Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File:                     tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier:          sonwKCMmGTQNJzoifw2b5ZUpwIm/QbYUl0aWKDUnALk=
Subject key identifier:   3C:A2:CD:5F:E2:3A:F7:6B:3A:87:38:FD:D1:AB:81:73:89:D8:3E:FF
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer:       /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial:       01962E2B027A68A183C5A9B932EE5EE0411B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
                          2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: FQRqYJjwMy44aDZu/XpcpGHO5Ft3Rfx62ZAWt9fX5o0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:02:7a:68:a1:83:c5:a9:b9:32:ee:5e:e0:41:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=3ca2cd5fe23af76b3a8738fdd1ab817389d83eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:7c:95:16:4e:7a:e2:f2:aa:ff:f0:01:cc:
                    bb:75:22:bd:73:3a:28:a9:2d:00:96:0a:85:2a:81:
                    30:f4:28:bf:44:42:37:66:2a:a2:13:01:f9:15:f0:
                    07:e0:29:06:7d:aa:96:85:ce:70:2f:df:33:5c:ae:
                    c8:cd:be:80:1f:a1:ca:98:75:9c:1c:83:25:bb:a6:
                    44:08:f5:58:00:03:e5:e6:55:af:5a:2d:8a:66:00:
                    8a:16:28:01:30:75:3f:38:86:f4:d2:cd:e4:9a:8d:
                    c2:39:d5:23:f1:5b:78:fc:6c:92:ec:ac:06:67:34:
                    b5:64:95:60:d2:20:1e:32:89:04:48:9f:2f:81:7d:
                    75:19:9c:e2:75:dc:6a:b1:89:5a:0a:9b:8b:a3:28:
                    c6:c9:9d:33:3b:3a:61:4b:4e:ca:a2:37:8e:16:4b:
                    cb:25:3d:f1:69:6f:d6:bf:d4:96:b4:fb:a5:93:50:
                    a2:f7:5f:41:ce:dc:ec:4d:d9:a1:22:ad:6c:a9:e6:
                    d0:4f:49:30:52:0c:a8:af:1b:2e:bd:91:e9:61:a2:
                    f7:f2:fd:a6:da:0c:f3:b6:d8:99:ec:64:a7:69:c4:
                    d9:a0:d1:3f:2d:59:5e:7e:b0:07:b9:ed:7b:31:36:
                    7c:69:a0:a1:ea:3f:51:d6:96:c0:51:39:64:4a:a5:
                    a6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A2:CD:5F:E2:3A:F7:6B:3A:87:38:FD:D1:AB:81:73:89:D8:3E:FF
            X509v3 Authority Key Identifier:
                keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:96:f0:ae:1c:47:3f:e0:67:cf:f3:e7:36:c7:31:9f:95:
         0b:5e:42:67:d1:24:cc:26:46:f6:6a:81:2b:40:7d:71:b5:1b:
         4f:87:2b:09:cd:d3:fa:ee:0b:08:8a:c9:3b:71:f1:d2:44:b7:
         94:2c:d6:06:fe:8e:14:41:1b:65:fa:84:2b:cc:93:33:79:55:
         a0:aa:9a:a2:ee:d6:bd:a6:6f:90:29:37:c9:96:1e:03:d0:61:
         24:1f:f1:77:75:23:ec:88:b0:a9:dd:df:98:d3:2a:3d:f8:96:
         2a:0f:43:2b:29:e0:14:38:a3:82:f4:a3:63:96:57:7d:77:94:
         d3:5a:76:b5:09:e0:57:52:35:16:34:52:dc:82:2f:13:34:42:
         e7:1c:4d:cb:87:75:44:a4:62:ca:03:ed:65:8b:cf:1f:31:de:
         cb:ad:a4:6b:b4:9b:df:ff:6f:15:f6:67:a1:52:21:12:47:d1:
         f0:32:e6:d8:b1:89:50:2d:72:b0:ec:9b:cd:27:cf:8d:d0:e9:
         a2:c6:ed:e1:3d:60:de:f6:53:31:74:45:86:2e:2f:d3:c8:70:
         97:61:a2:08:00:5f:82:ba:5c:f1:fb:e4:95:0e:c0:7c:0f:8b:
         6a:04:f1:a0:d7:d4:df:47:0c:2d:21:63:ce:83:ec:2e:24:84:
         89:da:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----