Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File:                     tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier:          uMJN8YMDJtYXEXBYr4Vr6oE+NlxvV9Kdt+4FqI2lFOg=
Subject key identifier:   BD:06:77:A7:5E:38:87:C0:12:D2:3A:EE:D6:2C:6B:A1:42:82:1D:1B
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer:       /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial:       01962DF3CFBFB10DF4A038F17EA04A703573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number:          06D6
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
                          2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
                          3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: cMEk+6+TDtRupttLtv9VTy5awECn2lLU3IzHpyDRB7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cf:bf:b1:0d:f4:a0:38:f1:7e:a0:4a:70:35:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=bd0677a75e3887c012d23aeed62c6ba142821d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:8a:e4:7a:92:93:83:f7:f6:72:62:df:0d:
                    bb:ff:1e:bd:19:2f:9b:cf:84:e0:9e:79:3b:b8:c5:
                    f5:31:56:1f:28:d8:cf:dc:69:15:06:8c:e6:cc:e2:
                    27:8a:db:50:c8:5c:1d:0a:17:7f:a4:0e:68:d8:35:
                    84:7b:fb:38:60:7e:c8:9d:c8:23:46:c2:b5:3a:9d:
                    8b:dc:a6:7c:92:d6:39:ff:3d:1d:1f:95:d9:e5:88:
                    43:52:9a:02:06:c9:c5:b4:82:b5:51:a4:84:42:a0:
                    8a:64:6c:36:af:23:e1:71:fa:b2:f4:26:b1:0f:fb:
                    22:44:37:b8:c7:e7:c7:01:c5:0d:b5:59:72:8b:ab:
                    8c:25:da:93:8e:be:cd:0b:36:45:04:33:16:37:5f:
                    2a:9b:7b:09:3d:38:83:aa:17:ac:14:ab:c2:c9:dd:
                    42:5b:e3:64:52:c1:55:9f:c8:2e:76:13:c7:26:06:
                    2a:a4:69:7a:7c:41:5d:2c:25:3d:f9:28:58:96:48:
                    de:40:4b:75:21:d4:89:21:3e:0e:d0:85:f2:a4:c4:
                    93:8c:96:b9:25:80:64:53:a0:d0:e2:97:c7:7e:82:
                    68:06:08:5d:77:79:1b:76:2e:4a:09:34:fd:aa:17:
                    f7:90:a8:0c:b5:18:40:71:a4:66:68:18:bc:fb:ea:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:06:77:A7:5E:38:87:C0:12:D2:3A:EE:D6:2C:6B:A1:42:82:1D:1B
            X509v3 Authority Key Identifier:
                keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:54:c7:a3:26:7e:df:40:e7:63:72:46:ac:e1:3a:77:1d:
         f7:68:91:38:74:67:ae:f9:8d:fd:18:06:87:99:bd:bd:05:0f:
         ce:ff:c1:99:eb:d6:29:c5:9c:5d:5b:19:39:36:ec:96:0a:23:
         c5:fb:d0:64:4e:6b:c4:b5:96:d4:fc:5c:5f:e5:a7:13:eb:82:
         d2:f1:ea:28:18:e5:db:83:5e:75:2b:b3:7f:85:67:99:cf:50:
         4d:7b:ed:10:93:98:11:ee:96:b8:16:89:b4:cb:8b:f3:3a:51:
         24:f7:15:2c:0f:60:3b:47:d9:d1:f5:fc:b4:70:6e:b9:42:35:
         78:9d:12:7d:f7:a4:52:3a:a7:9a:68:46:8f:e7:a1:84:66:c4:
         4f:1a:81:fb:1b:a6:92:95:b2:61:57:37:78:f8:3a:c6:29:ee:
         90:56:50:32:54:45:98:b6:14:df:4d:96:f6:e5:d4:9e:a6:9c:
         b0:cd:d2:3e:ac:32:85:e3:35:e6:cc:4b:90:4d:3f:b6:5e:78:
         16:a0:e2:c9:7f:f1:70:2f:58:c3:82:7d:3e:93:88:a7:27:07:
         81:04:a3:1d:94:43:20:02:eb:21:b5:50:89:71:e5:98:93:6e:
         8f:a0:22:df:c4:f7:9e:a7:96:f6:a1:ea:9f:0d:a6:60:f5:da:
         73:f0:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----