Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
File:                     tIKj5Qem8UAPb74uFI-hZERH5s0.mft (raw, json)
Hash identifier:          2s9sGxb8Tpvd4Jj6ApubMO2R4g8J9AWZzmWLbBhzCV0=
Subject key identifier:   F7:E1:E4:B9:A5:85:90:CE:C1:FF:A6:62:A7:E4:84:5A:60:C4:E2:B5
Authority key identifier: B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
Certificate issuer:       /CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Certificate serial:       01962F3D4218FBEFE9DD4EDC4A4A992F5EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
Manifest number:          0D04
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: jc3nJE4HlaAIZYtU9WTa-kp6P_0.roa (hash: ni65Uin42OxyzHPEODsDWUqZ0OwEhmfq3oGGPy0ODBg=)
                          2: tIKj5Qem8UAPb74uFI-hZERH5s0.crl (hash: TFykDKfZVomejlfvIzC21JI18d0wIEOL65ZIK4adPqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:42:18:fb:ef:e9:dd:4e:dc:4a:4a:99:2f:5e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=f7e1e4b9a58590cec1ffa662a7e4845a60c4e2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:81:6b:2a:b2:5c:e6:85:aa:87:90:79:8a:
                    34:ca:2b:14:93:1b:85:d8:d2:e2:96:df:9e:e5:10:
                    d1:2c:79:57:cd:9d:45:af:c0:56:6c:0b:82:bb:7e:
                    f9:e8:5d:2f:fa:c8:0a:ea:fe:1a:09:60:a9:ce:07:
                    d3:60:85:f4:7c:9f:07:b6:69:7b:97:ad:7f:63:32:
                    6f:23:73:de:51:51:46:b6:54:11:46:f8:59:15:64:
                    cd:59:9f:5b:0c:d8:79:28:fb:46:8e:e5:a5:aa:41:
                    7d:1e:08:ec:5b:e0:ea:7e:cc:77:de:8f:ea:8f:e7:
                    19:a7:10:bd:f3:40:b7:2b:55:5e:1b:71:2c:38:62:
                    cc:59:22:e8:2b:d5:e0:7f:41:98:7e:e1:5f:ef:29:
                    60:82:c5:11:0f:eb:b0:75:dc:7d:6d:3b:93:c9:7f:
                    24:56:a2:20:7b:70:f8:55:d9:e2:a3:75:23:7a:95:
                    d3:16:15:3f:83:18:43:d0:ec:b5:db:a4:9f:62:b7:
                    eb:92:f0:53:12:a8:fa:d9:02:a3:a8:50:69:5c:81:
                    ec:47:f7:35:15:08:b4:f8:c5:82:0b:60:94:06:15:
                    e5:bc:8f:e4:cd:a6:55:b2:d1:4a:50:fc:6a:75:d8:
                    79:ca:84:dd:98:f3:c0:6b:28:27:b7:90:a4:21:be:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E1:E4:B9:A5:85:90:CE:C1:FF:A6:62:A7:E4:84:5A:60:C4:E2:B5
            X509v3 Authority Key Identifier:
                keyid:B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:54:b8:1d:4c:e3:4d:c8:bc:6e:e3:0d:70:d1:d9:5f:95:87:
         d8:18:57:d9:d5:89:01:e7:db:f3:0e:80:0e:5c:37:20:00:16:
         e1:8e:04:f6:2e:82:54:3e:23:76:31:a1:4c:30:1e:95:ad:17:
         41:c4:29:2c:d6:22:d4:ac:0c:f1:34:c5:2d:87:34:71:80:f8:
         2a:44:d1:3e:a9:62:96:cd:fc:9f:0c:11:c3:a6:ba:0c:33:a5:
         2b:75:a8:64:d5:53:53:6d:7f:b1:6f:14:6a:ad:c6:1d:04:19:
         8b:fe:18:f6:62:09:92:e4:f9:8a:ee:a9:ae:24:b5:7e:8b:0d:
         4f:ff:b4:62:12:b9:2b:19:8e:95:c2:d1:e9:c9:81:f7:1c:3b:
         1f:ce:77:90:e4:2f:bb:4f:a9:42:ae:7a:26:c5:54:9a:88:ae:
         d5:b2:cb:eb:6a:eb:b7:c4:31:95:15:7e:60:61:53:32:b0:f1:
         f4:00:75:df:a2:10:16:39:7f:f2:c2:01:15:3a:c9:2b:72:38:
         03:be:9c:54:34:6e:b2:e1:5f:8e:9f:82:a3:ab:e1:a3:ed:7e:
         1a:19:30:d2:23:f9:b1:9a:b8:2b:76:c8:fb:0d:ea:7f:46:1e:
         77:92:42:92:ed:e0:a3:9d:81:2a:20:2c:af:76:14:a5:d2:83:
         38:12:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----