Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File:                     Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier:          kcFy9RJzOISwq4eNOmaJnCjCJJBKrcDrChF90n92er8=
Subject key identifier:   B1:04:51:9D:53:56:71:0F:25:D3:E3:8E:B6:1E:96:2D:C9:CB:A1:2D
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer:       /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial:       01962DF456DA142A42D8816088FE33005889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number:          122E
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=)
                          2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: N/ycyRFxi5VPElNn54f+bWi4V7qVXodlAzW+0JnNvYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:56:da:14:2a:42:d8:81:60:88:fe:33:00:58:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=b104519d5356710f25d3e38eb61e962dc9cba12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:a2:57:0c:cb:c1:34:eb:b8:f0:be:2c:c6:
                    98:5f:bc:ec:7e:c1:fb:e6:7c:40:7a:da:df:10:0f:
                    76:9d:0d:da:7b:96:1a:52:35:2e:b2:06:5d:7e:58:
                    ff:5c:9c:06:67:fc:a4:df:55:4b:6b:b7:49:4d:0e:
                    fe:2e:c4:81:18:cd:21:ad:df:fd:c3:b0:e9:3d:ad:
                    1e:ab:4a:42:85:b2:0e:d8:44:1d:2d:47:85:54:54:
                    c4:6c:3f:7b:a7:0a:6a:02:62:1a:89:45:cb:7e:47:
                    00:66:be:9e:69:48:cc:fc:f0:8a:53:82:59:ef:23:
                    5b:e6:cd:2a:90:83:a7:db:f3:db:c0:33:5a:59:ae:
                    de:80:66:89:64:37:22:9b:92:bd:ce:72:66:ee:04:
                    88:41:81:49:61:e9:0d:4b:41:6d:32:88:d3:1f:d7:
                    0f:a6:e7:74:41:76:b9:8d:da:a2:76:11:89:83:70:
                    c2:66:55:3c:f8:45:41:2b:a8:52:f7:2f:19:8d:1f:
                    50:f7:b6:cc:9a:21:3a:0e:50:be:cd:88:4e:60:8a:
                    3e:30:ea:df:f6:6e:15:ae:97:b2:42:98:a6:c8:98:
                    68:4e:65:79:ea:36:4c:ea:6c:f3:34:4f:0d:43:1a:
                    92:16:25:fa:45:cd:f6:2e:3c:6f:ab:50:da:5d:73:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:04:51:9D:53:56:71:0F:25:D3:E3:8E:B6:1E:96:2D:C9:CB:A1:2D
            X509v3 Authority Key Identifier:
                keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:34:8b:cf:a1:48:bf:1f:3e:e0:1c:15:9d:04:af:02:1e:65:
         0b:6a:fb:45:07:7b:8d:90:5b:93:eb:35:5d:80:ce:da:22:50:
         22:43:ec:0e:e5:4e:39:ac:11:80:7c:1b:17:17:7a:82:73:db:
         d5:15:2d:3d:3e:9d:18:cd:e3:5f:2c:45:68:5e:f6:19:b5:7d:
         1d:c8:c8:db:71:1c:c9:ae:7b:4d:38:c7:60:8b:4b:b0:00:14:
         fd:54:3a:80:70:11:f4:ef:f0:7d:a2:73:71:81:14:0a:5f:7c:
         23:63:c7:ce:7c:df:e1:2d:24:ce:5e:7d:d0:39:ff:02:1e:26:
         5c:b4:46:47:29:4c:37:b8:76:6e:96:dc:65:a4:3e:14:d3:6b:
         a1:2d:a6:33:c7:63:5a:ff:de:6e:d0:3b:0a:36:bd:ef:f9:33:
         a3:fa:fa:b7:07:6d:7e:7f:7d:d4:e2:76:50:28:81:56:04:d5:
         56:3a:c5:18:0d:63:f0:3a:29:ca:42:cf:db:f1:97:3c:28:e3:
         9a:9e:30:13:02:56:e5:b6:20:6d:36:f1:a1:9c:46:5f:dd:ef:
         7a:a3:42:f7:5e:fc:94:30:6d:a8:37:57:e4:00:55:ae:48:40:
         46:45:08:2d:71:63:74:ae:18:71:19:5e:27:1e:1c:5b:6f:e8:
         53:6d:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----