Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File:                     tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier:          1cSYuQIbHVLrZ5Fwhl+q/lsRD6eY9n3o5PSUkd6hZTA=
Subject key identifier:   9C:F4:1A:5F:0E:42:B2:87:C2:13:38:08:64:08:46:A4:B2:93:A9:56
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer:       /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial:       01962ECFCD69E56E31F4C3E7ED7CFD8551A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
                          2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
                          3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: j1SykGG9yXDVB3S37ifPF8iZvx7OAMD/a6glAWMZNro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cd:69:e5:6e:31:f4:c3:e7:ed:7c:fd:85:51:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=9cf41a5f0e42b287c2133808640846a4b293a956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:a7:bc:5b:5b:5e:c8:09:79:1f:27:b2:78:
                    ed:50:66:46:e4:d1:eb:ff:34:b2:b3:63:0e:f0:0f:
                    08:e9:77:f6:6e:46:2d:a8:f1:43:c5:e4:8c:fd:82:
                    ac:d8:24:a7:0c:c6:60:56:48:c3:94:d3:38:78:86:
                    55:a5:34:05:2a:d0:16:0a:11:33:d8:41:49:2a:6c:
                    aa:63:85:34:6d:51:ef:cf:00:72:f5:6f:74:c7:64:
                    cf:b7:03:70:12:4c:8d:eb:0a:4d:d6:c5:41:7e:e5:
                    4e:c4:a9:3d:e5:41:f6:b3:df:e2:b0:18:a0:85:17:
                    2a:c7:dd:de:4c:76:66:f7:d8:e5:9c:34:7e:7e:36:
                    4d:80:3d:d6:a3:f7:80:ee:dd:2e:f3:c9:1d:a7:9d:
                    74:99:90:29:05:b0:97:71:97:f7:43:5d:65:63:8d:
                    5d:15:36:fc:89:6f:93:8f:8f:ac:95:0a:8b:61:24:
                    1b:a0:39:04:ea:d2:2c:da:66:85:37:b3:96:15:14:
                    e6:71:0e:69:d7:a3:1d:6c:1d:a2:5a:f9:48:87:59:
                    2c:18:3c:14:92:79:99:a6:b0:c1:ac:f8:5e:ac:29:
                    19:d7:dd:19:f7:4c:24:61:2e:9e:19:8c:8f:cb:36:
                    bc:5f:c1:fa:85:10:af:ec:43:d4:fc:92:c2:e6:40:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F4:1A:5F:0E:42:B2:87:C2:13:38:08:64:08:46:A4:B2:93:A9:56
            X509v3 Authority Key Identifier:
                keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:8d:89:3c:cf:a3:20:91:e7:aa:55:62:58:b9:09:b0:31:
         42:94:22:5f:9d:0a:73:db:df:5a:66:52:b3:b0:9a:0b:24:95:
         35:63:c5:d6:9a:c1:96:24:b4:ff:80:88:df:58:23:e5:93:9c:
         ea:39:1b:57:b7:14:af:8d:23:ea:cf:2f:47:67:03:37:a1:28:
         39:4c:43:86:89:6a:ea:6e:45:ed:0b:56:37:ed:5d:6f:83:bd:
         fb:5e:87:55:1b:6c:4f:bb:59:6a:27:93:1d:17:bb:36:cf:2e:
         09:ea:17:38:5a:72:e0:ac:8d:c9:ae:9c:b9:33:3a:ef:ed:3c:
         6e:fd:4c:fc:69:18:37:9d:22:13:59:c0:68:7b:94:4e:ad:18:
         2a:45:15:3e:32:a6:05:b8:1d:97:a4:20:75:49:36:64:8f:52:
         69:26:c2:55:5e:bd:f8:ec:85:67:71:f1:c4:60:13:3c:9f:66:
         74:0d:fa:79:6c:3a:90:a9:8b:bb:1f:cd:e0:f5:28:e6:a2:b0:
         8a:58:72:e1:9f:5b:43:fb:36:f7:a3:dc:78:3a:82:80:f1:08:
         51:04:a8:0d:c8:12:44:a9:c0:2f:19:01:06:bf:dc:04:d8:fd:
         cf:ec:c9:08:97:5f:ba:6d:ec:28:d1:42:76:b9:fb:02:b6:e3:
         09:51:76:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----