Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File:                     To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier:          cADjuuz5wk0bNxyAODXJyLbRfvPm6g4g1tWRyhwrbm0=
Subject key identifier:   D5:58:47:5F:B6:EB:3F:70:1E:F3:11:A9:C7:50:34:50:7A:C9:1A:AD
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer:       /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial:       01962FAB2145B3C27C6CFCDFE227401D05BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number:          069C
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: eCYXjR6XIPt+H7AT264WRGN6TyUBByRxCYMhW2TbeAw=)
                          2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:21:45:b3:c2:7c:6c:fc:df:e2:27:40:1d:05:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=d558475fb6eb3f701ef311a9c75034507ac91aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:c4:c5:42:e3:51:30:a2:19:0d:97:2e:e5:
                    ab:d7:69:c7:45:88:f0:65:54:94:8a:ee:ae:53:51:
                    ae:d8:9b:7a:20:7b:bb:52:36:71:fd:a2:3b:b7:a5:
                    3d:1f:df:da:01:26:ab:de:7e:3e:16:2f:00:04:07:
                    08:76:4c:f9:fd:dc:fd:52:c1:4b:82:f4:f7:e3:b5:
                    48:bf:4a:7f:b4:22:2f:8d:73:a8:3b:dd:20:db:52:
                    e2:ff:b5:9d:f6:b2:ea:38:26:8f:21:0d:0c:92:11:
                    6e:d6:35:5e:f0:2a:f9:69:7b:cc:7b:c4:0e:0d:6c:
                    ae:0d:c6:18:c4:0b:54:87:b9:b1:c9:4f:fb:2e:2f:
                    f4:1d:b6:b0:9f:b1:f8:30:86:2e:1b:ea:c7:25:72:
                    8c:af:e7:0b:d3:c3:b7:16:d2:93:65:fb:5d:89:ae:
                    17:4c:2d:78:81:31:45:de:9d:48:51:21:22:85:a9:
                    f5:4d:47:82:4a:92:f5:8f:00:7e:06:74:fa:e6:e0:
                    bd:23:0d:ff:f2:d8:86:eb:63:65:cd:ed:01:ec:bb:
                    83:6c:ef:b1:33:29:54:89:d0:a0:95:b3:36:9e:ac:
                    e1:bc:f6:92:e4:48:44:02:1c:0e:76:d9:65:25:ad:
                    ca:69:cf:ad:80:3a:e1:73:39:5b:d7:a3:78:13:ad:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:47:5F:B6:EB:3F:70:1E:F3:11:A9:C7:50:34:50:7A:C9:1A:AD
            X509v3 Authority Key Identifier:
                keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:0b:c6:d1:c6:2e:33:71:e0:2f:fd:4b:e2:76:26:45:9a:
         64:3f:d1:3c:57:87:a1:d2:e5:bd:38:11:d4:02:f6:b5:53:8d:
         15:55:d7:2b:5c:dc:ed:e1:4b:e1:61:75:49:a0:be:ca:73:b6:
         12:11:bf:7e:b2:a0:b1:58:54:3d:29:15:69:6f:e0:8c:76:92:
         65:95:bf:04:48:be:0d:cb:1e:58:5b:b4:fd:c1:eb:d9:05:e8:
         40:06:0b:c1:a9:23:c1:ad:89:92:dd:91:cc:49:e5:c3:ab:2c:
         be:dc:f2:24:9c:05:f0:5d:4c:1e:50:7b:ba:f1:5b:ef:5c:f5:
         7d:11:6d:50:ad:11:72:62:c9:62:e7:5f:fd:07:8b:da:3c:14:
         97:80:ad:29:72:fd:fb:9b:a3:a4:d1:75:16:7a:e3:b5:d8:f2:
         47:ac:c1:ba:65:9c:3d:73:2a:dd:63:21:e3:a1:8b:61:e4:e8:
         36:51:8f:79:13:df:7f:1a:81:2b:32:42:35:ab:b7:af:f5:d9:
         75:51:df:7f:1d:df:74:ed:63:69:11:12:2e:ac:bc:1a:80:e5:
         42:fd:ad:c5:cc:87:6e:90:6b:36:92:48:61:9c:8f:51:b2:a0:
         b3:9e:46:9e:4a:62:24:bb:2e:14:df:97:df:c8:02:c3:09:45:
         a1:78:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----