Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File:                     tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier:          L4OGCneXix7XpCDp9HKXsIDRVhrR0zqTErCsHv1DSLY=
Subject key identifier:   E9:2A:C7:BD:D4:B1:98:F3:A8:01:DA:F6:75:C1:0E:F2:A5:59:B7:1C
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer:       /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial:       01962F3DAD194E7DB437C3D6ACBE9581470F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
                          2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: xK+9GcAyhSEKRG0W74DpO3n1XrxkzyHGNoAF3gW0OQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ad:19:4e:7d:b4:37:c3:d6:ac:be:95:81:47:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=e92ac7bdd4b198f3a801daf675c10ef2a559b71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:ca:0c:2c:31:ea:c2:02:1b:e4:95:ff:2c:
                    7f:e8:09:d1:60:1c:6f:bb:fd:de:de:eb:e4:8c:9d:
                    74:a6:3e:80:31:3d:d5:35:d5:83:88:53:e4:3c:cd:
                    6e:58:b0:b9:11:7d:54:db:fa:d3:7b:99:5d:16:e7:
                    33:95:51:95:23:e6:c6:f6:05:1b:e7:02:84:92:23:
                    99:3a:8a:dd:73:6d:7d:dc:d7:2a:34:e0:c5:1f:1f:
                    f6:d2:aa:38:d3:38:ca:00:0e:3f:b6:f4:ba:d2:86:
                    77:a5:53:8a:a3:55:2f:06:ad:1f:67:0a:ef:3d:05:
                    b2:fc:28:6b:84:16:79:97:fa:e9:94:b5:f0:74:eb:
                    42:2f:b8:a0:2e:94:4c:09:8d:d5:6f:83:9e:ad:6b:
                    9a:ab:0e:2b:bd:b3:23:af:1d:7b:c3:92:5c:ac:6a:
                    80:07:50:2e:d0:52:aa:5a:d8:65:75:2d:f0:0a:74:
                    ac:c7:c6:d8:3c:61:3b:f6:ed:31:e8:ce:e0:bf:74:
                    8e:ed:88:23:f2:68:6f:7a:a5:a7:84:a1:68:8a:5a:
                    6b:30:d6:da:34:03:38:87:b7:2a:ce:5b:28:97:d0:
                    9d:ec:77:5c:3b:f0:d4:20:79:b9:5f:4c:c2:7f:7a:
                    c6:06:51:44:02:84:12:45:4c:5d:c6:b3:2b:99:92:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2A:C7:BD:D4:B1:98:F3:A8:01:DA:F6:75:C1:0E:F2:A5:59:B7:1C
            X509v3 Authority Key Identifier:
                keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:6f:e2:4c:28:cd:07:4a:3d:ea:6c:2f:ff:32:f2:df:38:
         1b:98:77:76:93:7b:84:d1:b7:4b:a8:d4:00:ca:d2:77:d0:21:
         42:a0:f5:2e:66:68:3b:d7:c4:c6:c3:b0:fa:72:cb:e4:94:00:
         65:0b:32:ba:90:11:3a:21:43:32:1a:71:02:e7:2a:f9:fe:50:
         df:f0:ca:6e:5b:2d:4a:5f:4e:0e:ee:1f:8e:ee:62:f8:58:0f:
         b8:20:64:09:c8:a7:14:46:25:86:56:8a:ee:5a:ed:8a:b3:bd:
         db:7c:18:32:e9:62:5e:6a:99:94:ac:a5:c9:9a:0f:1e:8f:5b:
         eb:08:0b:f5:4f:ff:ce:80:a7:66:a9:73:26:da:95:ba:79:1e:
         3d:2d:ab:ab:22:52:83:67:ea:40:c1:6d:e2:79:6e:c7:2d:cd:
         3a:09:8b:0a:64:9f:44:d4:a8:1a:cc:50:76:ac:e6:8c:35:58:
         a4:8b:5e:0f:96:5a:64:52:aa:14:2e:ec:93:91:76:c5:ae:b9:
         da:0c:7e:9f:4a:ef:8f:56:ce:77:97:e7:d1:1d:22:8a:5f:18:
         ee:91:0a:15:55:6f:d4:93:bf:e1:92:b8:34:ad:36:72:06:90:
         0f:d5:47:89:6b:bf:a6:ec:35:e8:5b:fd:f4:56:ca:33:18:b4:
         8d:7f:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----