Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File:                     tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier:          RE81//5leOxpZ48zG9TT8ISzPy2lG7wv/SN7hIseMLw=
Subject key identifier:   B7:A6:C8:45:9B:5C:62:69:F9:73:49:96:9E:B8:FC:02:99:4B:D3:59
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer:       /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial:       01962E2B0FACBF2EE776735CE59EAA1E8E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number:          0C71
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
                          2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: nwAJ5bGW7j7b3QggGOMOmX+DJWPMx7kJgplg/5osw6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:ac:bf:2e:e7:76:73:5c:e5:9e:aa:1e:8e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=b7a6c8459b5c6269f97349969eb8fc02994bd359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:d5:3c:46:99:21:4b:69:dc:0c:6b:59:c2:
                    fc:86:e8:e7:f4:fc:de:ee:a9:4d:eb:e2:38:dc:89:
                    4c:43:f5:dd:af:05:53:85:e2:4e:9c:62:c9:92:fd:
                    11:e4:c8:40:b1:a0:9a:61:46:47:92:88:b0:6b:35:
                    2e:92:f1:b0:a0:43:34:56:2d:42:f8:89:bd:dd:98:
                    8a:71:0a:fe:d1:aa:58:62:da:7e:e9:d3:48:ca:95:
                    5b:c4:5e:22:87:18:b9:6d:26:2f:8b:ed:0d:90:64:
                    da:d1:c5:e0:ae:8e:97:65:37:57:b8:f1:aa:7d:e6:
                    11:e9:b5:3f:21:c1:95:0e:ea:f4:8f:32:70:d8:e0:
                    89:85:e4:b1:e3:46:13:6b:88:ee:c9:06:65:09:51:
                    dc:42:7a:a7:0d:30:2e:b0:90:39:3b:12:ad:6d:ce:
                    51:e5:60:02:c5:c6:28:dd:c5:7d:04:ae:d7:9a:01:
                    92:d2:79:2d:aa:b2:bb:b9:64:0d:f6:6d:f0:72:46:
                    83:8e:d9:c0:10:28:4a:0b:ff:b0:27:c4:5e:a7:b5:
                    43:7e:2f:ad:36:16:da:9f:05:3d:23:9e:6c:9c:c8:
                    d2:8c:ec:e2:9a:e2:95:fa:73:2b:1a:87:ca:c9:01:
                    ce:a8:6e:02:08:24:ea:0c:ed:c9:fe:c1:81:04:7b:
                    2a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:C8:45:9B:5C:62:69:F9:73:49:96:9E:B8:FC:02:99:4B:D3:59
            X509v3 Authority Key Identifier:
                keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:70:4e:dd:5a:c2:54:a9:e8:e8:fb:59:4d:51:75:e9:fd:
         f9:cb:8f:13:9f:84:c8:32:be:c7:20:85:c2:63:db:72:b9:c2:
         41:d0:36:1e:1d:24:85:b8:a8:05:cd:bf:2d:71:19:34:9b:59:
         bd:73:f1:84:90:84:bc:4b:fe:de:96:3b:e8:45:16:50:94:aa:
         48:f6:52:ec:5a:6b:01:44:ab:3a:52:48:33:22:61:3a:3d:14:
         27:5e:9c:f6:bf:88:63:a0:ef:11:40:64:3d:de:51:ba:e0:17:
         b6:cd:97:61:a0:c5:1b:61:2e:6c:79:e1:7f:09:fa:50:0c:5f:
         3a:ed:70:33:63:6a:20:8d:19:08:cd:f0:5a:30:29:e6:e2:64:
         d2:5f:d5:e3:fc:ec:41:ce:61:98:ed:70:e9:48:64:87:e6:2c:
         bd:d8:88:15:d2:7b:f7:b4:fa:00:d8:30:bd:44:91:24:f2:78:
         8f:b7:ce:65:07:51:45:0e:5a:94:06:46:6a:70:29:8d:f3:9a:
         37:ac:47:88:63:d3:de:30:ec:b1:e1:02:9f:b8:72:d7:5f:ec:
         3c:94:60:2f:ed:a5:43:7f:26:cf:e6:d7:4d:19:5e:2a:7d:d8:
         0a:1d:e0:77:4f:90:8a:c4:99:97:f2:87:1f:4c:f2:b1:0e:16:
         b0:ac:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----