Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File:                     tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier:          g+BTmNoARHAJnGZ2VqHLYceE+KhKe3vSzcY9grKXa6c=
Subject key identifier:   B1:57:A9:50:97:BD:92:A2:BD:44:3A:3F:E4:BF:53:A5:30:B6:DA:32
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer:       /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial:       01962DF3AE00EC305E48C429556A79B42BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number:          0B67
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
                          2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: 8hvlVs/Q/NT18zRwHXL6J34p5lienKZ58n+mOrAvXxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ae:00:ec:30:5e:48:c4:29:55:6a:79:b4:2b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=b157a95097bd92a2bd443a3fe4bf53a530b6da32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1d:77:50:22:8d:b7:94:6f:f3:b8:d6:b6:d7:
                    a7:52:74:6f:5b:e8:d4:a2:9a:6b:8c:0d:24:62:75:
                    97:3e:bb:2e:c8:b9:4c:e4:3b:48:39:74:ce:b0:82:
                    49:6a:de:b4:64:17:2e:61:22:f9:e7:9b:44:d5:d2:
                    80:3c:8b:f3:df:ee:7f:73:a1:23:cd:77:f1:36:2b:
                    fc:8b:cb:3d:da:42:ef:93:68:41:78:32:e7:91:34:
                    cc:78:c0:b3:ea:1f:d1:d6:eb:e0:5f:34:ba:d1:f0:
                    97:3e:4a:af:06:df:9d:0f:df:ac:2e:86:08:e6:29:
                    77:81:cf:39:bf:18:41:09:4a:b7:eb:e9:ac:1a:cb:
                    01:59:2b:da:c5:94:24:b2:5c:f2:d4:5d:71:4e:2e:
                    93:ce:dd:4a:c9:02:23:77:d2:6a:de:bf:3f:d9:b0:
                    8c:c1:fc:7a:fc:a2:18:a9:8a:8e:12:a5:3e:9c:d7:
                    84:7c:54:f9:ee:b6:64:dc:1e:9c:06:f3:70:fc:31:
                    ab:05:0b:68:ae:ec:a5:54:43:51:98:a8:8f:fd:88:
                    a0:27:d1:fa:33:5f:61:30:8b:d8:27:4d:be:17:47:
                    d4:05:d9:5e:c8:eb:d9:f8:df:af:3e:df:bd:96:26:
                    a3:29:49:82:02:39:60:9f:13:59:3f:f2:bf:63:ad:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:57:A9:50:97:BD:92:A2:BD:44:3A:3F:E4:BF:53:A5:30:B6:DA:32
            X509v3 Authority Key Identifier:
                keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:11:22:d3:72:b3:28:77:69:2c:a1:07:a4:bf:04:5b:2b:
         87:88:90:7f:45:0c:8a:c0:70:af:fe:6f:80:6e:ce:30:75:48:
         dd:4c:3f:cc:69:55:92:41:97:e9:d8:f3:6f:3f:a6:c5:a4:f4:
         22:cd:c0:ef:c5:62:42:af:7a:b9:ba:b8:b5:ce:a9:4c:19:01:
         ee:27:4a:c6:90:5d:93:6e:f6:89:cf:a1:7f:f7:80:81:e6:84:
         01:ca:43:1c:91:f2:ec:9f:37:5e:86:11:a0:92:60:93:e0:80:
         86:8f:31:df:0e:70:1e:fc:cd:9b:b0:7d:28:c5:9c:b8:12:41:
         66:8c:8c:b8:c0:e6:1a:5d:a0:a3:03:2a:af:8b:d8:dd:d8:0e:
         f6:98:98:10:8c:44:b5:f4:07:8f:46:d6:85:66:a8:71:66:17:
         4a:9c:23:9a:1b:75:1e:95:fc:0e:f8:49:0a:25:e8:cc:43:99:
         2b:df:33:e0:2c:3c:f6:16:f9:d3:27:6f:7f:fa:21:98:66:3f:
         64:7d:96:88:8a:fa:86:8b:3f:7f:e8:58:c0:ae:6d:ec:4c:7a:
         06:e8:30:35:0c:86:12:09:7c:c4:0d:59:18:0d:df:a6:ef:74:
         06:bb:b6:96:9e:53:6d:0c:14:a1:82:29:72:52:11:ea:3b:35:
         fa:c1:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----