Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File:                     t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier:          ZDwAxlt9xk1sqEh/itV888LNbQzqERAj2iLemf1aYLs=
Subject key identifier:   52:44:73:F4:14:B1:C6:E5:9F:EA:84:A7:27:0E:17:8A:3E:29:09:CD
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer:       /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial:       01962E61E752349852F33F8D8032806D0726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number:          119E
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
                          2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
                          3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: h9uI2r0BNj1mArj+ay49yWnudBT3bxx/MoL03mFWYjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e7:52:34:98:52:f3:3f:8d:80:32:80:6d:07:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=524473f414b1c6e59fea84a7270e178a3e2909cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:ea:62:28:7a:73:91:98:c3:e6:0f:6c:90:
                    fa:de:0c:7b:93:1d:d2:2a:39:eb:a0:e1:c7:0e:06:
                    c9:fb:75:22:2e:6e:f1:9d:f1:20:4c:b8:7e:12:07:
                    8e:a1:90:e9:e0:82:ea:32:41:78:82:d9:d7:47:60:
                    6f:6e:a7:ac:e0:33:e8:08:21:fe:fe:1e:b3:af:7c:
                    79:a6:af:a8:69:e7:3a:6c:99:7f:fc:c1:ff:c7:80:
                    13:3f:a5:0c:0d:2e:e3:4e:c0:1b:62:d4:d9:8a:56:
                    b9:a8:3e:90:8f:84:1a:6d:6b:5c:f1:2b:12:ac:d9:
                    5d:4a:41:45:38:b7:c8:02:63:00:98:14:ee:e0:96:
                    68:15:15:a4:da:80:02:9a:96:76:37:1c:ea:79:7e:
                    ea:57:2f:dd:58:69:c1:99:c4:04:ce:6d:8c:27:cb:
                    88:19:8b:32:f2:51:2a:83:4d:7e:99:7c:4c:81:9e:
                    3c:af:0d:0b:aa:e6:d3:4b:a4:07:f0:f1:e4:2b:fd:
                    5b:0e:7c:4d:4a:7a:0a:ef:4d:9d:44:46:95:22:08:
                    59:0e:f5:96:38:ca:9a:6c:69:94:ea:43:7e:db:21:
                    d0:43:7c:ee:1f:d6:c5:da:fd:e8:f2:80:9c:cc:3b:
                    28:35:7f:ac:09:bf:9e:dc:15:b7:4f:15:f4:dc:45:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:44:73:F4:14:B1:C6:E5:9F:EA:84:A7:27:0E:17:8A:3E:29:09:CD
            X509v3 Authority Key Identifier:
                keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a2:71:a5:44:a0:23:2a:69:c1:c5:6f:e0:c1:52:8e:92:86:
         73:5e:d7:58:94:6f:29:2d:3c:c9:65:af:2a:3b:80:08:71:12:
         1d:63:d0:cb:2d:aa:2d:4c:59:11:00:86:4d:d6:0a:99:90:cd:
         78:75:14:78:1d:52:7d:98:a6:0e:d6:c4:aa:bc:52:9b:69:14:
         ba:2e:a7:d9:22:e7:88:4d:8d:f5:e3:ff:67:8d:63:c4:3f:86:
         64:35:3e:1a:57:d1:b0:75:98:60:5f:ff:6e:92:b6:6b:e2:62:
         c4:f0:76:4b:d0:2d:36:d4:00:ba:e9:3f:71:84:1c:4e:09:59:
         83:11:1a:a5:5b:b1:a0:4d:78:36:0f:68:90:4a:86:11:50:0b:
         47:30:b7:12:58:21:31:38:c7:32:93:d5:52:61:56:42:22:8c:
         89:87:68:07:1a:a5:97:94:94:71:0a:ca:f9:52:f5:06:5b:77:
         58:0f:d2:b6:d7:fd:93:5b:ae:8c:3c:3f:3d:df:67:85:23:7c:
         37:62:82:37:f3:0d:42:e2:24:bf:a7:bb:39:e4:98:56:79:0b:
         7a:8e:f2:d9:90:ed:53:5f:17:61:67:b0:ff:4d:dc:ba:3e:29:
         7f:9d:f4:ec:2d:16:25:24:b4:ad:05:a4:81:d7:71:74:43:b1:
         0b:30:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----