Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
File:                     tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json)
Hash identifier:          dpcRvXbFl9/aosS1/H96rdlBaJoVk4biDyHlwQoKXgE=
Subject key identifier:   1A:04:E3:EB:1C:3F:CF:09:E5:A1:AD:3D:4F:78:42:E4:49:25:B4:E0
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Certificate issuer:       /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial:       01962F3D87F0D09A2F0F8775ABFB37BA0FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
Manifest number:          0DFF
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: n153dY1GpJ4_UwUqUY3HaTEGP7I.roa (hash: Xk7KXK61rmwLqoIHj+t2jV4riZg2jXu+cWnVquz+ZXA=)
                          2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: mIV6zIu4jT9+OP41FoA+O3l8a0biJ9sjEZaoh28JS0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:87:f0:d0:9a:2f:0f:87:75:ab:fb:37:ba:0f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=1a04e3eb1c3fcf09e5a1ad3d4f7842e44925b4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:ef:a2:b5:d1:33:50:67:1f:ee:8a:13:ef:
                    4a:5f:66:63:c8:e1:a2:ec:1b:57:b5:ff:c0:92:b4:
                    9b:b0:90:27:9d:06:26:16:07:07:7e:ad:18:9b:44:
                    47:61:12:42:1a:c8:ed:9f:c3:bd:d3:2a:49:f5:28:
                    cd:fb:83:a5:de:71:5c:75:c9:20:16:a4:5e:41:e1:
                    ab:33:f2:da:c5:a7:7e:0b:c6:97:d8:5f:65:b4:33:
                    3f:77:78:71:97:14:53:44:c8:29:8d:03:df:4f:a3:
                    43:fd:3b:36:76:f4:63:cd:80:51:a1:61:aa:08:93:
                    23:9b:63:dc:df:7e:01:0c:dc:6d:4f:05:03:e3:1f:
                    3d:1e:fd:e7:3c:64:1e:a6:f5:f7:76:7a:23:91:7b:
                    61:df:3e:38:17:b0:45:dd:05:3d:4d:0f:b2:b1:61:
                    7e:1b:5e:44:3b:dc:0e:0d:f9:66:e9:1e:8d:0a:42:
                    d8:17:b2:a2:b4:30:5c:ad:6d:70:b5:b9:52:4a:9d:
                    c9:5b:97:fd:96:3c:99:1a:0d:32:17:24:b1:e6:98:
                    67:0b:06:41:0d:52:70:92:99:19:19:a3:03:23:c5:
                    a6:40:69:c5:cb:f7:1a:7e:a7:15:75:e2:ac:31:73:
                    5b:b6:10:bf:c7:73:f9:6e:8e:39:d3:f8:1f:ea:68:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:04:E3:EB:1C:3F:CF:09:E5:A1:AD:3D:4F:78:42:E4:49:25:B4:E0
            X509v3 Authority Key Identifier:
                keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bd:1e:f4:15:18:57:0f:50:b4:b1:c4:e5:0e:75:c7:e6:69:
         3b:f8:6d:ff:17:47:a5:18:e3:6f:f8:0d:2b:f7:1e:4a:76:0e:
         1d:3a:fa:d3:00:37:00:38:7e:5a:eb:a7:5f:1c:ed:d6:68:6d:
         78:0a:93:9f:e6:c1:39:a5:f6:6a:4c:56:55:05:27:7d:b1:00:
         da:73:62:04:3f:8a:d3:46:93:fd:87:77:c3:5e:d7:99:ce:96:
         bd:f7:68:f9:a4:29:4d:4a:66:0e:83:43:80:a5:77:e7:ef:b1:
         8b:e9:6c:bf:2b:97:a3:3c:d5:8e:7b:0b:41:53:66:f8:8a:f9:
         f5:bf:50:02:c2:c3:a7:53:19:3b:3b:48:3a:df:37:ae:a0:9d:
         6f:9c:78:31:fb:9c:03:30:64:7a:70:e1:d3:6d:e5:49:a4:5c:
         f8:e5:8e:ce:46:13:b3:c7:3d:cc:af:02:53:8e:72:37:a9:3b:
         f0:c3:2b:46:45:80:5f:ad:3b:14:dc:31:04:c9:c0:25:e9:50:
         e4:36:8c:08:b4:17:6f:e5:e3:62:b3:5a:af:0a:6e:78:fc:fc:
         3d:84:5c:14:8b:a7:1c:ef:9a:e3:66:0c:b2:64:50:f1:9a:d3:
         c5:e0:43:25:f8:11:7b:11:b7:c4:0f:9c:56:dc:af:a3:6d:6a:
         b5:0f:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----