Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
File:                     Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft (raw, json)
Hash identifier:          UYbhLrXYKKu3b85fUJBHZFHslGeoXcfpQUfD2GPUBzo=
Subject key identifier:   33:0A:87:1C:8C:3B:AC:C2:AE:2F:B9:A0:8D:18:55:36:D5:6E:D9:D5
Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
Certificate issuer:       /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Certificate serial:       01962F746E1D7CE8ACDEB5876D8C3684527B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
Manifest number:          035E
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 8qKws60nW6Z3LiJs0eyANnP0SG4.roa (hash: 9lHqUiw7ZlL+8c06Gu/fNSQfRoy60xmd5tsMPvOvsaw=)
                          2: Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl (hash: atWQ8+cQm/3Pqqn/DUkBuRScFstXOQQpCuX/6yMIAfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6e:1d:7c:e8:ac:de:b5:87:6d:8c:36:84:52:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=330a871c8c3bacc2ae2fb9a08d185536d56ed9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:33:d6:23:7c:82:c8:95:2c:b8:2c:24:de:
                    2d:90:d1:ea:34:0b:d4:36:33:68:f5:bb:94:73:35:
                    dd:1b:63:67:1c:16:66:f2:82:74:de:b3:b0:73:fa:
                    d9:d3:c9:aa:92:6d:c7:24:2f:7a:6a:90:6a:92:52:
                    8e:27:66:ab:5a:ca:d6:83:e9:51:4f:ee:db:89:bd:
                    40:42:97:d7:b1:b3:71:ee:a6:1c:6e:28:c9:62:5f:
                    9d:dc:3c:7e:1b:d4:e9:9a:61:bf:a9:8d:79:d7:66:
                    d4:c6:4b:6c:94:39:0d:36:ea:38:97:32:fe:fd:5d:
                    24:93:5d:75:31:0f:e8:72:35:84:bb:e3:a5:c4:53:
                    0d:50:97:12:ab:5c:79:e6:dc:0c:10:6d:e7:1f:dc:
                    06:66:ca:f1:07:f0:cc:2d:2f:c6:c7:2e:21:22:08:
                    44:51:4a:6e:98:72:56:e6:f1:9e:ab:6f:c0:0e:03:
                    d1:9b:a5:b8:26:a3:3a:28:1a:80:cc:36:6a:c7:a7:
                    1e:18:27:37:c4:5f:bd:1a:9a:16:eb:22:c1:4b:fb:
                    2f:bb:9e:02:cc:e1:b9:6e:71:ec:44:c6:06:0c:e4:
                    95:b0:03:1a:70:31:e1:40:b3:e9:0e:6a:13:61:92:
                    57:1c:2f:30:a9:75:13:17:9c:30:58:68:bf:d7:ec:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0A:87:1C:8C:3B:AC:C2:AE:2F:B9:A0:8D:18:55:36:D5:6E:D9:D5
            X509v3 Authority Key Identifier:
                keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:52:ea:d7:6c:91:d5:30:65:52:2d:5d:1b:16:2a:3b:f2:
         fa:68:34:67:22:d2:82:c6:7a:a8:b8:07:7f:46:d1:80:03:f6:
         65:c8:0f:eb:9a:01:ea:3f:f5:86:d0:7b:a6:09:a8:9d:14:c4:
         b0:9a:9f:2c:eb:7a:15:45:ed:1c:73:1c:d8:4c:73:7f:a7:c8:
         65:c7:9c:f4:b1:43:b8:74:99:4b:6d:a6:bf:4a:61:1c:15:e3:
         06:69:a7:9e:50:a7:be:a6:fb:ae:7c:c3:49:88:bf:9e:41:4b:
         a6:00:45:b4:83:09:33:23:bf:0b:07:f9:08:b3:f6:7d:80:ed:
         61:f4:5f:ff:97:5f:5a:b4:5f:7e:1f:5a:56:8e:dd:57:1a:d5:
         04:11:1c:78:6c:f3:b8:bf:af:91:8f:cd:0e:87:c4:3f:7e:48:
         cb:2f:d0:75:de:86:93:9f:d0:e1:cd:29:2d:4b:c9:e7:d9:04:
         ef:c7:55:95:7c:9a:fd:91:fc:2c:1a:73:80:7d:5a:ea:c4:67:
         d8:d4:8d:21:a4:4e:e8:6f:e2:d5:4b:fc:8a:e2:60:ab:e8:d0:
         b1:ae:02:0c:9b:9b:c0:a6:50:b4:7c:bb:be:4d:d6:b3:f7:e6:
         2d:ba:a3:3e:3f:c4:3a:e0:42:89:1b:12:9b:73:7c:8d:3f:f2:
         5a:a7:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----