Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File:                     tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier:          TxJCvkIu1YblhslcpoIf141ekdxgTq+dYQHfF0iQ8rQ=
Subject key identifier:   14:74:1E:7D:E2:95:87:55:75:CE:43:57:C2:D9:F3:D1:EE:47:C8:7F
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer:       /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial:       01962F3D60B29A0C651310B1873004F5B293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number:          06AE
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
                          2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
                          3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
                          4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: HY3yvaNfqugeqs4shC+FrgbAqKmW+8Eo44QCrPnEF9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:b2:9a:0c:65:13:10:b1:87:30:04:f5:b2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=14741e7de295875575ce4357c2d9f3d1ee47c87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:8b:71:31:02:d0:1e:09:bf:0a:04:5a:b3:
                    5b:0a:de:e5:35:a3:4f:82:bd:81:6e:e6:8e:01:8b:
                    49:64:3d:1a:92:a7:66:12:02:97:ce:0b:0d:fc:78:
                    e7:4a:ef:01:d3:04:42:69:4a:52:91:7a:97:37:db:
                    ae:84:9f:05:92:ff:9b:b1:fa:1a:31:89:4a:f4:1b:
                    35:2b:e2:91:ff:33:11:d7:6e:cd:4f:d6:fc:32:90:
                    af:f5:85:c6:e7:88:8c:dd:1a:dd:b3:7b:c1:03:6f:
                    28:3e:b2:95:c7:0e:a4:36:75:8b:f6:d5:9b:a6:70:
                    db:99:47:7d:eb:d4:fd:f9:f2:8f:13:86:00:3e:23:
                    85:52:b1:46:63:7e:05:04:57:15:ec:27:1e:75:35:
                    fd:29:40:68:5f:78:14:7a:5a:ca:6b:0f:f0:2e:96:
                    c0:da:9b:df:3a:97:8d:d8:6c:c7:a1:91:77:df:16:
                    0e:7d:1a:b7:12:9b:03:bd:b8:2b:a7:36:d4:d6:43:
                    da:15:20:0a:3a:de:2d:0d:f1:86:00:4e:d5:0a:66:
                    e1:25:27:e5:83:72:79:01:08:6e:45:91:32:54:1d:
                    56:06:09:f6:17:79:c1:50:0c:03:5b:8b:23:9c:72:
                    d1:91:e0:76:bc:dc:cf:3b:60:04:bf:7b:67:16:9e:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:74:1E:7D:E2:95:87:55:75:CE:43:57:C2:D9:F3:D1:EE:47:C8:7F
            X509v3 Authority Key Identifier:
                keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:50:94:6a:51:97:da:25:d0:48:88:63:87:08:f0:15:b1:
         58:4a:76:ba:b2:d7:5d:88:d6:fa:42:64:d5:2b:fb:17:10:fe:
         28:78:c6:87:50:7f:97:db:a9:5a:91:e1:6f:99:ed:ed:8b:80:
         e3:14:1d:3e:08:fa:a8:10:92:46:3f:5b:70:05:f4:e7:e2:75:
         a0:3e:28:2b:8a:c1:7c:9b:fb:cc:aa:0b:bb:c4:c2:bd:11:7d:
         e5:3d:bd:0a:6f:49:b9:df:6e:e6:dd:7b:e8:4d:c3:8a:23:2e:
         60:3a:dd:05:de:dc:c3:81:fb:51:ed:70:86:1c:c1:97:e1:57:
         62:c2:eb:4d:71:cd:94:8a:c3:b4:3a:7b:4f:38:3c:ff:57:b6:
         b5:9e:33:92:1a:d7:2f:de:20:77:11:b4:42:65:16:3e:23:24:
         02:5f:e2:5c:cf:40:c5:7f:03:81:e4:19:6b:3f:68:8d:e6:a6:
         d9:b2:39:c9:5f:90:1f:f4:4f:48:b7:75:fd:68:25:fb:ae:3c:
         15:7d:c1:23:5a:98:97:d1:f0:81:91:32:7d:ad:63:41:c6:19:
         18:20:3c:5e:37:99:82:5f:4f:d9:05:27:f8:12:9f:82:e0:01:
         0e:96:28:57:fc:47:da:57:b7:a6:dd:71:3a:4f:26:0f:29:48:
         cc:35:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----