Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File:                     tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier:          pC2vzRe/K3hkRWWatlwPEjLhWPCOUopeUYIUt11VzaY=
Subject key identifier:   08:06:05:7F:C8:42:B8:F2:35:21:F3:B2:68:39:6A:B1:27:A0:16:4A
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer:       /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial:       01962F748D3427ECEF81DB7B1DAF9E08D9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
                          2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
                          3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: 6smbMm40DcnXQui+Fjs6mcl8C77EoAgpQRSs79JDVD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8d:34:27:ec:ef:81:db:7b:1d:af:9e:08:d9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=0806057fc842b8f23521f3b268396ab127a0164a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:1a:93:61:56:4c:35:24:ef:b4:d6:17:d5:
                    ed:fc:26:bb:7c:3a:e4:a0:bf:c6:30:02:6d:93:2d:
                    dd:73:2e:9a:ac:ca:d2:1a:c4:80:7f:a8:6f:3b:45:
                    c6:5d:65:03:54:a1:59:86:be:fb:87:f8:cb:bd:46:
                    61:f1:5a:25:81:ff:65:6c:7d:d1:dd:54:93:d2:c3:
                    3c:13:97:c0:8c:ab:94:01:24:71:81:3e:26:67:f3:
                    eb:0c:1f:fb:3b:f4:5e:c4:69:4d:97:99:e6:fe:05:
                    07:e8:3b:e2:39:4b:4e:76:c9:fa:ab:28:e1:c4:32:
                    1d:7a:fb:51:ba:bf:9f:31:84:0a:8b:90:66:23:b5:
                    49:76:0f:53:46:d6:1e:6d:4f:7a:e9:fd:5d:8c:c1:
                    7e:11:62:1d:6d:17:ab:ef:81:c3:17:3d:f5:55:55:
                    c8:fc:35:4e:b0:d2:fa:f7:f5:d3:c6:f6:35:76:fd:
                    4e:9e:f4:84:09:16:75:7c:3c:e6:4a:e0:90:72:61:
                    53:54:1a:05:90:4a:0b:ef:38:6b:d0:16:85:e9:26:
                    29:a0:77:6b:f2:bc:74:54:fb:f2:16:e2:52:58:cf:
                    67:c0:6c:26:4c:9e:bb:b8:5b:50:c6:c9:a3:1b:e8:
                    4d:2d:f6:1c:26:95:a9:6e:04:c1:56:42:3d:05:31:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:06:05:7F:C8:42:B8:F2:35:21:F3:B2:68:39:6A:B1:27:A0:16:4A
            X509v3 Authority Key Identifier:
                keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8c:47:ab:0a:1c:d3:16:f8:b7:36:02:04:5f:e1:85:46:32:
         28:db:e6:53:ac:52:53:23:4e:3a:ab:f8:f6:0d:d8:9d:ed:ea:
         33:ae:8c:97:c3:e6:00:c7:06:41:ce:3f:66:e8:7e:64:53:4c:
         74:ca:aa:d1:50:ad:4e:f3:ab:cf:a6:87:7e:f2:82:db:bb:41:
         33:17:8d:72:b7:e2:53:eb:d9:e1:68:b8:1c:3c:b9:b6:66:70:
         4a:02:f1:f0:ce:a9:e5:56:04:e1:80:6f:2f:e2:fa:55:10:f7:
         bc:17:cc:eb:f7:42:76:87:6c:fe:4b:53:28:50:f2:26:c1:1c:
         0f:6b:4e:97:87:dc:21:6c:da:28:fd:26:21:62:5e:bd:78:63:
         5b:49:e5:47:d3:b7:94:f1:48:2f:63:bf:11:3a:c6:a3:77:2c:
         ae:a5:34:cf:3c:2d:03:87:9c:98:01:36:f6:57:dc:fa:8f:d9:
         30:49:26:f4:15:3e:9e:dc:eb:39:1f:bf:37:0b:58:d0:ef:92:
         95:98:66:71:3e:e7:ae:0b:d8:ed:81:d9:aa:81:fc:53:f1:ed:
         56:30:b0:bc:e6:76:8d:b0:87:61:44:99:9e:d7:18:5b:72:09:
         bd:66:ea:97:10:6a:52:34:c2:b7:07:56:40:dc:f5:57:b4:eb:
         31:e9:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----