Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File:                     T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier:          PTgw6t4dTn0ahwaod01VY2ZQT8cnRB56JpGFVbV9PZg=
Subject key identifier:   54:91:6A:4A:24:57:A6:DD:71:C8:D3:2E:D7:55:51:A4:C1:B7:5E:CB
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer:       /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial:       01962E61F693F1ACC0151463BE88E480F6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number:          02AB
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
                          2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: dxOV0XiUAZcu2jC4yrDDmQg/HEjaVwJiJ16Xq5pRXPc=)
                          3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f6:93:f1:ac:c0:15:14:63:be:88:e4:80:f6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=54916a4a2457a6dd71c8d32ed75551a4c1b75ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:f3:30:19:49:cc:8b:0b:ae:2d:5a:24:3c:
                    37:75:68:2b:8a:6b:14:32:01:c3:4f:23:67:60:83:
                    80:de:5d:7f:c8:41:4b:d0:29:2a:d3:48:f2:9b:78:
                    39:c7:f5:07:64:17:55:6d:84:83:fd:6a:c0:99:9f:
                    a4:cc:e7:98:a1:77:97:d9:4b:7e:22:19:56:c5:3e:
                    3c:4d:b9:e7:9c:76:d1:39:86:66:a3:b0:8e:8c:99:
                    ca:98:f7:60:2d:2d:37:33:5e:48:a5:3a:c5:5c:2e:
                    e4:17:9a:1b:07:30:f9:92:b1:e5:47:d8:16:4f:eb:
                    a6:0f:4b:9c:44:b3:de:6e:e4:c5:94:08:93:16:a8:
                    19:b1:a7:56:99:1a:5b:30:d9:d4:81:0d:c6:39:d5:
                    e1:cb:e4:c6:d3:40:68:32:ac:b8:04:8b:11:33:53:
                    c4:85:4d:05:b6:6f:62:1e:1e:bd:36:00:99:f2:c7:
                    0c:45:80:05:b5:f2:3a:dd:7a:38:0c:9a:c8:66:81:
                    85:1d:1b:89:f4:83:3e:86:d4:8d:32:73:08:17:61:
                    15:e1:4a:40:49:96:0c:0b:ea:cd:5a:5d:a5:06:ea:
                    50:eb:13:79:7b:7d:35:f9:3f:e2:ec:c5:8b:90:78:
                    32:59:d2:18:f6:c7:ba:b3:13:32:c7:40:c1:95:98:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:91:6A:4A:24:57:A6:DD:71:C8:D3:2E:D7:55:51:A4:C1:B7:5E:CB
            X509v3 Authority Key Identifier:
                keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:8e:e6:95:e8:5f:08:83:0d:5f:2e:ef:d0:8d:f8:2f:a1:
         6b:e9:9b:16:39:d8:51:d5:a0:37:c0:c8:f8:e9:2e:a6:5e:5b:
         c8:ce:cf:9d:35:43:0a:52:40:e7:2c:7d:0f:97:f9:fa:1d:42:
         10:c1:69:61:be:f1:bb:c8:7e:0a:98:d7:8d:b6:93:75:d4:3a:
         63:dd:6f:81:a5:7b:37:c7:47:f0:7f:62:32:d1:b2:4a:ff:aa:
         90:93:9f:e3:29:65:5a:7a:e5:75:9f:15:54:f3:99:b2:fe:01:
         32:75:4b:34:de:16:80:64:6d:a5:01:1e:84:2d:6f:fe:9d:7c:
         2d:40:a6:33:88:0d:d4:d1:6d:61:51:ba:c4:a5:21:5a:01:3c:
         eb:8c:c4:42:ac:c6:17:f5:a1:f1:a0:79:72:1f:f8:c2:0f:81:
         c8:03:62:6e:2c:61:99:b7:8c:ae:0c:5f:af:0a:7f:71:6f:df:
         a4:16:63:42:c4:d1:bd:f7:0e:89:f8:b7:a5:cf:21:b9:eb:84:
         b0:a0:87:cd:c4:7b:2e:26:ae:d5:7d:b9:bf:21:24:71:34:a2:
         70:9d:30:93:3b:f3:cf:34:d0:ff:2b:74:85:b8:76:23:3e:83:
         98:47:82:fe:9b:6f:1d:59:c7:67:e9:c6:b3:3b:df:9c:44:e1:
         cc:f8:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----