Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File:                     tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier:          xzKIki0wkcxMdte0k5/OdoWF47QW+tvGBpgTlPs3r/M=
Subject key identifier:   95:FD:4A:B0:0E:10:6E:E2:6A:DE:11:69:FE:33:41:86:B7:1E:4F:3F
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer:       /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial:       01962E9914B15270172EF23B36D5D2A26FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
                          2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
                          3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: TPE8Lo5t1yqkE37UFRgO0l8WxalpsVMP/eZMvwT9JUg=)
                          4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:14:b1:52:70:17:2e:f2:3b:36:d5:d2:a2:6f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=95fd4ab00e106ee26ade1169fe334186b71e4f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0d:ed:17:fc:15:03:68:7e:df:d6:c8:6f:2f:
                    9b:b2:ec:09:9b:b7:e1:31:93:2c:dc:d7:af:04:cd:
                    e8:98:2c:bc:4f:8b:72:16:2c:ba:a5:91:6d:31:e7:
                    4f:dc:d2:65:98:5a:81:61:82:f9:b6:e4:ad:e0:27:
                    3e:e5:2a:4d:be:18:61:c0:f5:0c:69:8a:46:94:95:
                    82:24:36:47:cc:13:2b:96:99:7e:20:ff:ec:a0:14:
                    a2:d3:be:7f:c1:0d:28:86:e0:95:1a:f7:0b:fa:28:
                    aa:9e:59:22:e2:ea:12:80:c4:6b:ea:c0:83:57:54:
                    48:2b:c9:84:1b:a9:72:e4:66:08:08:7e:f5:e8:fd:
                    5d:66:d2:d3:12:e0:47:84:30:49:ed:f7:d0:89:08:
                    5b:c2:23:c2:7c:55:bd:b6:91:24:e7:d0:c7:8a:79:
                    48:1a:05:15:b3:28:90:1f:9d:cd:62:0b:aa:3d:e8:
                    87:ee:0f:b1:c3:eb:c3:b0:2e:ca:36:5e:c3:3c:ed:
                    a9:39:70:ae:8f:76:aa:cf:50:16:68:16:42:5b:28:
                    49:fa:0b:d9:d9:49:a5:ff:00:07:a0:36:1c:d7:d5:
                    fa:f6:be:df:21:eb:60:3e:99:c2:07:4d:4c:89:27:
                    40:0d:e7:83:4a:71:60:93:47:1d:45:67:fe:39:23:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FD:4A:B0:0E:10:6E:E2:6A:DE:11:69:FE:33:41:86:B7:1E:4F:3F
            X509v3 Authority Key Identifier:
                keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:f0:f5:25:f2:0e:f2:89:28:06:38:d9:94:7e:e5:05:34:
         ca:52:21:91:38:fb:d6:41:7c:60:95:f8:ee:bb:d5:f0:97:8f:
         12:eb:74:4b:6b:53:6d:54:5d:72:0e:78:f9:e1:d5:7f:f1:cd:
         19:10:0c:c9:d8:06:83:e3:a2:ab:6c:f2:13:9f:9c:01:79:1a:
         80:33:65:ad:de:00:44:2a:02:c6:d3:8d:0c:90:fc:64:f8:ba:
         28:27:f1:27:f1:35:29:7d:35:2d:8c:29:ec:01:ad:7a:10:c2:
         a8:71:e4:b1:77:5a:5b:7d:24:11:9f:f1:d4:ec:2c:d0:c8:ff:
         5f:60:88:ad:f7:b5:2e:8e:73:15:1e:93:ac:f8:d9:cf:b2:94:
         25:90:a9:d4:59:26:79:07:a2:af:cd:25:52:f1:1c:6a:37:93:
         d4:35:99:40:39:d0:49:74:1b:7c:4d:b6:55:1c:17:e5:fb:b1:
         42:fd:d2:55:fd:cd:9e:5a:45:3c:a1:e9:da:6a:d4:83:65:40:
         6d:dc:3f:b0:f6:1b:04:33:e3:b9:6c:a9:23:ef:59:b6:6a:53:
         5e:42:ee:d4:37:ea:a8:f2:34:f6:ed:b3:87:18:15:99:c1:8b:
         c5:ad:15:a6:59:b7:e8:bc:ee:17:ad:32:7a:9d:9f:c3:d8:82:
         c4:5c:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----