Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File:                     tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier:          3ukV+ymFj5lzNlOh3OZbJgTBaxP0g6QtBwDZtKPCiIc=
Subject key identifier:   EF:4C:40:D1:B8:DB:F6:A2:7E:C8:58:F0:2B:79:B5:E1:8D:85:A4:8B
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer:       /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial:       01962E9953B429F8D3B1142AE17453C2BA01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number:          0788
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=)
                          2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: 8PDsjbN61T6aX6ZrlbLfAtobc+bNdUGc+sq0N2q9vSQ=)
                          3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:53:b4:29:f8:d3:b1:14:2a:e1:74:53:c2:ba:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=ef4c40d1b8dbf6a27ec858f02b79b5e18d85a48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:12:8e:40:5f:d8:01:d3:25:1a:97:90:6a:
                    6e:0b:b6:bb:ad:98:6b:ac:fa:5f:2a:5a:5f:1e:24:
                    3e:31:15:72:87:d3:7b:cf:d5:80:7f:1b:bd:aa:d1:
                    1b:1b:a0:43:e4:57:d7:c3:14:a9:8c:e2:e4:8c:36:
                    0e:6a:cb:81:08:52:04:ff:e6:79:d1:13:44:04:49:
                    c7:15:a2:f0:4b:3b:b6:b5:f3:4c:07:8a:64:d8:5e:
                    22:ea:e1:7f:e1:16:73:34:9c:a5:68:8c:7c:06:f0:
                    74:e3:ce:d5:2b:2a:8f:8a:9c:98:91:39:e3:dc:f7:
                    dc:0c:54:0d:df:92:21:01:71:ba:0d:e3:e8:fa:13:
                    88:14:05:5a:07:ed:50:77:13:92:2b:40:3e:1c:77:
                    2d:4f:d0:c6:58:b3:e7:49:dc:6a:b4:41:af:37:ba:
                    07:9a:ef:70:a2:67:23:4c:4c:4d:c1:94:0c:df:30:
                    2e:d9:71:27:d6:26:16:1a:1e:8a:f6:34:0b:b6:da:
                    62:b5:1e:76:c3:a5:d9:d4:aa:61:60:6c:87:b3:3c:
                    9e:6d:2d:c4:0b:c7:74:65:9b:17:fc:8d:ee:0e:6f:
                    5d:47:8e:8f:ad:f9:9f:48:ae:1b:85:25:a1:1f:ec:
                    fe:91:18:91:9f:1c:d0:85:60:c7:bf:41:1f:c3:c8:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:40:D1:B8:DB:F6:A2:7E:C8:58:F0:2B:79:B5:E1:8D:85:A4:8B
            X509v3 Authority Key Identifier:
                keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6b:07:aa:c2:0a:63:f0:9c:a5:a4:6f:90:ef:d2:6b:b0:2c:
         eb:b8:74:96:cb:76:3e:d8:5f:33:e8:77:e2:85:ec:d9:d4:3b:
         26:89:11:18:73:c7:c7:f5:78:53:ef:23:24:c6:fc:20:f1:a9:
         5c:e6:68:fd:96:5d:50:11:78:89:7e:8a:12:ae:0e:32:c3:31:
         00:d3:ba:1a:0c:38:a9:54:73:d0:11:99:87:36:99:36:77:95:
         7b:96:75:44:13:6a:5d:cc:8c:0d:da:ec:ec:f6:99:72:8a:e7:
         80:32:ce:9f:19:38:5f:42:30:d1:f9:0f:88:43:cc:cc:a7:74:
         a4:24:f9:0c:b7:84:d9:e4:fd:8b:9f:7b:55:b2:81:79:dd:6d:
         ae:d5:c8:46:78:17:d6:95:fe:92:6b:84:91:e7:e6:72:79:6a:
         f6:0b:bc:e2:1c:3f:00:ae:78:04:54:91:27:21:6d:92:56:7e:
         02:4a:6f:c4:81:03:94:5c:7b:ce:1e:b1:b3:24:a5:66:e0:5c:
         52:c4:14:c3:77:99:0e:3d:d6:e3:55:c4:33:bc:aa:81:78:5b:
         22:23:c1:75:84:4a:f2:13:68:8c:72:7e:dc:0e:a3:03:37:38:
         a4:7e:33:34:92:41:93:86:9c:c7:21:54:16:6b:1e:4c:62:80:
         d8:b8:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----