREYlPc=)
                          2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: YZxiNDSCGXJy3l266XlOxFvIF71iWZrjcfARUpeUMmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:81:a8:94:91:f6:cc:5f:47:2a:31:b7:aa:a1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=fb9a74781caa13698edd07ea56ffcef38acc7f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:10:38:1b:dc:91:ca:65:af:f2:ce:51:39:
                    54:f6:3b:85:65:28:22:c8:6c:c7:2a:07:8e:3c:e8:
                    0f:15:14:4e:9c:68:0c:f9:72:f6:65:5b:7c:80:fd:
                    b7:0d:46:a0:c9:6e:39:e3:55:ac:b0:91:b8:f0:d9:
                    27:88:46:1d:bf:f7:cf:e9:0e:71:b9:e7:6a:3c:c2:
                    05:d8:e6:a7:1f:b6:11:f5:a6:5e:23:24:8d:f4:73:
                    fe:1d:8c:04:75:3a:99:18:be:94:70:f8:b2:1b:f7:
                    d3:b0:e9:e2:ee:52:6a:0c:47:c1:4e:37:da:1b:ca:
                    df:35:e4:53:bb:a3:eb:a7:f2:09:58:3c:e8:0b:06:
                    d7:04:0a:07:f6:43:e5:57:11:4f:c8:3b:34:fc:c6:
                    80:1f:c7:8a:fc:8c:81:18:1c:72:4e:d7:74:60:28:
                    36:58:1e:f0:67:28:79:66:b7:72:aa:11:ba:ff:79:
                    e9:23:73:80:ea:45:cd:b0:75:72:e3:ec:e2:0d:95:
                    bd:02:82:94:81:5d:83:df:ee:dc:3e:81:a7:a9:ed:
                    54:73:87:2a:a6:f5:d2:42:b7:5c:15:78:74:eb:25:
                    f4:62:13:d9:9a:29:2e:54:42:7d:51:a9:92:f1:68:
                    e0:4e:cf:19:8d:9b:0b:a2:80:ad:1b:fd:3a:6f:e3:
                    80:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9A:74:78:1C:AA:13:69:8E:DD:07:EA:56:FF:CE:F3:8A:CC:7F:75
            X509v3 Authority Key Identifier:
                keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:62:9a:6e:fe:56:3e:47:a3:9d:f9:46:0d:5e:cb:33:3a:
         93:d4:88:28:84:70:9f:bb:dd:a1:6f:85:e8:50:c2:9b:ed:5c:
         af:1f:8a:3f:24:53:7d:e7:ba:77:68:77:05:d1:44:7c:bf:7f:
         15:3e:bb:45:78:80:e3:28:47:53:1d:e5:4a:84:48:48:53:b3:
         00:40:8a:4a:37:52:f4:0f:36:d1:16:c2:62:00:b5:8d:93:2e:
         43:6c:f3:f6:4b:9c:cb:7b:83:60:44:3d:88:36:36:5a:04:7a:
         5e:1d:67:3e:22:b8:d4:6f:6e:c1:fa:50:6d:94:b6:70:45:58:
         62:08:46:e8:80:b7:c2:41:58:9a:ea:87:89:5a:18:66:8b:31:
         39:c4:03:37:39:47:ca:d7:ed:ed:d5:cc:28:65:3d:cc:ce:80:
         f8:3a:37:c6:98:5c:c7:30:7e:bd:f6:7e:ff:59:15:73:7d:c1:
         8f:ad:d9:d3:88:72:31:c2:b1:55:15:9e:d2:94:d7:39:d7:4a:
         7f:7b:98:af:44:7f:34:41:ae:3f:b7:80:42:cf:a9:c4:a0:97:
         3c:93:ea:82:ea:84:43:5e:b5:22:d7:37:0b:6d:d4:e0:12:d1:
         af:68:7f:df:51:0c:3c:d0:b9:fc:48:53:35:45:8d:2b:fe:03:
         9b:e8:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----