Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File:                     t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier:          ShcFE9FR8kkY3cm1BK8KAMgKM81c3f1PfNvxegNff2k=
Subject key identifier:   08:1B:4D:36:D4:2D:02:75:16:73:F2:01:24:71:44:48:86:B8:E8:F5
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer:       /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial:       01962F74A10CB56B875A717A0272B2D27E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number:          05CA
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=)
                          2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: dtKjEuqKhvvDzAG0M1nMU5VjTZGHXF70/iymNTI11sI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a1:0c:b5:6b:87:5a:71:7a:02:72:b2:d2:7e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=081b4d36d42d02751673f2012471444886b8e8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:44:11:2a:ca:e9:16:3f:20:d9:b9:58:5d:
                    8a:c7:e3:ea:f3:6c:bc:9d:ab:de:e0:68:4e:26:55:
                    8c:10:43:7b:37:76:39:53:8b:15:e9:78:9a:85:05:
                    78:e7:2d:c8:28:da:8b:8e:b2:3d:a2:7b:ad:3e:57:
                    2a:9b:36:c1:fd:bc:8b:f6:a9:f4:5e:7c:03:35:bc:
                    24:24:80:1d:67:23:67:83:46:dd:c6:7d:8b:b0:42:
                    59:62:c7:80:35:52:fe:b5:22:57:1d:b1:5c:09:95:
                    72:8a:ae:13:30:26:3d:15:2b:83:fe:88:2b:3a:e4:
                    61:f6:5a:84:14:1e:fb:c5:ea:be:20:00:7b:09:a8:
                    f0:1b:78:32:68:3f:45:cc:50:20:10:94:d9:9b:dd:
                    8a:72:cb:2a:6f:bd:99:2b:83:c4:f2:84:04:93:1e:
                    c9:15:e1:0c:1f:16:67:a7:bb:18:74:92:94:8f:92:
                    72:49:00:4b:8d:e9:62:e7:5b:50:76:12:d3:16:50:
                    a0:7a:0d:96:68:21:79:eb:32:aa:e5:ba:f1:12:aa:
                    ec:cf:f5:de:27:e3:cf:e6:87:03:e0:d0:f5:bb:da:
                    be:d2:c4:29:25:00:ad:37:f9:d4:5c:56:83:78:f3:
                    31:3b:a3:84:44:23:e9:cc:d3:d3:1f:d4:ab:ad:b6:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:4D:36:D4:2D:02:75:16:73:F2:01:24:71:44:48:86:B8:E8:F5
            X509v3 Authority Key Identifier:
                keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:16:86:6b:c9:d0:cc:ca:04:52:14:c4:56:94:f0:4b:95:
         98:06:bd:84:32:4c:13:ae:3b:32:79:ce:01:0b:ca:2c:56:a1:
         db:44:f4:e3:f9:50:3b:6e:dd:1f:8e:84:2b:25:af:91:52:20:
         79:89:1a:84:f8:b9:77:56:0c:24:f0:02:df:a0:17:a3:72:f0:
         5f:d9:8b:d9:2a:5f:1e:3e:07:87:ac:2f:fa:a7:cd:79:6d:24:
         ea:ac:3e:91:be:6a:d9:37:ea:70:29:9d:e6:5e:d3:22:ff:53:
         cf:47:9f:43:f6:2a:83:03:85:6f:b2:2b:0a:99:2d:84:53:d3:
         64:69:ab:cb:a1:af:c9:20:a8:1c:16:03:42:f6:04:88:cb:0c:
         73:88:db:93:f3:fe:ca:df:53:1d:96:ac:f1:45:1e:6a:aa:4b:
         b0:ec:d0:b4:49:5c:32:f9:01:e2:e6:18:54:6c:1d:c6:bf:e2:
         fd:1f:9f:82:d7:93:ea:8c:48:51:e2:ff:52:22:2b:66:0f:79:
         8d:63:a3:c7:7a:fa:b7:db:0a:30:84:98:5c:9a:50:b8:97:d2:
         17:23:bf:d2:a7:19:8a:d9:f0:0c:75:53:ac:8f:01:c1:62:b4:
         5d:08:65:5a:88:f8:46:09:41:84:7b:5d:75:60:43:e3:4a:c4:
         02:e1:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----