Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File:                     ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier:          LOKJmIY5TNwHkbjlgytW4y6kkfKQHRg47yZaHxxV7mc=
Subject key identifier:   7D:BD:84:AB:CA:2A:F0:01:4E:2B:9B:5F:48:F1:64:D6:C2:ED:E7:1C
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer:       /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial:       01962E2B231E0DF97C4CFAFEE8215B76656A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number:          0A92
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa (hash: GYazD0XUED0Lzoqp0JRsmv1Wdv3MWiNL0orAYJkGs0s=)
                          2: GTFBgv2tNjcuxAQIe01brH4jwTk.roa (hash: Mc8ui7CXRHASlbfIuKweFLL2cR+DG52g7wgx3xsTD/U=)
                          3: MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa (hash: tbC0zEQlc9n1vwOMWAcwfJO+Pz8J+NOLSdpR6f+1vt4=)
                          4: SeVKeWDlifWewWLGV-ux3X3eP-U.roa (hash: iAr3BiSouxw0/1U0gfsb+0eTpsmeqPEqcNVOd7duq/I=)
                          5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: lqHL8+U3hH1XEzbvb47xRJsj1HKUblB8NnThpYin1kQ=)
                          6: VQHe2S-7j8SMoLbiYSjz9IrWVbc.roa (hash: 4EmRDMW6ZpVFVYfLs3GRzG+ePL4wqHpJMD783K3OCFc=)
                          7: r34i9MogSBxeDWHyGIhH_hkNvH0.roa (hash: /LsOtQwuG5S1pPv/GDxv95WqbubjE7D9iX5jL74tvxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:23:1e:0d:f9:7c:4c:fa:fe:e8:21:5b:76:65:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=7dbd84abca2af0014e2b9b5f48f164d6c2ede71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:d4:b4:5d:be:7e:ed:99:67:39:6e:f7:1f:
                    3d:0d:ae:2d:f7:bb:c0:8b:24:1a:9a:4c:aa:32:13:
                    62:94:32:41:76:6f:fb:94:96:d4:6a:33:8f:bd:8a:
                    af:71:fc:6c:71:f6:46:fe:e4:ec:a8:1e:42:1d:e2:
                    f8:59:74:85:1d:3a:8e:cd:ee:1e:73:c2:8b:73:eb:
                    8c:2d:bc:6f:af:dd:6e:d8:5a:1b:d5:1a:fa:ab:5e:
                    cf:47:f7:f1:02:82:5d:7e:7e:a3:d6:64:59:63:b8:
                    a6:49:5c:cc:9d:fc:f5:66:cf:70:47:bd:b9:7e:6e:
                    bc:eb:93:e8:6c:b1:bc:71:59:e7:48:10:6b:73:30:
                    72:28:73:5d:02:a0:1a:e2:82:03:63:ab:a6:43:f4:
                    f8:4b:3a:d9:fa:41:9c:d1:c0:eb:f3:af:19:8d:95:
                    f5:b4:8a:06:7f:5f:06:7b:b8:e2:35:94:b2:cf:28:
                    77:1d:9a:dd:2e:4e:23:7b:a6:51:20:cf:d7:94:77:
                    47:9d:a5:c7:79:03:26:80:e2:dc:5e:88:75:9b:42:
                    a4:5b:64:81:0a:49:9a:a0:30:f1:aa:70:da:76:7d:
                    a1:d0:c5:c1:8d:c1:c8:f6:d9:a2:01:80:a2:12:ec:
                    f7:e4:0e:33:bd:05:b6:93:4d:ca:30:86:ba:3e:10:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:84:AB:CA:2A:F0:01:4E:2B:9B:5F:48:F1:64:D6:C2:ED:E7:1C
            X509v3 Authority Key Identifier:
                keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:6f:42:09:f4:10:49:d1:29:9f:e4:d7:51:0a:2b:49:0a:
         c4:f9:42:69:a9:d4:54:7f:8a:77:35:7b:0c:c1:e3:5b:f8:a7:
         c9:4d:55:b5:27:f9:61:ec:e3:60:35:d4:8d:80:41:65:f7:f0:
         be:b0:08:bd:c9:03:b3:fe:be:b2:d9:19:ba:cc:2a:2f:1b:80:
         78:df:f7:fc:5a:5c:09:b0:e8:2f:e2:1f:f2:23:9c:9e:53:b4:
         a8:4a:ea:e9:29:87:f9:69:8b:99:6f:27:3a:fd:cd:01:1f:27:
         93:61:c9:d4:61:d1:76:23:e5:24:22:07:e7:b8:08:e6:bb:20:
         5d:90:99:82:6a:71:10:71:15:df:09:de:2c:1c:7e:03:16:98:
         03:ac:4f:ef:81:61:ad:5f:eb:8a:61:9b:d5:8f:f1:7d:47:de:
         6f:02:54:dc:39:05:23:75:b2:92:18:55:df:58:5f:ef:85:31:
         2f:b0:0a:da:08:55:34:e5:ff:91:8c:74:61:1b:09:d4:e2:12:
         45:c0:21:99:68:e4:74:f4:d3:0f:2a:5d:16:56:98:c1:6c:a6:
         43:d2:38:2d:31:5e:8d:2a:9f:ab:28:5d:78:e1:fb:8a:87:3f:
         29:99:15:eb:46:44:d8:04:1b:68:9c:f0:0d:ef:41:e9:98:e3:
         18:4c:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----