Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File:                     u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier:          HSHLXKV+ekcJYTEwuYtfIXfud/vPqsCslfvNyQ9ZebU=
Subject key identifier:   01:C0:44:D4:73:5B:7D:90:19:49:B2:A2:2D:C3:3C:EC:3B:9B:34:53
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer:       /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial:       01962F07248079AFC1419F8C0DBEF98F7439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number:          13C1
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
                          2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
                          3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
                          4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: VnXCdZf7aJ5xum8ffTyg3W4hjk/inCtrjAQK+rJVwx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:24:80:79:af:c1:41:9f:8c:0d:be:f9:8f:74:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=01c044d4735b7d901949b2a22dc33cec3b9b3453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:2e:a4:56:e2:77:09:72:5a:e4:d9:96:2d:
                    c7:55:4a:9d:3d:cb:e1:ce:fe:ad:ab:70:3c:e0:39:
                    20:2b:64:67:22:c3:77:87:37:11:ab:57:8f:34:cb:
                    00:c3:bd:84:76:ca:e3:89:c3:3d:e2:f9:6b:6f:61:
                    3a:90:4b:3d:50:24:3d:b0:8c:96:b7:2c:3e:b9:dd:
                    f8:1f:ec:7d:68:c0:b4:b6:8c:61:ab:4e:81:96:5d:
                    11:56:5a:31:4e:17:8c:e7:3c:a0:64:7e:aa:16:f7:
                    17:c4:0c:54:34:30:e0:84:9c:5c:20:50:61:5e:bf:
                    b3:bd:c4:d6:64:e7:71:2f:d8:d4:b2:a6:f7:09:c4:
                    28:1f:7f:04:85:51:58:09:ca:ab:b4:c3:2d:ca:c0:
                    db:ee:c8:a2:f6:7b:1a:45:37:98:a8:e9:17:59:34:
                    09:2e:a6:6f:7d:5f:47:e6:5c:de:77:52:60:5a:17:
                    40:75:7d:3d:ab:8b:be:3d:48:c1:b4:0f:ed:d4:ed:
                    aa:94:2a:59:84:4c:5c:79:21:38:5c:bb:12:41:e7:
                    7a:1c:eb:fa:25:b8:55:52:81:b9:c4:fe:e1:08:9a:
                    f9:ee:70:2d:49:c5:95:6c:d8:db:fd:13:2d:6f:49:
                    18:5c:aa:a7:09:1f:27:dc:84:7f:fb:3f:08:ef:af:
                    5b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C0:44:D4:73:5B:7D:90:19:49:B2:A2:2D:C3:3C:EC:3B:9B:34:53
            X509v3 Authority Key Identifier:
                keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:43:13:70:62:e6:1c:b1:f0:09:f8:2c:52:22:c2:01:a0:d4:
         0c:3e:40:09:57:30:c5:6f:34:7e:31:ba:44:d4:d9:73:4f:fe:
         9e:47:f4:53:2c:35:ca:fc:4e:b8:d7:eb:24:f0:57:38:ab:7a:
         11:75:55:10:d4:78:00:12:88:5d:4f:6c:7d:b9:76:b7:29:26:
         06:a5:8c:85:1d:39:66:fb:b8:6b:29:85:9a:b3:5e:ed:ff:e0:
         45:71:4f:0c:56:ed:f2:da:21:1f:33:95:46:bf:f9:6d:bb:12:
         fd:14:a3:f5:32:0b:35:25:2e:d5:7b:7c:ba:3c:43:08:70:0c:
         c6:48:b1:ae:9d:b0:7b:eb:b0:4b:f4:2b:a7:68:ed:4e:08:53:
         59:d2:b5:dd:0b:93:34:97:4d:49:8e:64:39:ba:e8:fa:83:f3:
         2d:07:32:74:d2:f1:9a:1a:33:02:42:77:8e:f0:55:dc:af:4d:
         7c:9a:9d:0f:5c:fe:d9:3d:f3:23:99:f7:99:ec:98:a4:00:f9:
         f5:b8:3d:5e:b6:7b:15:53:18:b2:e9:67:5c:8c:d6:86:83:a1:
         bd:22:1f:04:2e:7a:b5:dd:e1:96:ce:70:f9:ba:96:eb:cb:81:
         f7:a5:5a:35:f0:75:d2:02:67:8f:98:53:c5:6c:04:22:3f:ac:
         07:00:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----