Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File:                     to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier:          ePj3ee+xFZ0uMuf5VCIfXBk13BOsl3oXyld4LpO/xl4=
Subject key identifier:   3D:6C:AC:AB:26:8E:CA:A1:7B:C8:74:3A:32:97:93:D0:87:76:C5:18
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer:       /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial:       01962F06586385A611F37038ECDD35EA80E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number:          0C72
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
                          2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
                          3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
                          4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: bdr/RHSzgjuvmLULxZC7HnIIXxMzOzb4SpprywpFqcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:63:85:a6:11:f3:70:38:ec:dd:35:ea:80:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=3d6cacab268ecaa17bc8743a329793d08776c518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:2f:72:be:df:6d:2b:d7:2b:c9:d4:a4:2a:
                    fc:85:d3:0d:4c:21:51:3c:de:04:71:8d:fe:59:c3:
                    ef:78:2d:22:34:e7:88:6d:60:f3:62:1f:c3:57:27:
                    85:f1:f5:9a:7d:df:7a:90:f5:75:19:22:08:da:ee:
                    18:10:ca:c9:cd:02:5d:8e:94:ab:6a:f7:fb:ef:58:
                    49:bd:91:23:ca:02:cf:1a:11:5b:86:8a:9e:4b:9a:
                    58:38:80:2d:0b:91:48:17:bd:08:f3:67:d0:c7:bd:
                    cb:8c:a0:1d:21:d0:19:6b:67:74:66:df:d5:3e:95:
                    89:fb:e7:48:5a:5c:72:5f:0d:5c:f7:bb:44:da:c2:
                    a9:47:3c:04:20:9a:a4:83:3b:f4:05:63:38:49:8d:
                    3e:f9:d1:76:dc:26:fc:55:e5:cd:21:f0:37:95:6f:
                    8b:20:7a:41:c1:f7:95:51:b8:3f:53:3f:e7:81:5e:
                    fd:1d:2e:6b:cf:11:a6:ba:54:ff:f4:99:b7:fe:d5:
                    cf:eb:2f:7e:61:2c:f9:0b:21:ed:2e:14:fd:57:17:
                    8e:e9:87:78:4a:cb:e8:59:01:d4:5c:9a:19:0b:13:
                    08:c1:5a:f0:fb:42:ff:8e:4b:21:c8:8d:b2:10:3a:
                    2d:a7:62:94:d2:00:50:f8:55:45:c3:61:55:f3:33:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6C:AC:AB:26:8E:CA:A1:7B:C8:74:3A:32:97:93:D0:87:76:C5:18
            X509v3 Authority Key Identifier:
                keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a7:2e:24:36:b2:52:81:3b:5d:c9:ac:20:ce:16:64:c8:1b:
         24:53:c7:82:74:4a:cd:b5:30:7d:a0:f4:7b:67:06:98:80:1b:
         b7:b2:92:6f:2d:fb:7c:e5:ba:0e:55:34:8a:77:64:9a:17:17:
         65:2d:d3:93:d1:16:51:4e:e4:9c:a2:92:07:69:42:ca:b5:dc:
         7f:2d:62:66:98:fc:67:ec:b9:72:9f:41:95:86:fb:99:77:aa:
         6e:97:e3:62:d5:70:76:37:99:99:81:0c:e9:c0:f0:2b:9a:ed:
         a6:eb:1e:be:05:71:a6:4b:b2:93:3b:3f:88:16:55:e1:eb:4d:
         c5:dd:4e:e2:0f:44:ac:e6:63:60:94:c1:11:75:f3:2e:80:d5:
         97:d4:71:1f:ac:ff:e3:82:45:13:ad:03:de:30:da:31:32:bc:
         de:40:e7:26:44:40:a6:9b:c2:64:e0:14:37:30:42:91:e9:58:
         4a:7b:a5:0c:72:a0:3f:90:26:b9:25:f7:fb:c8:43:80:0d:6b:
         42:de:1c:e9:61:15:06:d5:eb:a7:13:b1:ab:74:25:2a:dc:98:
         7f:53:52:df:1f:11:89:e6:3b:91:d1:52:3d:35:c6:26:9f:36:
         c2:62:37:69:22:8b:4c:94:a6:81:8f:42:63:3b:c2:12:af:17:
         ef:bb:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----