Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File:                     tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier:          Cy3paO9OoW/9gmOwl4sl9UgE7mQmmGASlj2qPh45R4k=
Subject key identifier:   01:D2:6E:CB:5A:CB:E5:45:A8:29:CF:46:6E:98:5A:7F:61:08:CA:27
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer:       /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial:       01962E42507971C9B9A9F59178DBA177CE5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number:          0304
Signing time:             Sun 13 Apr 2025 08:26:59 +0000
Manifest this update:     Sun 13 Apr 2025 08:26:59 +0000
Manifest next update:     Mon 14 Apr 2025 08:26:59 +0000
Files and hashes:         1: 74rFfsVLB83xqrl230f69RyQMZo.roa (hash: uIHKdF0Md6VmRaPIQqLHKtiwEPhOEBVDe4Gopq3AYXw=)
                          2: UVLB6EC_S4cdufZlLeGb47V1ReM.roa (hash: +1SPWwuKyVjoCsUjj6tw92B1zG4mEC7h1VegEv3YxLE=)
                          3: avaZ658dTdnlteZmpyctkTlcNP8.roa (hash: KHvxH5fCxcbQpviHolUXb9yiSjrJQE+TWAdsGNkg5vo=)
                          4: dCGcZg2F9Ea5zPZKvzxM5matRyQ.roa (hash: CVLQb8zE8ujxwsspK1MH+reOHlP+NQATO7Xjq1jEaUs=)
                          5: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: c4+0MTvvmgvK1M0M9fvxU3mlb10wb24jbht8LlU7f6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:42:50:79:71:c9:b9:a9:f5:91:78:db:a1:77:ce:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
        Validity
            Not Before: Apr 13 08:26:59 2025 GMT
            Not After : Apr 14 08:26:59 2025 GMT
        Subject: CN=01d26ecb5acbe545a829cf466e985a7f6108ca27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:9d:b4:5e:70:b8:85:33:7a:6e:b7:c7:23:
                    69:ed:6f:6b:55:32:aa:ab:65:88:7c:49:bf:40:5b:
                    06:c8:27:4e:cd:87:13:4c:79:f4:00:8c:29:be:78:
                    23:55:ad:25:6c:f4:8f:72:df:2b:9a:e0:e2:14:db:
                    a5:ef:16:2e:df:0f:dc:77:33:1d:33:4c:f8:9c:12:
                    b3:c0:ba:73:0e:fe:56:05:3b:4a:c5:93:2e:e3:4d:
                    4b:ed:57:70:31:9b:9e:49:b1:2b:11:8d:0f:cd:b1:
                    64:1a:6b:c6:5f:26:b2:9e:13:78:df:55:ff:7d:20:
                    21:7f:95:04:30:64:fa:ab:b8:f1:58:91:72:a8:5e:
                    65:30:58:cd:f8:1a:b4:b7:28:d7:6e:29:09:b0:e5:
                    ab:e8:7e:6b:09:f6:1d:d0:ea:27:68:e7:96:90:46:
                    86:1c:13:0d:9b:61:a9:34:38:15:86:3b:a0:9e:a9:
                    1d:03:f8:a6:f1:28:02:d1:86:78:5b:d0:48:06:d5:
                    da:f4:cd:d0:95:d1:d7:6a:a9:7e:a9:da:00:ed:ab:
                    b3:d7:e4:d2:6e:dd:04:2a:15:a7:e6:a9:1e:44:19:
                    a0:aa:2f:70:6f:13:b8:63:a8:15:50:db:b9:cd:00:
                    b6:9e:16:ab:c8:82:e3:2d:72:4f:26:7d:e6:f3:58:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D2:6E:CB:5A:CB:E5:45:A8:29:CF:46:6E:98:5A:7F:61:08:CA:27
            X509v3 Authority Key Identifier:
                keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9d:ab:2a:11:f7:bb:d8:f6:82:07:67:e8:83:2d:16:f7:b5:
         a4:00:7f:3a:56:d7:47:ea:06:e2:d2:9b:87:79:bf:53:68:ed:
         85:20:07:dc:21:ae:a6:94:a4:99:f9:7a:5e:86:68:96:de:5c:
         9a:c5:09:68:68:85:39:c6:52:d2:0f:ad:93:6b:ee:0b:fb:d2:
         9f:af:cd:98:54:b9:9f:0b:b7:73:56:7a:13:2e:be:d2:dc:a9:
         21:5f:8f:b7:d3:c0:df:2f:a9:36:c8:ba:b4:de:f9:dd:30:87:
         54:fa:45:91:07:4e:d6:bb:ba:df:ca:e5:03:22:ca:57:99:5f:
         93:b4:82:7c:c2:e3:7e:84:10:36:ee:1b:f3:e6:2a:19:be:1a:
         e7:8f:69:20:37:d8:76:2f:c9:ae:98:cf:58:40:df:98:b1:d4:
         72:05:fa:d4:0e:c4:8e:1f:ef:f3:1d:ab:b5:06:e9:39:47:10:
         0b:e7:ce:61:34:d0:84:9a:ca:bc:2d:a7:ba:e5:29:9c:af:93:
         f4:1e:26:1c:80:8a:94:3d:1e:de:6f:56:f4:c0:e6:ff:b2:3b:
         16:3e:55:98:eb:67:90:ed:38:7b:15:92:c7:02:85:5b:d2:ec:
         12:6d:c7:17:2c:e1:79:17:fd:59:e8:b4:3d:4e:b9:86:20:86:
         1e:4e:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----