Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File:                     tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier:          Z9yV+5c3Y8ms2C+r4AGuC04kRgRu855fv2geTBt1yJs=
Subject key identifier:   C0:96:74:97:6F:8B:1F:FE:22:FC:69:D3:AF:79:9A:5C:0B:AE:14:8E
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer:       /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial:       01962E6173208BA315CFBDEFC7AFB4782967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number:          030F
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
                          2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: Rh4V0uS6FJO2hTgTlZOPdSUvljMdFGd1eag31TjK0b0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:73:20:8b:a3:15:cf:bd:ef:c7:af:b4:78:29:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=c09674976f8b1ffe22fc69d3af799a5c0bae148e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:48:b9:68:03:53:10:0a:0f:f2:3a:6d:b5:
                    73:ce:da:4f:56:5e:9e:7e:23:8b:bb:5b:0b:da:a2:
                    8f:26:ea:cf:da:b4:61:2a:4b:3f:e8:27:bc:07:c0:
                    ad:f8:03:e5:18:f9:b0:09:b6:e9:c7:ad:44:95:e8:
                    46:5f:5f:52:72:17:ce:0a:76:f5:d8:fd:8e:0d:0a:
                    41:4e:af:ec:ca:aa:50:a9:b4:3c:5d:f6:43:cc:14:
                    98:1a:fd:51:3e:db:df:4e:8a:76:a3:e8:24:39:70:
                    e7:40:19:c2:c5:bb:12:26:2e:d5:d0:d1:ad:a8:3c:
                    0b:aa:90:48:b0:b5:a2:4b:27:a0:28:b4:02:22:05:
                    12:aa:67:ed:37:2f:5d:6b:e4:f3:46:d2:c0:3a:34:
                    86:db:a2:a4:83:a0:ed:1f:da:19:d5:be:ab:05:05:
                    1c:ed:1c:2a:48:31:f9:8e:5e:7a:0a:dd:59:c2:00:
                    25:f8:fb:26:d6:7d:43:6e:f3:af:aa:13:15:98:cd:
                    1f:13:ac:20:50:f8:cc:af:79:0a:c9:22:87:44:50:
                    cd:75:0c:10:33:61:b3:39:e4:02:77:31:c8:b0:c6:
                    ee:1d:80:d0:6b:32:a3:47:8c:d9:7d:60:5b:75:6a:
                    4c:2f:cf:67:02:89:2d:15:eb:e4:59:0b:f7:cf:c6:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:74:97:6F:8B:1F:FE:22:FC:69:D3:AF:79:9A:5C:0B:AE:14:8E
            X509v3 Authority Key Identifier:
                keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:13:ed:a8:c3:b7:88:12:97:9a:b0:f2:eb:37:06:1f:18:1d:
         23:30:d0:fd:5a:24:52:6f:11:c5:7c:11:8e:48:7e:1f:b2:da:
         70:6e:7b:d9:1f:2e:7f:b2:61:c1:59:a1:88:8e:5c:a9:66:01:
         c2:47:ef:b8:1c:7d:af:3a:86:3c:9a:e0:5d:02:57:4f:37:96:
         77:5d:3f:35:b2:05:36:06:f4:67:e6:ef:f6:30:b7:1e:e1:da:
         29:d9:f8:b9:48:57:fd:02:24:ee:d1:24:6f:40:e2:6b:9b:0f:
         66:4a:09:84:43:01:fa:c9:90:2f:75:22:c8:78:ec:80:79:fd:
         4c:d5:79:8a:d2:c2:45:45:29:fb:d5:10:6a:ef:eb:a2:59:94:
         7d:52:2e:b3:4f:5f:0b:4b:8e:85:90:cb:5b:64:76:df:8d:d5:
         42:a1:f6:a1:90:33:61:3e:a8:71:23:c6:84:4e:c4:1e:ba:f3:
         8b:01:3a:70:b2:8d:7d:cd:82:1f:77:d9:2b:e2:13:32:a1:96:
         64:99:0c:ff:0d:4f:6b:95:89:8b:bb:ad:fd:2e:85:c0:62:12:
         ba:e6:cb:bb:43:83:2e:bc:28:05:7e:b6:ea:2f:79:6e:ac:a5:
         aa:57:3a:3e:80:d5:e2:ee:a1:54:a5:e7:3b:62:41:98:aa:ff:
         4b:7a:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----