Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File:                     tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier:          zvpZZHc0d2fPppXif51LJrEU+TT7vrZqD+1hCsdx+QU=
Subject key identifier:   B9:C2:36:FF:BD:19:49:E7:8A:62:57:90:65:F8:6A:EC:91:6E:1A:88
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer:       /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial:       01962ECFA1157366ED1599EBB3AA8B52A49C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number:          0719
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=)
                          2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=)
                          3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: U2ZyO9gg0E05Rk2yO6S3vcNd25jCrP0P3bXQM7HuBbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a1:15:73:66:ed:15:99:eb:b3:aa:8b:52:a4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=b9c236ffbd1949e78a62579065f86aec916e1a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:7c:26:e7:b6:10:ca:9e:62:da:10:de:78:
                    4b:1b:d5:3a:2f:2d:87:05:da:b0:34:c5:26:d0:b0:
                    6c:1b:da:7e:a3:87:38:67:6f:3c:ed:5b:6c:1c:c2:
                    51:1d:ae:10:94:f5:93:d9:ae:75:70:a3:c4:81:ca:
                    25:fa:73:0d:fc:be:7c:10:c1:c6:c2:53:95:f4:87:
                    0d:63:f9:a6:fd:7b:f5:d0:0b:d6:50:9e:c6:97:bd:
                    63:f2:d7:37:92:86:c4:51:c8:f8:e7:9a:dd:7e:99:
                    ec:d9:28:53:12:20:b7:55:c1:f5:de:73:99:a7:a6:
                    69:7e:5d:fb:cc:e5:17:ee:0c:10:7a:61:0d:31:b6:
                    20:68:3d:94:ab:f3:57:bb:ff:1d:fd:c2:c1:2e:ac:
                    02:1d:60:20:c9:77:4d:48:e0:d0:42:d6:6b:53:b1:
                    b3:79:75:2f:f3:63:07:1c:ac:49:91:2a:10:58:b5:
                    88:88:2f:06:15:71:15:89:20:3f:2e:1f:ea:33:e9:
                    d4:f3:52:54:41:0d:c1:21:0e:31:84:00:7c:3e:eb:
                    db:68:17:f8:26:4f:6d:19:70:4c:65:f7:80:7f:51:
                    25:f5:4a:3d:50:a2:bb:70:0d:64:d6:f5:0c:ee:40:
                    ff:88:4c:c4:ef:aa:90:2f:d2:c6:5f:3f:9f:b4:96:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:36:FF:BD:19:49:E7:8A:62:57:90:65:F8:6A:EC:91:6E:1A:88
            X509v3 Authority Key Identifier:
                keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:c2:fb:0c:6f:d3:be:8f:b4:16:83:99:2d:72:bd:85:54:
         1d:86:9d:08:9a:43:90:0d:34:ca:28:b0:7f:a2:67:a5:23:a7:
         c8:f4:56:70:46:8c:d3:15:4e:7e:fc:82:11:3a:b6:72:1d:d7:
         56:7d:bf:7a:2b:5e:fd:f4:f1:54:b3:b7:d5:47:ff:31:b6:ca:
         79:60:8d:5d:c1:38:33:ad:61:36:4a:a0:d1:3a:33:33:66:98:
         03:ad:e7:17:23:23:27:39:bf:68:45:d0:5b:00:ff:51:dd:bb:
         38:16:68:f4:ec:31:49:62:95:c0:0a:20:9d:ea:7a:35:28:7a:
         9d:e0:b4:96:ff:2c:da:8d:50:cb:6d:c8:36:3d:32:32:31:bd:
         d6:5c:36:4e:ba:e0:2e:51:c3:a5:ed:d3:6f:cb:4c:88:7a:88:
         17:ca:59:c4:35:03:27:d0:b8:ac:28:0f:51:95:01:e6:77:02:
         6c:31:86:ff:2b:4f:75:b9:ca:fe:53:03:c4:0f:38:ff:40:5c:
         b8:d0:73:85:6a:c7:13:35:7c:b4:3d:b8:d6:5b:c1:b6:9a:80:
         37:44:fd:8f:42:c4:e5:a7:11:5e:4d:bf:8d:9c:6e:12:30:ef:
         16:19:5f:f2:9b:91:60:6a:d4:e1:71:17:51:40:9e:5c:41:10:
         25:3f:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----