Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
File:                     su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json)
Hash identifier:          L7qJGizD9NCTQOcVaqPspYTT35wCVjCK1JBhjhCmWzg=
Subject key identifier:   42:03:13:5C:07:00:D5:14:C0:5A:AA:B3:CD:0C:9E:87:10:FF:92:0D
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Certificate issuer:       /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial:       01962ECFC04D376C2ADBEDFF9EBCE6472BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
Manifest number:          085C
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa (hash: QHoycNdEbZMja0gAvjEgeC3E4wx2OI9vc9S4Y873m1w=)
                          2: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: 0XxQTY/uRxSFamBqhO/HlX/vaWeb8q47IWB+GEUclO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c0:4d:37:6c:2a:db:ed:ff:9e:bc:e6:47:2b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=4203135c0700d514c05aaab3cd0c9e8710ff920d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:e2:17:8a:4f:6f:5b:03:e7:4a:46:99:2f:
                    9e:61:d2:d3:e2:61:94:1a:a2:a2:d9:cc:e1:33:1b:
                    4f:da:6a:88:5c:4b:d4:dc:b0:5a:f2:bb:57:1e:f3:
                    3e:ba:d8:37:2e:ba:26:0e:6a:05:82:e0:ef:de:3d:
                    f8:97:5b:65:1e:31:a3:80:54:8d:31:06:7a:2d:14:
                    32:d1:b5:3c:06:62:34:ce:54:82:ca:ef:1f:4c:19:
                    7f:2e:e1:19:41:53:cf:12:46:b0:31:5c:c2:33:a2:
                    37:f1:8a:63:70:28:e8:a7:b8:e3:2c:99:71:1b:34:
                    b7:d2:4a:06:2f:49:6f:9b:90:fa:77:87:e5:df:ea:
                    d7:94:84:2a:10:00:eb:46:58:c9:eb:59:99:9f:ff:
                    4f:c6:b7:5e:ca:ba:9c:d5:92:71:6b:85:a7:8f:e2:
                    dc:83:ea:2a:07:5d:1d:f4:31:ab:58:fc:00:79:6d:
                    50:40:f1:7c:21:c4:75:b0:b3:a4:6f:08:4d:cd:11:
                    ce:44:21:59:c2:b3:36:b4:21:a3:b6:01:81:99:7a:
                    05:97:da:72:25:e6:37:81:37:a1:f8:d4:7a:f3:6a:
                    59:c5:64:ec:14:b4:e1:7f:f6:2e:e7:70:ce:c4:71:
                    79:92:65:11:7c:ae:de:17:d5:77:ba:6e:8f:4a:ad:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:03:13:5C:07:00:D5:14:C0:5A:AA:B3:CD:0C:9E:87:10:FF:92:0D
            X509v3 Authority Key Identifier:
                keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:f9:8f:c2:2b:24:c5:83:3c:fe:1f:a1:e9:a1:50:99:b8:
         e0:d4:d6:5b:8e:72:60:4a:ff:20:ab:44:98:a2:7a:d7:f6:b4:
         67:b2:69:e4:f6:b1:2c:8e:e1:f5:dd:41:8e:78:34:18:6b:86:
         26:d3:d1:2d:5f:fc:fa:82:70:51:1f:a9:14:52:6b:67:6f:23:
         f0:ce:94:3a:5a:3d:5c:b5:be:ef:7e:13:3c:61:88:0a:66:4a:
         81:91:67:be:ec:58:b3:f6:9d:5c:1c:7d:c4:2e:47:78:3d:d9:
         4d:ab:f5:a0:13:94:4c:ff:8c:a4:a6:d3:b0:69:6c:9b:6c:b4:
         c3:ad:c6:e6:3d:3b:db:1a:f7:4f:e0:21:ce:92:e0:7d:2b:95:
         54:27:0c:f7:48:32:8b:8f:60:f3:be:6c:5d:8d:fa:e1:38:da:
         c8:46:6b:b2:9e:b9:39:53:80:b0:b8:c6:0b:fc:99:e4:9e:4b:
         ef:1c:0a:06:4e:6d:08:1c:b5:5b:dc:f4:77:9a:97:f9:90:6e:
         67:ee:b1:59:15:0f:88:d5:76:e8:9f:9e:15:e7:4c:ef:1c:e3:
         03:79:c9:0e:9e:fc:29:54:22:d3:22:60:0f:3c:4c:ca:e2:1b:
         e8:61:90:a7:35:68:da:5d:ee:47:21:c5:97:dc:af:cc:49:5f:
         45:ac:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----