Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File:                     tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier:          L4xrq8yV0pSnNz55MK29VQYSyKQHS3HPsX/MEx4FwZ0=
Subject key identifier:   04:83:CE:CC:5B:DE:57:7B:50:C8:38:88:A9:12:60:8F:21:AF:6C:85
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer:       /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial:       01962F3D72E2577BB7A24F3CC0BC135B140B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number:          126D
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: HqctvWxlrIEslD4ELNpmV-XhZkU.roa (hash: CGfhQ4fck7gcAxsslFd0Q8T9jYmDIbHyBLNxPR9Qais=)
                          2: bKSpPE5-kXmlbnT7r_1atj4jQSY.roa (hash: L3QXcpXiam9j36oZrcZebMrghkDu87SD2DJXHj63ivw=)
                          3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: 4Bf4595oGIvH1cQ22CpYgxpmoCDEQO6sDuQ2AR+JFEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:72:e2:57:7b:b7:a2:4f:3c:c0:bc:13:5b:14:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=0483cecc5bde577b50c83888a912608f21af6c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:e9:5c:56:84:12:d1:6f:d4:69:77:4f:5e:
                    e4:34:d2:ee:45:b0:63:11:5b:1b:69:97:86:db:45:
                    dd:1d:60:3c:29:ab:6a:9f:af:f5:84:4d:9c:2d:37:
                    fb:b4:eb:88:c7:84:40:94:09:ba:b2:8b:d1:82:97:
                    7e:04:85:75:58:c9:65:e0:e3:33:a8:39:93:0c:b4:
                    d5:9c:23:d8:52:ef:a6:b9:46:df:2a:60:3f:90:72:
                    16:0f:7e:98:33:be:e2:be:0c:f7:32:f4:32:8a:b0:
                    df:f2:24:c2:e4:9c:b2:7c:b8:d2:03:9c:58:27:5d:
                    da:c8:70:3d:09:95:6b:c2:c2:5b:93:e5:c2:11:3e:
                    99:3c:9e:a8:02:94:fc:2b:57:d1:1d:18:90:34:98:
                    da:e5:27:53:24:d9:bd:47:71:12:fa:41:fc:2c:36:
                    83:8e:9a:91:d2:ac:52:98:85:b0:63:68:1f:44:9b:
                    7d:9b:f5:bf:5d:db:9b:4f:d7:32:d7:52:5f:7a:9c:
                    05:7a:63:0b:28:d6:f0:d8:f8:28:f5:33:33:7d:4a:
                    70:df:06:f8:b1:56:50:27:3a:7b:bd:98:a2:b7:02:
                    a3:28:1b:4d:de:3f:30:4f:c1:dd:11:2c:fe:26:8d:
                    06:34:bc:2d:57:3e:b8:20:2c:78:f2:1c:2f:6a:f6:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:83:CE:CC:5B:DE:57:7B:50:C8:38:88:A9:12:60:8F:21:AF:6C:85
            X509v3 Authority Key Identifier:
                keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:19:8f:59:e2:cc:9c:93:b6:c7:ec:0b:f9:c1:16:d2:4b:a9:
         ec:56:27:8a:15:46:d3:3e:09:af:b1:bf:54:eb:fa:80:c1:36:
         46:c0:22:9a:2e:fd:08:e0:4d:71:26:60:87:54:a3:7f:45:01:
         eb:12:8c:59:69:f1:6a:9b:a4:e2:63:9f:ae:ba:66:b7:4d:25:
         3f:c0:4a:68:5b:12:c2:0c:c2:aa:d6:03:e6:e9:c2:3b:ec:36:
         56:31:d9:f7:0b:5f:3b:22:47:33:6c:5e:91:ff:68:55:c7:a1:
         22:1f:e7:34:af:17:15:af:7f:67:4f:a3:24:5c:47:9e:d1:f0:
         64:37:43:0e:24:0b:5c:e8:df:6c:1b:dd:ab:2f:68:02:e5:63:
         09:f1:59:05:f1:d8:97:dc:6e:e3:28:5a:ee:0d:a4:5b:cb:f5:
         f5:c4:50:ff:1b:33:c4:b7:af:25:db:6b:be:27:45:b5:54:6c:
         63:cb:9b:1a:1a:c6:9b:8c:f4:9d:a4:2c:2c:71:21:d0:82:b6:
         21:35:0c:67:47:57:5d:f4:80:85:6e:09:ea:7b:ef:49:b7:b1:
         8e:dd:8f:28:eb:9f:c2:42:2e:42:f8:9b:55:04:d6:d1:e6:09:
         9e:9a:9b:87:73:12:cc:65:e0:b8:fd:c1:5f:e9:14:a4:65:1b:
         19:b1:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----