Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File:                     tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier:          LfSlH62f0FfOgjWMRJmrGcF+sIcmiXzM9BT0E+sbsAA=
Subject key identifier:   13:F3:D7:A6:A2:1E:F4:4D:C2:41:D8:54:50:D4:B0:09:E2:F7:6B:40
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer:       /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial:       01962E6215D356B05E0D17E11F0E5C337203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 09:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:42 +0000
Files and hashes:         1: 6OxWOof5RPwR-dHEi_VKB34xPSQ.roa (hash: 4Bi3uRHuPwAszP4ZsAGHh2LAK/LAgGmZN5E2aAvbKGE=)
                          2: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: u4qNwZxz2njYyV/mqvO2WUdgEVf3ORrfJ66NMksiTjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:15:d3:56:b0:5e:0d:17:e1:1f:0e:5c:33:72:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
        Validity
            Not Before: Apr 13 09:01:42 2025 GMT
            Not After : Apr 14 09:01:42 2025 GMT
        Subject: CN=13f3d7a6a21ef44dc241d85450d4b009e2f76b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:09:16:85:5d:d1:ae:74:a0:ad:79:80:94:
                    b6:04:d7:b3:1d:24:00:46:c4:11:cc:7c:09:e3:7d:
                    e1:fa:83:c5:74:8b:bc:e9:79:52:dc:98:92:d5:5a:
                    48:68:40:c4:d8:bf:c0:5f:e9:1d:42:e5:fa:64:60:
                    a0:91:40:79:17:5a:87:20:41:c5:2e:62:7f:41:bf:
                    0f:6b:6f:54:f8:47:9c:bb:37:6e:4e:96:d0:4e:fd:
                    b6:3d:aa:72:43:01:81:20:f7:28:b5:bd:db:47:54:
                    16:46:f0:d2:6d:e8:eb:03:17:6e:75:47:99:c7:0e:
                    2b:5c:69:77:95:f4:c5:3e:3a:e1:4f:9d:56:87:02:
                    f4:08:c8:00:ce:96:f6:cf:9e:06:0e:9a:63:af:20:
                    2e:83:56:5f:80:fc:b5:79:43:31:a6:d1:7b:67:05:
                    51:ea:4c:98:1a:7b:bc:9c:0b:5b:48:7c:96:26:c1:
                    e0:6c:ed:91:68:49:ed:11:95:ff:59:58:44:d6:a6:
                    50:15:4e:94:ed:29:37:34:97:95:92:b9:6f:b6:6b:
                    1b:5e:ed:7b:f7:b8:f7:4a:55:07:a5:73:9e:c8:0e:
                    8f:0d:b5:88:9d:a5:d3:30:e1:f7:86:82:08:76:a5:
                    a2:51:60:84:0d:c2:6e:8f:51:9a:d8:8f:6a:a6:c3:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F3:D7:A6:A2:1E:F4:4D:C2:41:D8:54:50:D4:B0:09:E2:F7:6B:40
            X509v3 Authority Key Identifier:
                keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:58:d0:d6:f0:11:07:78:83:20:9a:c9:b2:ef:18:93:b7:
         37:3a:bb:2a:a5:47:c9:4f:ca:a5:40:2e:02:38:9a:77:e7:01:
         2c:7d:26:cb:b3:91:2d:56:6d:bb:f9:54:c7:b2:a1:3c:21:5b:
         a2:62:db:8f:1e:9f:c0:e9:0b:7a:b6:2a:2c:81:52:7b:f8:1c:
         5c:ef:21:60:fa:b6:23:f1:23:e0:c6:72:71:45:cb:5a:33:eb:
         7e:dc:9c:b4:b2:98:fc:8a:fa:e9:b4:6b:5b:1f:dc:c4:fb:2d:
         e1:7f:6e:e4:3b:54:3b:f3:a2:a7:39:67:ab:a8:00:41:3d:72:
         8b:7c:a8:ba:34:69:75:c4:33:47:ce:79:c0:1f:d5:0c:f7:d0:
         9e:2f:1e:4f:d8:7f:b2:2e:56:d9:6e:b5:1e:74:01:33:64:0b:
         e3:e2:3f:35:00:44:a7:e4:e0:8e:69:07:a1:b3:bc:1f:30:b2:
         3d:36:b3:70:1d:78:fc:3d:27:a7:49:ea:dd:78:ed:7e:0a:d7:
         2e:2f:7b:51:c5:52:76:24:c4:53:41:81:e3:13:14:84:0a:3d:
         74:b0:ea:b6:eb:e1:61:dd:37:d2:8c:e1:de:ac:55:32:63:ae:
         c4:d5:bc:77:60:a3:93:d6:36:e1:91:aa:41:09:85:90:7f:78:
         5a:0c:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----