Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
File:                     t4UKnl5747TStkImX4JbhQwHI2Y.mft (raw, json)
Hash identifier:          2BkMwPxCEM7Yrfxv2AaF3VfLVsAcN/WCSWtThIlNIiY=
Subject key identifier:   DD:08:E1:80:C4:0A:72:96:16:11:BC:22:6F:B9:7E:1E:72:F3:AD:9C
Authority key identifier: B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
Certificate issuer:       /CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Certificate serial:       01962E993F43ACF878F12BE26AAAFB651D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
Manifest number:          037E
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa (hash: LC5M9URWylDvxfMKsYWhEBj1id9NYxvTcyivO+BgMe0=)
                          2: t4UKnl5747TStkImX4JbhQwHI2Y.crl (hash: v5ILpYivYO9I+N7rWPgrTYsj8d5i4o8GDrvBApD5dYg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3f:43:ac:f8:78:f1:2b:e2:6a:aa:fb:65:1d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7850a9e5e7be3b4d2b642265f825b850c072366
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=dd08e180c40a72961611bc226fb97e1e72f3ad9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:cc:dd:29:26:5a:7b:f5:3b:ae:14:72:a0:
                    24:e6:3a:d1:83:9b:4e:26:2d:00:f3:d6:b4:c9:45:
                    de:0e:96:a2:5d:f9:e1:9c:ad:ce:26:17:64:02:09:
                    aa:f8:21:e9:8b:15:f9:e0:b1:ef:4e:fe:9b:a3:17:
                    e2:0d:64:3c:3c:c4:77:34:f6:fe:95:2c:2b:cc:49:
                    0b:f2:fd:2f:01:15:d1:26:c8:91:d7:05:e6:d0:08:
                    9e:4b:27:fc:a6:fc:03:d6:05:52:6b:ea:3c:c9:d5:
                    a3:76:72:87:ac:34:bc:06:f7:45:92:79:99:89:99:
                    50:ac:94:0c:80:c1:a1:30:dd:38:3e:b0:c3:6a:97:
                    71:eb:5f:3a:3e:32:4f:62:aa:26:de:2e:77:c3:17:
                    ef:ef:25:0c:4e:fd:33:51:1d:b2:18:b4:1c:57:82:
                    1f:5a:f7:e7:a6:46:8d:8f:f5:6b:d7:0a:11:44:67:
                    4a:03:b4:53:fa:8e:c9:b5:fe:d6:9a:08:9c:ec:27:
                    3f:89:76:cf:c3:91:08:44:7c:45:eb:57:0f:bb:5e:
                    dc:f1:39:c9:93:23:2e:22:43:10:0d:35:c2:65:ef:
                    06:d0:3c:0f:ba:9e:7a:15:49:09:c3:7c:7b:68:45:
                    bf:b3:d1:de:81:d7:33:23:55:df:8d:e0:25:a2:3f:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:08:E1:80:C4:0A:72:96:16:11:BC:22:6F:B9:7E:1E:72:F3:AD:9C
            X509v3 Authority Key Identifier:
                keyid:B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:79:20:f3:73:7a:55:38:66:13:23:3e:c8:a7:ec:cb:aa:38:
         00:3c:7a:b0:14:d7:95:bb:ac:68:a8:b8:a3:f1:9d:5d:fd:66:
         f6:ad:f8:79:2a:7f:9d:00:57:67:11:be:4c:ae:c1:e0:89:3d:
         99:01:1b:18:56:41:53:ec:fc:cd:84:94:07:3e:b8:a7:e0:ae:
         66:94:ba:e1:26:fb:c6:dd:c7:ba:46:dd:b9:90:3b:df:a1:b3:
         fd:8f:21:94:2f:d4:ef:65:ca:11:51:5e:6c:79:af:7a:31:97:
         6e:66:7b:e5:d1:7f:34:3d:7f:6e:e3:8c:37:8f:05:15:5b:e0:
         ff:f3:fc:b3:1a:43:39:e1:8c:f3:16:d7:75:41:70:2f:5f:19:
         99:14:26:9b:08:0b:02:90:df:b8:d7:8a:0b:fe:29:36:f3:48:
         dd:4c:ac:66:eb:7b:5d:6a:c7:f3:fc:ad:dc:e4:34:38:a5:d3:
         63:2f:d4:d2:ab:4b:f0:ec:a6:6f:5e:25:54:44:de:4a:dc:eb:
         96:f1:04:05:d4:b6:90:73:75:5b:f7:57:27:7f:3a:76:d5:e2:
         0b:31:dc:c5:96:74:75:1a:e7:ab:09:b0:9d:f8:57:14:a7:e2:
         89:e0:73:47:f6:ff:a9:d6:92:60:dd:27:66:9e:19:98:02:9f:
         ab:c6:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----