Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File:                     tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier:          MRorcsO/5aurAzfoSQw2hig4jSrUOmfiqwJ/G70GkqM=
Subject key identifier:   2F:C4:4D:12:E1:16:DD:EA:EE:37:F9:B2:F2:2A:FE:32:ED:EF:07:53
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer:       /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial:       01962DF4079F582AAAE648FC880595FD1045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
                          2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: iFXC2Mocly7GiXzIwkcvVgA0ZErWDBM6bQnzPmxd1dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:07:9f:58:2a:aa:e6:48:fc:88:05:95:fd:10:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=2fc44d12e116ddeaee37f9b2f22afe32edef0753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:57:83:c7:2f:30:51:78:ea:71:78:b5:a4:
                    b6:db:4c:19:54:04:4d:b0:16:0e:b7:1c:78:d7:0d:
                    79:a9:f7:b9:eb:10:19:82:2d:34:4b:14:ec:e0:a5:
                    0f:8d:be:00:9e:f1:3c:25:ff:27:6a:77:84:3e:b7:
                    ac:1a:92:78:68:2b:e3:a6:f7:ab:5b:55:7a:fb:61:
                    cf:e3:ba:83:11:25:26:a1:e6:49:42:d9:a6:1c:fd:
                    96:36:1d:7a:a5:4e:5f:98:f5:a5:ca:0e:4c:28:d4:
                    90:62:44:e8:31:f9:19:d2:1c:5b:0a:42:bf:61:8a:
                    aa:6b:e5:21:18:5c:7e:f1:ca:7c:85:7e:bc:24:fa:
                    c6:e3:61:70:5a:ff:5b:fa:6f:d0:72:b1:5c:fe:74:
                    98:50:93:18:8e:f0:cf:8e:6f:d8:7e:ed:4a:69:4b:
                    66:20:1a:05:09:82:8a:86:77:49:7f:d5:d8:67:c1:
                    7b:ae:40:58:b3:9b:1b:d9:f4:1b:00:ba:a4:4a:dd:
                    40:15:af:cb:d5:ce:1e:f3:94:a3:69:30:d6:77:e6:
                    c5:b9:01:1a:5d:e0:13:02:1f:1d:80:db:79:26:4b:
                    0f:b6:f0:d1:f0:bb:c2:0e:d6:a8:c9:51:1f:5b:3a:
                    2b:76:1a:98:14:b6:12:90:63:96:32:98:44:30:1b:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:4D:12:E1:16:DD:EA:EE:37:F9:B2:F2:2A:FE:32:ED:EF:07:53
            X509v3 Authority Key Identifier:
                keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:84:2c:0b:1d:05:6c:b4:7a:cf:0f:84:2b:bb:47:3a:86:
         f8:3c:6c:39:b1:4c:81:76:2b:9a:10:95:cd:e2:c3:b8:18:9c:
         25:90:ae:6c:8b:ea:b7:14:c2:d6:df:1b:9f:46:eb:e4:f6:a9:
         65:a5:e5:78:ad:7a:86:8e:fd:f8:cc:7a:a8:6a:44:a4:bc:3b:
         03:8e:c5:87:8d:00:d5:5a:e3:a9:16:85:0b:30:47:18:4f:48:
         41:7c:c6:1a:b9:2f:3a:69:71:56:67:ac:71:61:a0:61:6f:27:
         7c:fc:90:91:d3:54:cc:c6:7b:0e:a6:e6:9c:59:91:06:79:0d:
         9b:08:8c:2e:d6:41:2e:7b:4b:79:bb:76:d7:dd:11:21:ed:21:
         6a:5d:68:0b:e8:13:97:c2:24:a4:a2:f4:53:08:90:f7:e9:61:
         4a:a7:7f:cb:f4:60:1b:ff:73:50:1d:d9:6e:c4:d2:32:b6:70:
         c3:60:6b:88:48:3a:34:a9:40:5c:15:0f:b8:14:47:3e:dd:ec:
         48:d4:ba:8a:d1:9a:43:7e:80:fe:54:52:c8:30:34:7a:ce:79:
         36:73:d0:eb:d0:29:1a:3f:f5:ef:82:a5:42:29:0d:f1:25:24:
         ba:dd:84:0f:eb:0e:86:9c:6c:30:e3:60:e0:3b:b2:aa:2a:21:
         44:5f:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----