Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File:                     t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier:          dHO8UkIQU5pLBSw9Ul+N2jCUPgIxSgzvzyltB9Zb3dU=
Subject key identifier:   FE:FF:CA:84:27:AB:47:78:74:86:8F:75:D5:51:8B:04:D7:FC:53:CC
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer:       /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial:       01962F066F4B01A63AF6906404FB2D12B267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
                          2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: w02t7Cd+y3YbHxsz5Zm6yKwvrWSGpMoitSV2OYkVPd4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6f:4b:01:a6:3a:f6:90:64:04:fb:2d:12:b2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=feffca8427ab477874868f75d5518b04d7fc53cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:3e:a6:e7:53:24:57:e1:92:09:27:c8:8a:
                    dc:9b:01:fe:3d:c0:cc:5c:2e:6f:9b:78:cd:65:01:
                    b7:be:9f:df:fc:2b:68:e6:29:65:47:59:c7:55:50:
                    94:af:01:58:fc:59:12:b5:a1:eb:a3:79:05:21:0e:
                    f1:93:4f:e3:04:21:c2:68:a4:80:24:01:ba:51:df:
                    82:6f:05:b1:9b:0f:41:04:0f:f0:08:a0:06:c6:37:
                    37:03:ff:fa:80:35:8d:95:e2:ca:e8:26:fd:42:7d:
                    04:f4:d1:85:f6:72:27:64:18:17:a4:97:12:ba:42:
                    e8:51:48:84:e8:70:19:0c:2d:74:87:96:4c:e3:4c:
                    19:db:76:df:c1:9a:b3:9c:f2:6e:17:66:4d:64:35:
                    d1:fa:34:fb:0e:c7:31:72:3e:b0:44:cf:e2:a7:bb:
                    9e:d3:b3:63:72:d7:38:5c:f3:a0:19:b5:e5:15:2a:
                    b4:f0:1d:57:79:91:a0:70:38:e9:bf:e2:86:3b:7c:
                    9d:57:db:53:ac:48:71:88:00:c8:5d:3f:df:bc:7b:
                    9c:58:49:c8:c2:56:e7:ac:84:42:f7:65:c2:a5:8d:
                    43:c3:02:00:b6:ad:e5:96:03:3e:26:ca:f2:0c:2b:
                    7b:9c:af:b0:8b:9f:1c:e4:48:c5:cb:0b:40:3d:ac:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FF:CA:84:27:AB:47:78:74:86:8F:75:D5:51:8B:04:D7:FC:53:CC
            X509v3 Authority Key Identifier:
                keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f2:11:8d:cb:5f:ea:11:3a:62:71:70:61:f7:59:de:75:15:
         df:1e:fa:0e:74:7c:a8:b7:7f:7a:eb:00:e5:6a:6a:51:15:36:
         85:0d:e8:a3:09:81:0c:58:a6:fd:ff:52:84:5b:ee:d8:c8:76:
         b2:de:25:00:23:f8:6f:92:42:ea:cf:33:e5:f8:55:67:c9:44:
         1a:1f:3e:06:8a:12:60:13:33:4c:f5:3d:aa:ed:ff:91:e8:fe:
         45:90:65:eb:2f:55:4a:cb:8b:e8:1f:c7:b3:11:57:13:ec:80:
         a8:c5:39:6d:21:9b:1c:30:b9:58:04:66:0d:d8:ee:75:0b:21:
         d2:95:38:49:0b:c1:0c:59:77:86:3c:c0:71:af:90:81:48:86:
         cc:f2:7a:06:65:b6:7f:25:03:d1:4a:c7:81:0f:03:1e:cc:32:
         74:a6:68:db:b9:2f:ef:61:4e:55:cf:16:4e:4a:26:cf:9a:ad:
         9e:f4:4b:ab:48:d8:bc:25:4c:3d:a8:c5:d0:b1:8c:c3:83:56:
         25:6b:0a:0d:b9:3e:71:75:77:b4:55:fc:4d:c1:40:2d:fd:22:
         1d:08:70:41:a3:27:4d:c0:93:24:5a:37:4f:70:0f:9f:39:57:
         cf:5d:27:ea:09:bf:43:78:e0:0c:7b:3f:98:65:5a:7a:91:df:
         93:d1:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----