Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File:                     t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier:          Y7MhORz9Pp1Bo6G1lQJtKmgtBbHQgvS48vMHBTNg5h8=
Subject key identifier:   0F:6E:3E:6A:E9:A8:99:CB:A5:C4:A2:7C:F5:42:61:C3:78:4F:E8:78
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer:       /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial:       01962FAB39267716E49139E53F7AA754791D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: 5d1Rsk4FP5GLfjvT0EmBWD5qTow.roa (hash: NqA84KX0Y0A9uS0K8Q/J20+otaYRcSGIUSuIKX3VI7s=)
                          2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: e4W4Lle/q0Yoj98kEvf/3iOSY0hWo/5nEdYvKu/gzrk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:26:77:16:e4:91:39:e5:3f:7a:a7:54:79:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=0f6e3e6ae9a899cba5c4a27cf54261c3784fe878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:27:92:85:c7:93:64:1d:d0:45:db:1b:9d:
                    cc:10:f2:44:c0:12:a6:e9:ba:8b:92:ad:05:59:50:
                    12:9f:e8:ee:6d:19:87:82:c4:55:cd:d2:82:22:f2:
                    86:50:f9:72:38:8a:98:fa:3b:1f:81:f9:ba:47:89:
                    a0:8d:70:18:73:40:55:c4:c0:8e:fc:8a:a7:19:c5:
                    3d:75:ff:76:1a:32:02:7b:85:d3:a6:39:7a:ea:9f:
                    06:3c:be:4f:f9:f0:a6:57:83:fe:84:8d:c2:6b:3f:
                    96:e5:57:78:91:61:4b:4b:dc:c7:46:72:80:2d:b2:
                    ea:e1:82:a2:62:5e:cc:c7:18:c7:2c:89:fa:34:37:
                    cf:fb:60:15:c9:e2:dd:7d:13:32:ee:53:6f:74:26:
                    06:d1:fc:8e:f9:77:96:b2:ab:c8:fd:03:4f:37:1b:
                    0d:bc:77:25:62:f7:b5:6c:c0:32:fd:8a:55:50:ae:
                    12:9f:63:f7:29:fc:71:25:aa:cf:b6:46:79:2c:e1:
                    e2:9e:cf:79:9d:91:0d:f4:69:bc:1d:c4:b4:a3:d3:
                    07:0f:9f:cf:df:41:bf:21:4a:43:f6:6f:95:e7:a9:
                    1d:a5:aa:bb:70:83:d6:f7:12:bf:2c:20:4d:78:89:
                    3b:49:93:5b:a8:06:16:26:3a:ee:3d:1e:09:8f:59:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6E:3E:6A:E9:A8:99:CB:A5:C4:A2:7C:F5:42:61:C3:78:4F:E8:78
            X509v3 Authority Key Identifier:
                keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:df:9c:2c:36:12:29:bd:da:79:72:de:f9:89:75:39:d3:
         29:9b:4f:91:a4:cb:7e:34:8b:16:c5:07:31:da:88:85:4f:31:
         5d:a7:fd:60:0a:51:59:d8:50:a3:47:4f:48:f8:a6:f1:4a:c2:
         fb:ef:e0:3a:fb:f1:d6:ca:87:06:35:77:40:f4:35:cb:64:7a:
         0c:c8:67:79:6c:dc:b2:ac:7b:05:74:2d:24:ef:1c:b5:65:8e:
         de:32:99:f3:d5:b0:7f:32:b1:5b:da:21:15:29:cb:31:f1:ba:
         55:83:ee:79:9d:05:cb:a6:99:60:e0:c8:39:ae:4e:0d:65:44:
         ca:c8:54:e3:a0:8f:a8:a3:35:87:e0:65:b7:45:c9:4d:e2:15:
         7e:2a:74:b0:e8:97:16:9e:bb:5e:18:6c:6a:b3:5f:ce:94:60:
         64:d8:d8:1c:b7:3c:2d:c8:e8:ff:8e:e3:28:76:9d:c4:bb:84:
         34:1e:23:5f:30:27:01:58:30:87:4e:40:c4:30:08:a9:9a:b8:
         75:ee:73:03:28:6c:54:68:ed:71:ea:73:c0:f2:fc:2a:4b:39:
         e3:43:47:cf:d8:f9:ab:f9:8e:49:86:58:5f:fc:36:93:02:eb:
         c2:9a:e7:78:ff:d7:08:29:f0:f9:b2:11:6f:30:c2:d7:d7:0e:
         3d:6e:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----