Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File:                     temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier:          z7DqYlAMJGDtIXcUdb0BWxieSgWVTOlItR1jkABh41g=
Subject key identifier:   A1:14:D6:32:77:AF:FA:46:EB:D7:59:DB:1B:6C:A3:6D:54:35:21:4E
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer:       /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial:       01962E9881484CE92AC9C32CC3DEC393B221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number:          03ED
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
                          2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: 3haG5bUdvrWRkD8HZf6+TEjhcu4N84P2rOeimkiuHp0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:81:48:4c:e9:2a:c9:c3:2c:c3:de:c3:93:b2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=a114d63277affa46ebd759db1b6ca36d5435214e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:0f:5b:4c:33:5c:3b:03:3b:98:84:3d:98:
                    71:cd:e5:ea:80:bc:d0:0f:53:f1:dc:f0:9a:2e:80:
                    1d:4c:8d:92:bf:58:1f:c8:b5:01:6b:d3:ac:cf:27:
                    c2:b9:ae:cb:cc:ec:80:d4:d5:28:cc:0c:bb:34:66:
                    a6:48:76:49:0d:44:1a:46:ff:8d:c4:67:c5:cb:d3:
                    cb:b6:e3:ce:11:6a:7a:50:45:10:04:22:86:81:6f:
                    67:2b:bc:d0:b3:30:6a:2e:74:72:09:af:b6:be:48:
                    b1:43:25:52:15:a2:49:5b:da:dd:50:a0:ff:4b:79:
                    b3:31:ca:01:4d:96:c6:09:7c:93:24:73:91:2a:c7:
                    ac:a0:4e:59:ed:11:95:b2:dd:d8:bc:be:fd:2a:fa:
                    06:7e:02:dc:4f:fa:13:74:b0:86:21:8f:61:d2:b1:
                    c8:36:53:40:54:f8:0a:8d:e7:75:72:c8:7f:c6:11:
                    32:e1:3c:e3:6e:fc:65:0f:d2:21:5b:7e:02:e3:37:
                    cc:4a:25:7a:2d:bd:7b:82:e2:cb:c2:13:f7:63:ff:
                    1d:08:17:13:cd:17:6b:1e:1a:4c:1a:6d:76:ab:39:
                    25:0a:77:6c:3a:96:8d:99:b6:4d:34:61:e4:7b:12:
                    91:43:89:07:9c:7c:38:52:64:42:a5:6c:6d:8b:f6:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:14:D6:32:77:AF:FA:46:EB:D7:59:DB:1B:6C:A3:6D:54:35:21:4E
            X509v3 Authority Key Identifier:
                keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:59:64:63:7c:fd:ae:5e:5f:d9:6b:ad:ab:71:45:e2:61:88:
         1b:5d:ad:1a:37:d8:64:29:c0:3a:65:26:49:8b:d7:7f:7c:3b:
         05:00:61:85:0d:67:d3:1c:80:c2:c1:af:b0:36:39:92:ad:cf:
         c6:4e:fb:87:59:e4:d7:0b:9a:22:56:32:42:76:bd:2d:a2:ce:
         e1:43:56:14:ea:33:d8:e2:fe:ab:ab:c7:ca:c8:b8:0d:50:21:
         b5:ed:07:2b:97:c4:47:14:d7:d3:ac:86:70:7f:6c:19:74:01:
         86:71:0d:96:05:2b:01:e4:75:d6:81:4d:8c:3d:03:31:82:7d:
         8a:d6:1a:69:23:89:66:ea:7d:c5:ed:0b:f1:3b:3f:42:9c:96:
         6b:80:6a:e5:47:28:20:ba:70:03:1d:83:b6:6d:a4:60:63:a7:
         85:9c:31:4f:b9:60:36:36:88:0f:a8:8a:db:5e:2a:0f:c8:c0:
         64:5e:ae:84:1b:d3:ba:f7:97:ce:dd:f9:a1:23:6f:dc:07:68:
         4c:af:29:22:81:cc:ce:13:7a:39:6f:6d:31:f3:0c:2e:47:ff:
         0e:d7:a2:c2:6c:ac:17:56:1a:30:21:cf:25:d1:f2:fd:0d:34:
         aa:bc:9e:44:f6:0f:4d:0d:b9:d8:66:3f:33:da:9d:09:08:d3:
         23:a0:50:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----