Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File:                     geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier:          jNHeGD/f/xf8NgwbCm+pCPPguRBEOuHcYjNYi9CS8g0=
Subject key identifier:   B3:ED:1F:3B:EE:C7:FC:C4:C0:38:E0:D0:0B:4A:36:00:11:FA:08:D0
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer:       /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial:       01962F3D30D2EC3D910115EC6B947AAE4C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: dBbI1Z81Mloa7W2OzhoKXchOrRQ.roa (hash: cFMz5yq3xJCpOCH1TXFzmCMMTxw6N/8cLdoB9ZDvza0=)
                          2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: 315E0/w1iENqOvQI9sOROMoiBWbw4cIUqa/bUDr1GyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:30:d2:ec:3d:91:01:15:ec:6b:94:7a:ae:4c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=b3ed1f3beec7fcc4c038e0d00b4a360011fa08d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:d9:ff:5e:df:a0:95:3a:47:a5:73:47:2e:
                    16:a1:97:84:9e:ba:39:5d:b2:e3:42:24:6e:ef:6e:
                    81:4d:8c:99:cd:58:2c:ed:1e:8a:75:b9:49:c4:47:
                    d0:e8:a1:08:61:f7:17:b3:e6:d4:fe:9a:3c:e6:32:
                    40:93:c7:35:13:11:6e:de:f7:0c:2c:d1:b3:65:69:
                    2b:aa:53:c3:ee:31:89:76:cc:fd:a6:f5:26:1b:d4:
                    4b:ad:67:0d:08:29:c0:9f:27:45:e5:6b:f2:3e:5d:
                    7d:11:82:c2:36:b0:2b:98:16:22:36:6a:41:b0:1a:
                    3d:ff:58:6b:39:08:cd:f0:ee:d0:d9:2a:29:64:12:
                    d8:eb:30:06:0d:d2:62:9e:a6:08:ca:83:08:a8:c9:
                    62:f7:fe:2f:29:db:3b:c5:85:08:ad:46:3e:39:4a:
                    15:88:21:07:c3:d7:21:f1:d6:8d:24:13:53:65:73:
                    5e:9e:3f:89:d6:1d:b4:16:e7:c0:e4:ea:50:62:e8:
                    fc:7f:87:b9:45:c5:39:ee:19:43:26:e6:05:cd:a9:
                    d4:59:f7:f6:d3:7b:f1:d9:6d:c7:1a:33:b7:d0:09:
                    0d:14:c0:3e:e4:df:74:c6:8e:34:cb:2f:42:6b:0c:
                    31:2d:7e:16:96:60:3b:99:36:d7:de:49:b7:ee:dd:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:ED:1F:3B:EE:C7:FC:C4:C0:38:E0:D0:0B:4A:36:00:11:FA:08:D0
            X509v3 Authority Key Identifier:
                keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:70:e9:03:2e:da:ec:74:cc:8d:46:c3:26:39:1b:46:60:38:
         48:a7:84:de:6d:3f:d8:9e:e8:a0:16:b5:3e:87:0b:26:d4:bf:
         a9:68:78:1f:73:e6:19:ed:56:a0:ae:e9:7c:82:91:92:fb:d7:
         60:b6:72:b7:77:6d:b1:15:59:c6:5b:15:b3:4d:0a:6f:fc:a1:
         dc:59:62:c5:49:12:a3:4c:89:4e:97:7c:b0:e0:2b:20:63:ea:
         86:00:e2:f0:6d:72:03:2b:a1:89:4c:05:e7:87:50:6e:21:4f:
         c1:fb:de:4f:ff:21:92:5f:40:8e:41:cf:0e:84:0a:39:0e:9d:
         03:6d:7a:3b:56:a3:73:36:c8:42:6e:52:cc:b8:4b:40:4b:d8:
         7a:57:e5:ec:4c:7b:e5:45:48:23:e6:6d:c8:e4:04:10:fc:44:
         4b:02:f4:7d:77:91:67:51:0a:88:07:0a:84:c4:4d:98:9b:8a:
         58:4e:7e:cd:7b:5e:ff:9b:f0:10:94:49:5c:01:8c:a5:82:a5:
         65:cb:1b:b9:06:d4:73:85:19:23:c6:bd:e0:8b:cc:57:53:3d:
         b4:ec:15:ec:d3:b4:2c:26:2c:6b:7e:ed:4b:74:1f:61:f6:ed:
         bc:be:28:5d:54:6a:69:69:0c:99:95:3d:0b:55:22:45:27:51:
         c1:ce:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----