Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File:                     tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier:          WjaTQHmDZ7Sk6mwfzEelQ5eExo/fwazHv7576+/Xvrg=
Subject key identifier:   5B:27:FD:84:43:F1:A0:8C:0F:D9:8F:D3:10:7C:E4:71:58:E3:15:36
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer:       /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial:       01962E98E23A0682BB1617EC620F17685CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number:          0E22
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: d+kEZ75QdVaiEyoM+1HT9eP2BLzMer71y62w+26WRLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e2:3a:06:82:bb:16:17:ec:62:0f:17:68:5c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=5b27fd8443f1a08c0fd98fd3107ce47158e31536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:8b:49:07:1f:ab:8a:a7:5d:36:c4:5d:c7:
                    a7:89:e6:d2:73:a4:c5:12:ae:24:0c:d4:e9:7f:cb:
                    ba:35:b2:a2:27:89:ab:1b:ee:83:83:b5:da:64:06:
                    ec:31:4a:7d:0b:24:71:dc:7e:c2:4c:3f:71:73:3c:
                    86:49:e3:15:c7:1a:d7:fb:e0:e7:bd:b9:cc:03:bb:
                    1b:ed:fd:47:df:55:20:82:3d:43:2b:61:5a:36:63:
                    50:93:03:5a:eb:48:a4:57:12:a3:ce:d4:27:05:5e:
                    4c:0d:80:07:62:bc:32:86:f4:ea:05:44:fa:de:d3:
                    84:18:0f:90:70:70:08:42:81:00:09:3c:d4:76:93:
                    75:d6:18:cd:70:12:b7:2a:69:d0:f1:24:60:63:db:
                    76:53:14:07:f5:2a:71:c0:5b:43:41:0d:13:2d:4e:
                    4b:24:72:eb:49:19:25:fe:a9:75:5f:05:b6:02:90:
                    a2:f3:c8:77:e9:b5:9b:07:58:a2:1e:60:1b:12:2b:
                    95:4f:71:40:fd:27:6e:a0:11:90:2a:b2:0f:b3:75:
                    61:ad:02:f7:83:cf:43:0e:62:e2:4e:24:fd:ad:4b:
                    6a:fa:d2:8e:e5:01:95:a6:62:1e:7e:4a:8f:a3:eb:
                    04:8b:4d:4f:ed:93:58:ec:8a:cf:ae:8e:5f:b5:9c:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:27:FD:84:43:F1:A0:8C:0F:D9:8F:D3:10:7C:E4:71:58:E3:15:36
            X509v3 Authority Key Identifier:
                keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:89:47:a7:aa:2b:89:3e:4a:80:7c:a5:28:9f:bd:2c:5f:f2:
         70:43:73:9a:aa:ef:22:ed:7e:47:7f:6c:3b:de:de:2c:2b:cb:
         2e:fd:7e:3a:45:32:59:9d:84:b6:68:73:a0:35:d7:34:29:ad:
         fc:62:2e:5c:21:e9:36:26:77:03:c6:4a:2c:60:74:00:3f:1b:
         76:1d:cf:91:e8:e1:d7:9f:55:b5:76:c9:97:de:0e:e0:e3:8b:
         57:11:45:b9:8b:b3:ce:b1:9b:07:46:35:83:49:5e:ec:27:9d:
         64:46:9a:8f:2c:bd:39:dd:23:09:5b:11:cb:d2:0d:fb:37:80:
         df:d1:d0:f4:07:c4:ca:75:db:97:2d:8f:43:06:72:f1:dd:56:
         f3:b0:eb:ca:26:9b:2a:bb:d5:eb:f3:ad:a9:5e:9d:bd:69:ad:
         e8:b9:c0:b7:74:b2:bf:85:36:5d:63:27:50:c4:ff:26:00:04:
         51:16:ce:90:b3:a6:b0:76:94:50:4a:e1:59:11:b9:71:c0:00:
         9d:f8:22:f6:71:9c:89:0d:4a:cf:24:85:95:28:1c:1b:c1:d1:
         6a:74:6f:b6:f1:5a:b2:b4:a0:f0:a7:5b:34:ca:d6:21:09:e6:
         83:a6:a6:04:1a:16:42:4d:c1:1e:d1:f0:31:4b:0c:71:9f:3c:
         62:b7:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----