Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File:                     tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier:          U9cX+Rs7WDi2CE4LHukVE6OvBoekAX0Okk2VoEnXuWo=
Subject key identifier:   E4:4A:DD:08:F9:F5:04:58:B5:35:5F:E9:D3:7C:A2:80:C8:77:C5:C8
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer:       /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial:       01962FABA5707335DE6AC474F4F3B0387F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
                          2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: dk8AvGg2yOT+SSLrxyI7egZkqH10216AQ7NUIxjAWNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a5:70:73:35:de:6a:c4:74:f4:f3:b0:38:7f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=e44add08f9f50458b5355fe9d37ca280c877c5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:f0:e8:bb:79:a6:cf:31:4e:a0:16:a0:46:
                    82:a1:93:fc:53:62:ac:2e:d5:04:b3:de:21:7f:00:
                    af:21:3e:de:64:35:4d:29:48:c4:86:8b:52:c4:ae:
                    0a:2f:14:b7:7b:77:39:3f:a1:32:c6:19:97:1b:22:
                    cd:a4:9d:70:80:75:e7:76:a4:a8:14:8a:c0:ee:82:
                    43:39:85:fe:d8:b6:69:01:92:a9:fb:93:69:e6:da:
                    38:d7:b3:97:00:84:d2:e5:46:b1:dd:f5:67:4b:6a:
                    2d:a2:9b:cd:86:43:d4:e5:9b:20:50:5b:44:dc:3b:
                    ba:8d:2b:63:6f:f3:e8:3a:22:1b:59:4b:1c:da:a0:
                    11:42:ea:40:8a:62:29:31:cd:9e:9e:25:41:d8:c8:
                    96:0e:80:7d:5b:b4:86:fa:68:30:86:fc:cc:08:89:
                    41:82:bf:66:5e:3a:b4:99:de:42:4f:cf:9d:db:94:
                    fe:3c:e5:a4:86:75:ee:0f:01:d4:22:e2:40:4e:26:
                    ac:ff:d5:1d:45:a7:69:6c:73:bb:f0:36:2d:46:f4:
                    ff:4c:66:b9:da:30:a9:a1:c4:62:76:20:63:e1:57:
                    8a:27:3e:4c:cf:a0:4d:ef:fb:57:8f:70:a2:27:53:
                    d5:cc:9d:7b:51:a4:f1:db:e3:33:6e:23:34:41:bc:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:DD:08:F9:F5:04:58:B5:35:5F:E9:D3:7C:A2:80:C8:77:C5:C8
            X509v3 Authority Key Identifier:
                keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:f1:ec:76:77:c2:f6:ea:d4:cf:23:bd:b4:0d:b7:e9:a7:
         20:ca:f9:d2:b1:b7:ee:1b:60:da:82:3d:ff:23:00:87:72:1b:
         5a:d1:7d:b8:33:69:f2:38:2e:f0:67:e6:98:3a:c2:3d:61:68:
         f2:30:8a:c8:25:3c:b8:ee:7e:ad:52:e6:62:31:d9:4b:42:1c:
         27:c7:6f:fb:24:08:f1:f0:9d:da:5a:9c:92:bd:18:9b:88:cf:
         16:93:c0:e3:de:b5:1c:a1:ca:2c:f4:14:4b:dc:65:28:c9:fb:
         6d:b4:76:a4:90:11:0f:de:a1:0d:94:09:19:47:c0:39:05:82:
         c1:a6:33:92:8c:01:17:94:6a:64:39:a9:20:f8:22:55:ba:ad:
         6d:c8:ff:d4:fb:d1:41:e1:a4:dc:2a:53:2b:b6:8f:fc:a0:ca:
         eb:55:2d:b1:f8:59:11:da:fb:b8:93:97:8d:af:b0:3b:17:e7:
         0e:a6:b2:a1:b9:71:ab:85:dd:f4:db:d9:be:15:cf:87:37:d3:
         0f:ed:aa:e5:28:31:ea:0f:ca:ce:80:54:95:96:81:92:90:93:
         d7:b9:76:fb:2b:65:8a:6c:bf:54:74:76:74:82:53:13:ad:1f:
         bf:1c:b0:8b:0a:c5:f3:4f:14:eb:69:cc:47:1b:50:84:5f:ff:
         f0:b9:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----