Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
File:                     TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json)
Hash identifier:          Iuej+cp+r9sG4pTmyj+SsNDn91NO7xguMKDYwJM1/6A=
Subject key identifier:   57:98:63:90:62:81:B6:5E:96:61:AB:98:F0:D2:E0:A6:CE:6D:BF:3D
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Certificate issuer:       /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial:       01962E61BF7354F060182B0F63E1DA8DBBDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
Manifest number:          0C46
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: PVatpozxq2iSr5EjDz4p95PO1D8.roa (hash: jnj6J4YwXSNpdZA8cx57mMPaW12cBZG8T42Zb5JhBQ4=)
                          2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: s15Y83oEq6tOC7J5vR2Cxg0lm9amJI3gGHl+QWEHegA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bf:73:54:f0:60:18:2b:0f:63:e1:da:8d:bb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=579863906281b65e9661ab98f0d2e0a6ce6dbf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:2f:5e:86:44:d2:b5:3d:f3:33:46:43:a0:
                    36:f9:f9:90:9f:20:a6:b2:ed:51:cd:a6:33:11:55:
                    2a:bb:93:84:db:9f:e8:94:ec:69:12:d1:14:50:23:
                    39:65:47:a8:a4:b0:51:70:26:01:a9:26:25:c8:06:
                    9a:33:b5:da:d9:23:8c:d7:f2:88:99:68:38:be:d9:
                    71:bd:e1:70:67:49:cb:1d:f6:87:77:60:15:c3:1a:
                    67:a8:45:85:85:3f:ca:20:3e:18:84:0e:5e:6c:9b:
                    8e:d0:db:f8:11:49:f3:9c:82:17:0e:0b:dc:e0:29:
                    04:9e:5e:39:96:85:08:6b:e1:01:db:23:b8:e4:1e:
                    5c:13:41:bb:18:3a:06:8a:27:fd:58:f8:00:12:6f:
                    c2:35:2f:a7:c0:76:d9:a2:47:1f:3a:3c:96:70:17:
                    53:bf:8e:db:32:5a:2d:38:5e:d6:af:c7:fa:d8:ff:
                    63:6a:f4:f7:81:29:9f:3a:88:e3:df:bc:21:eb:6b:
                    37:35:2b:85:99:55:0d:5b:46:94:25:67:1a:bd:4f:
                    0c:8f:03:c1:42:0b:23:dc:92:73:6b:12:94:c3:5c:
                    59:f5:69:b3:ae:20:24:11:eb:62:f1:c9:71:26:72:
                    0c:16:26:7b:f6:97:aa:47:27:d0:f5:df:4d:fd:87:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:98:63:90:62:81:B6:5E:96:61:AB:98:F0:D2:E0:A6:CE:6D:BF:3D
            X509v3 Authority Key Identifier:
                keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:58:6b:78:02:77:0e:a4:67:b3:09:24:b2:fa:43:cd:60:91:
         68:7f:09:20:eb:bd:de:68:c2:2e:d3:74:61:04:ae:36:b0:c8:
         16:19:a4:79:89:1c:95:bb:1f:4a:7e:e2:63:4c:1e:19:0f:2b:
         bc:e2:87:87:a1:26:98:d3:0c:d8:56:89:ca:f0:05:b7:3b:77:
         3b:9e:a2:68:71:b1:ad:86:a3:ee:1a:9b:d6:45:42:e0:41:6d:
         99:f1:c1:80:94:36:13:2f:ba:81:c4:91:30:a0:9d:cd:12:3f:
         38:80:af:9a:f7:0f:7e:c8:4c:f9:b5:3c:8e:f8:21:ca:de:73:
         cd:16:78:a3:32:f5:11:24:ec:7f:c8:5e:80:0e:c3:dc:99:58:
         ea:f5:de:d0:fe:92:f7:ac:7c:20:1b:f7:86:2c:4a:14:7d:77:
         39:a9:59:35:10:80:f8:12:d1:54:c1:13:3b:9c:5f:46:5a:38:
         ef:89:10:db:bb:fd:6c:f3:00:0f:d4:e6:5c:06:1b:1a:9c:5d:
         b5:34:f5:64:b9:72:17:06:38:aa:4c:85:3c:2d:56:23:a5:da:
         6e:3a:29:8d:88:de:01:8e:13:9e:a7:db:98:16:24:ae:a3:be:
         d7:b8:36:30:73:63:ac:82:7e:5c:aa:c3:82:47:93:9b:ed:ac:
         ae:e4:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----