Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File:                     tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier:          tiabxadI5OTRk2sPq5wWmJ71RbNcJXDYkAJZR6VkDOc=
Subject key identifier:   CA:11:74:76:6D:9A:FF:23:5E:F9:CE:08:29:C4:F2:B8:D2:9A:41:5F
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer:       /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial:       01962F74F55C449A3A784B743421180E1BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number:          128B
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=)
                          2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: R5YAp0GGcLgtkxXM5mQsdLQhR4reNCjMyJJdNRm/v2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f5:5c:44:9a:3a:78:4b:74:34:21:18:0e:1b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=ca1174766d9aff235ef9ce0829c4f2b8d29a415f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:54:5c:67:6e:57:0c:e6:c8:8a:52:a4:60:e7:
                    f7:64:66:34:0d:38:a1:15:77:bd:7a:34:80:ca:ef:
                    34:b7:28:27:d9:18:7a:c5:de:71:56:8c:b3:29:d3:
                    15:27:68:7e:ff:65:4e:c5:af:08:1a:8f:62:ec:c2:
                    7b:23:07:e7:e3:5c:f7:29:a3:15:a2:1f:89:d2:f8:
                    01:90:c3:ca:df:11:29:92:71:2d:91:b0:c0:65:45:
                    54:6c:19:82:9e:fd:be:c9:9a:c5:7d:e0:1d:70:f9:
                    e2:83:d6:f1:02:8e:3d:9b:29:57:ce:fc:ab:b5:f8:
                    ca:19:50:73:bd:fe:42:e7:d4:fb:59:06:e5:75:93:
                    1c:cd:33:e7:f5:8b:f4:31:4f:73:21:2c:f4:00:c2:
                    ba:6c:74:91:c3:16:6b:19:94:c3:c6:45:71:b8:c1:
                    34:69:97:d0:c8:1a:98:87:f6:5c:4e:c0:3a:5b:c3:
                    c3:4e:19:f7:e2:4b:20:25:bb:88:67:36:2a:e0:11:
                    2b:3d:1e:6b:44:f8:ca:b3:03:f7:26:a5:99:d6:1e:
                    86:cb:02:f9:51:b5:af:a6:2c:d1:85:65:b0:43:b8:
                    4c:59:fa:a0:81:a0:04:45:8c:5a:77:ba:cb:69:d9:
                    b5:52:e1:22:6a:8e:61:b1:e5:a7:ae:4b:53:ba:cc:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:11:74:76:6D:9A:FF:23:5E:F9:CE:08:29:C4:F2:B8:D2:9A:41:5F
            X509v3 Authority Key Identifier:
                keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:16:68:4c:df:31:eb:29:75:53:c2:c3:16:e8:6e:66:e1:98:
         74:8f:6c:0e:3c:7e:1b:d2:b0:2e:c1:4e:d9:f0:c8:3f:e7:56:
         4b:40:d8:4a:4f:f9:4c:3a:e0:7e:9a:de:db:eb:05:d1:08:ee:
         a0:40:f1:94:fb:a0:95:81:ed:76:12:95:7b:02:25:a9:75:9e:
         a6:89:b5:b8:24:0a:0c:79:b4:4c:a9:2a:88:c0:89:48:5a:55:
         62:5f:6f:85:8d:23:9e:4a:0c:9b:22:1a:ff:ee:d1:c4:62:68:
         d6:71:56:b6:cf:27:ee:e0:29:45:68:43:c2:28:47:30:30:6c:
         a4:26:84:6b:b9:b1:38:ab:80:b6:db:bd:b6:ce:8d:28:ae:be:
         e8:f7:3c:35:4d:a6:e7:6a:af:ef:c9:b9:3c:b1:92:86:00:d1:
         81:af:ca:d4:b8:a0:6a:68:a7:d1:78:30:76:88:68:39:25:e0:
         af:64:7f:b1:9f:22:e4:24:92:3d:62:3f:f5:ad:15:c1:64:12:
         0e:30:90:de:0a:c4:24:be:7e:83:fb:8d:68:f5:b1:21:dd:2b:
         43:9b:2d:e0:bb:81:1d:8a:bf:88:66:d0:57:97:83:94:cd:8c:
         03:a1:0d:ac:68:85:cb:ee:28:12:e8:d6:82:9c:79:8b:a7:24:
         b6:c5:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----