Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File:                     tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier:          wqkcZEHvnHoK55gmgqE6p8scfeA8Pvw6oUjtsGgaUac=
Subject key identifier:   12:8A:03:2D:4E:DD:A5:47:AD:18:81:A3:F3:9C:82:37:6B:5A:B8:16
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer:       /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial:       01962ECFD40049052321EE6717FDA31C11E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number:          0A44
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=)
                          2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: TZFL3xGb4p+Dc3unhMVeJP71E6/MCMvEsz/I710tj4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d4:00:49:05:23:21:ee:67:17:fd:a3:1c:11:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=128a032d4edda547ad1881a3f39c82376b5ab816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:76:ef:65:d5:ad:53:68:23:7d:8d:25:65:
                    f8:97:91:15:67:9d:30:5d:45:4a:e0:ff:2d:4d:b6:
                    99:a9:aa:76:be:b6:18:e0:14:08:4b:89:76:84:75:
                    da:21:a9:a1:7a:eb:98:d9:1c:09:31:72:b0:a8:bc:
                    be:a0:0f:e9:e2:00:61:0a:a7:69:27:34:a1:74:25:
                    3a:19:c4:27:f0:99:82:90:e9:04:bf:7b:9e:12:e9:
                    77:16:60:a8:af:56:9d:66:bb:9d:12:d6:92:ab:a8:
                    a3:46:0a:74:12:6b:7e:9c:a3:43:74:44:ae:86:7a:
                    ac:7d:59:9c:b0:d8:59:8d:ac:bc:9e:37:52:d5:5f:
                    93:a4:f1:85:ee:c5:cf:5d:9f:06:de:f7:f3:ef:61:
                    98:4e:c6:56:dc:e7:e4:3e:c4:32:c6:69:1f:cf:f2:
                    10:82:bc:f1:e2:3a:b5:20:7d:e9:66:54:3f:7f:c8:
                    40:19:74:e1:0e:82:a2:18:b6:2c:69:c8:76:c2:cf:
                    b7:c2:e6:ad:ad:0d:87:94:43:fc:50:19:e9:24:2f:
                    99:e2:69:40:50:2e:f7:96:fa:4c:2b:9d:41:f8:13:
                    07:11:08:02:8e:35:fc:dd:2f:9a:f7:d8:08:ad:2d:
                    76:94:cb:9b:73:2b:21:13:d2:1c:ee:f1:ad:ae:24:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8A:03:2D:4E:DD:A5:47:AD:18:81:A3:F3:9C:82:37:6B:5A:B8:16
            X509v3 Authority Key Identifier:
                keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:b8:23:5a:1e:03:bd:a0:41:e6:c8:c6:71:af:7f:9d:42:f5:
         3e:e7:d3:8a:24:6c:ab:58:16:8f:29:a6:bf:9f:f7:b7:dd:9f:
         25:1a:3d:5f:91:2a:06:7d:83:d0:37:d9:8f:59:09:8d:29:0d:
         37:dd:94:83:3c:b3:94:1d:2c:7c:0c:22:a6:50:a4:ac:d2:48:
         b3:86:5f:a3:69:69:a1:3b:dc:9d:58:dc:3b:b0:fe:73:0f:b6:
         60:48:be:a4:8f:b0:d4:f4:70:8a:5f:78:f7:93:66:f7:32:93:
         bf:2f:88:5a:b2:68:c2:cf:6a:f7:6c:a9:39:47:3f:8f:bb:3a:
         08:01:1e:12:e8:4f:08:f8:40:ff:06:09:28:2b:2b:ed:3d:19:
         a8:63:10:2e:97:df:da:5b:a5:4e:34:7f:13:0d:6a:1c:1b:8c:
         bb:84:84:3b:a0:e8:37:cb:32:df:36:1b:0e:0f:e3:e9:12:82:
         6b:91:60:4f:c7:0d:7b:cf:6f:c8:79:19:72:b0:f0:dd:4c:1a:
         1b:26:db:09:e3:65:a5:32:20:dc:b6:7b:33:20:2c:1b:30:3e:
         91:5a:37:3d:7f:b0:ef:7b:38:4a:0b:26:f6:d9:fd:94:23:d4:
         2d:72:85:a4:3b:66:a5:9e:8f:00:06:86:8b:93:78:ba:85:25:
         3d:96:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----