Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File:                     T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier:          kykAXI0sn90yRYLo34CRFpBr+q3S8gOdA6yxkOXwgcc=
Subject key identifier:   C8:A5:27:0D:3C:53:61:C6:6B:DB:00:79:90:D4:79:99:C4:53:E6:9C
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer:       /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial:       01962F74625D2AB5CF9AC1489205BF3077C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
                          2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
                          3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: yblzd0P5zE++qJJWPfKXqO985W5efgO4y57Atnz78+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:62:5d:2a:b5:cf:9a:c1:48:92:05:bf:30:77:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=c8a5270d3c5361c66bdb007990d47999c453e69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:68:e6:8e:39:83:3a:cc:74:ca:77:72:bb:
                    f0:67:6d:7a:81:fb:53:45:13:a4:24:a0:9c:07:62:
                    1d:d9:78:05:67:95:4d:42:ef:b8:8d:7b:fa:41:7c:
                    2b:ee:5a:e0:50:c3:f1:65:1e:b4:31:6d:17:ad:2d:
                    2a:3f:ee:ee:ee:17:d5:73:7c:2c:12:37:69:c5:22:
                    18:dd:64:3b:fd:3e:46:99:79:48:1f:e6:86:3e:8e:
                    44:b4:f5:a5:49:92:e0:a8:3c:07:df:60:8b:71:c5:
                    f1:0b:ad:63:46:89:10:48:07:de:63:ae:8f:de:f9:
                    35:d7:4c:b7:7e:fe:29:73:2a:c1:d6:5d:8d:00:09:
                    a2:93:50:3c:d0:8a:6a:9f:9c:df:ac:93:57:e1:d8:
                    4c:22:06:e4:51:e2:3b:3e:a6:e8:c2:aa:14:ab:84:
                    b4:10:5f:4b:96:91:c1:1d:13:64:89:44:6b:c5:4e:
                    37:e3:5a:c0:de:2e:8a:75:75:7a:f8:70:16:c2:8e:
                    9b:0d:23:4b:d2:8d:27:a0:9f:78:a1:db:dc:68:cb:
                    23:a8:fc:62:24:45:e4:b6:c0:cd:c0:25:18:66:7e:
                    92:e0:e6:62:a4:b3:71:62:65:63:92:71:90:1a:74:
                    1c:38:5e:61:d6:c6:3d:87:25:07:03:af:59:08:1e:
                    cf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A5:27:0D:3C:53:61:C6:6B:DB:00:79:90:D4:79:99:C4:53:E6:9C
            X509v3 Authority Key Identifier:
                keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f0:e0:5a:58:9a:c0:b7:f1:0e:dd:ee:76:34:29:f2:53:56:
         bc:f6:4c:19:ae:69:2a:e0:e2:74:fb:fd:33:26:53:3a:4d:02:
         75:be:ac:41:87:4f:91:4b:c7:14:8b:88:13:0c:83:67:3e:b0:
         84:09:67:3c:aa:eb:c3:5e:81:4e:83:0b:fa:7c:c1:67:33:c7:
         49:d8:bf:c1:ca:81:b3:7b:43:2b:38:b1:bd:7a:a8:ca:5a:98:
         a6:70:ad:6c:d5:75:51:6d:fc:b6:ea:32:16:a5:50:17:64:99:
         76:fc:db:64:9c:73:fd:01:e2:2a:8b:31:bb:50:39:6c:55:b2:
         46:c6:7f:c3:28:30:0d:5b:03:b2:b6:67:fd:e2:19:a6:00:fd:
         55:9b:00:e6:f8:2c:76:be:c6:5a:a1:39:82:b9:70:a8:3b:6a:
         a2:88:fa:f2:3b:16:28:ae:55:6a:fe:b3:10:e7:b3:5a:80:b8:
         04:b1:6d:98:29:73:cd:95:a2:a5:8e:e6:2a:95:51:80:04:1b:
         d1:32:8e:0c:28:f5:d2:c3:b1:32:1b:ed:4b:46:33:f4:64:00:
         8d:f1:a6:59:fc:fe:6d:69:af:97:37:2f:bc:d3:b2:6a:29:88:
         1f:fa:bf:cb:b4:fe:a1:9d:cd:06:5b:3a:e8:8f:6a:71:c4:2a:
         16:c4:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----