Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
File:                     tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json)
Hash identifier:          VCJv8zdgBTHGJ8rZ9MclH46MQbCGurqrxv7N4/71bwI=
Subject key identifier:   AB:DF:EC:99:A9:52:2E:28:B9:80:3D:EC:3A:86:AE:D6:4B:C7:BC:2F
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Certificate issuer:       /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial:       01962F069646F993EA4A235AE0DA37CCDCC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: Miva7d2trlODxRaP2jPdM3GpQ2RCv7jijCXo5LrPMa0=)
                          2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:96:46:f9:93:ea:4a:23:5a:e0:da:37:cc:dc:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=abdfec99a9522e28b9803dec3a86aed64bc7bc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:ca:f2:08:d2:3a:54:be:48:79:e1:c2:cc:
                    81:24:b3:4c:39:96:c3:39:2f:ec:2a:39:b8:55:77:
                    0c:8a:24:55:7d:40:e5:47:42:97:99:15:d5:93:6e:
                    d5:47:6f:16:7d:14:a8:68:99:3f:2e:50:c6:73:1c:
                    de:f9:c9:20:5c:d1:e4:85:7b:48:e9:0d:02:c1:50:
                    2c:9c:a7:ea:cd:ed:ec:70:c0:e5:ad:47:cb:63:6d:
                    a0:a6:43:39:58:8a:89:36:38:4d:0c:b9:29:9b:31:
                    5a:ad:d3:1d:5c:75:f7:a5:42:0f:d1:01:bf:9b:0a:
                    bd:aa:6c:de:41:24:37:3b:bb:a7:50:ef:c9:45:a7:
                    7a:e9:5b:08:a3:1d:45:e9:39:87:4c:3f:54:9e:82:
                    c3:ff:65:0e:89:40:08:6c:b3:ee:7d:14:d1:6e:d8:
                    2b:4c:10:38:79:b1:38:4f:f1:6e:ed:16:fa:69:20:
                    79:b2:f6:48:29:c6:6b:d0:a4:fc:56:aa:08:3c:77:
                    1d:f4:e4:08:e3:18:e9:b9:a4:e5:24:0d:e7:da:60:
                    43:e5:75:15:81:9b:97:8f:1f:43:13:94:6e:2b:ea:
                    db:48:d7:d4:00:af:f8:6f:1b:f3:4c:09:49:e7:25:
                    8b:65:0a:fb:a4:33:47:f9:6f:31:c9:02:2c:e2:42:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:EC:99:A9:52:2E:28:B9:80:3D:EC:3A:86:AE:D6:4B:C7:BC:2F
            X509v3 Authority Key Identifier:
                keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fc:f0:fd:57:d8:a3:29:a3:c2:2d:4a:48:8a:4b:e1:74:43:
         77:d3:1e:c8:80:96:b0:61:ac:81:4f:f1:d5:7b:00:c5:93:59:
         36:5b:63:4e:e8:99:70:34:a7:93:ce:ca:47:2c:1c:fe:03:83:
         82:c1:5a:62:81:d1:1a:7e:f7:a5:05:b8:0b:02:68:c5:85:22:
         4b:ca:ab:51:be:f0:a1:f9:89:30:26:4c:32:68:5a:c5:f7:e6:
         05:31:d5:48:53:d3:29:b5:a1:3c:58:1e:2b:42:14:71:cd:7c:
         04:0d:03:78:f5:68:26:7f:a0:f2:8b:97:0b:e0:c7:29:3b:94:
         ca:1c:4c:e9:40:75:6f:da:83:0b:2b:74:32:54:f2:d1:bf:61:
         ba:7f:56:67:d4:a4:e5:62:b8:8c:32:af:0b:92:ff:4f:9e:f4:
         be:7f:e8:69:eb:30:4e:41:46:c3:40:0e:ad:13:60:70:a4:97:
         2e:44:0b:a2:7c:6e:ba:0f:ac:35:f8:9b:ca:c1:bb:6c:3f:71:
         c8:0a:86:73:49:1d:3c:d2:97:4c:b1:46:6c:eb:25:f0:4d:bd:
         05:c6:ab:e0:40:2b:6b:5b:01:ce:73:94:9e:18:90:ea:dd:23:
         a8:6d:ed:b5:be:5f:6f:06:05:be:6d:a1:05:d2:d3:de:3d:a3:
         8b:e3:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----