Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File:                     TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier:          LPtq5MN/q+owKSj1VeaMZtrV6ibCFT84s58peX2W/yw=
Subject key identifier:   58:B2:D8:BB:B7:54:8F:56:08:B7:41:C6:4C:A3:47:25:B4:3A:BC:BA
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer:       /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial:       01962F74499B728396EDDB0FB7630F10BFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number:          0CE7
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 0I1Z0G38n0YJrpY9RYQTiEbwkeU.roa (hash: nhISjkHrGUdu9DkOm+JicyPkRd7uOy5I5pZByrTsVVE=)
                          2: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=)
                          3: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=)
                          4: Nn-ApfIk9aaRaey91ZWLyX5wqM0.roa (hash: 14erkdx8WX3xu6haq1SKNyJiB4KCwkt4zswja4uFhqM=)
                          5: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: NS9wsFskz0k8v5tLQgZHIuYeeGy/MmRIEVltAhoCxVI=)
                          6: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=)
                          7: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=)
                          8: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=)
                          9: jlwTOyFoGuUl1S4qvkPqmcyWYBM.roa (hash: h9SKCXtTfX2r/KJtjmgMicMBp5sCm2zPUcaWtyxHjOY=)
                          10: wHe63tLHFMK7NBW2SYijpGxUNgM.roa (hash: CT+CH4LtTVHno3GtUxYN9M1xC2YXqLCYEq0QekucUtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:49:9b:72:83:96:ed:db:0f:b7:63:0f:10:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=58b2d8bbb7548f5608b741c64ca34725b43abcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:1c:9f:83:ae:a1:75:f8:bd:9c:4a:9c:61:
                    7e:e8:6f:b7:53:f9:48:13:a2:7f:b7:02:19:b8:11:
                    f5:ad:69:29:07:25:b5:76:b9:f7:37:6d:96:4b:12:
                    e0:98:89:85:de:c7:97:8c:08:a6:97:86:cd:46:96:
                    36:4a:ae:f1:a0:f3:fa:1e:4f:cf:36:9e:6f:cf:a4:
                    1f:f8:e0:d9:e0:95:95:a7:16:99:e4:c0:95:bc:f4:
                    3b:05:f3:14:45:aa:7c:7c:3e:e2:86:d7:70:93:80:
                    dc:b5:34:96:32:d4:42:f5:35:1d:34:c3:c1:be:6b:
                    f7:7a:0c:14:3c:17:77:0b:c4:a5:3b:af:7c:ed:01:
                    0a:d2:bd:17:5a:7e:8f:5d:e3:9a:fe:b5:21:4e:27:
                    72:f7:20:12:c1:c9:b7:bb:9f:4c:14:7f:b9:ef:25:
                    26:85:c7:76:94:61:b5:90:53:ea:e3:05:2e:72:75:
                    34:93:63:78:8a:a1:3c:65:9b:8d:53:46:58:b6:dc:
                    b5:37:a0:90:61:f0:c7:f8:28:3d:52:6d:94:3e:6d:
                    59:dc:6f:a1:2f:bb:00:1d:6c:31:54:12:76:32:96:
                    98:7c:62:85:0b:04:a9:91:29:84:ca:0e:40:85:a6:
                    fe:f6:b2:94:34:71:62:f3:08:52:24:a4:61:31:bb:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B2:D8:BB:B7:54:8F:56:08:B7:41:C6:4C:A3:47:25:B4:3A:BC:BA
            X509v3 Authority Key Identifier:
                keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:32:21:3f:92:3a:f1:39:35:83:67:17:b8:c3:9e:73:b0:
         fa:27:8e:75:9b:ca:ac:d5:30:d5:b4:99:c2:8f:80:12:12:af:
         15:74:dd:5a:a4:8a:27:d6:f4:20:c2:f3:9d:71:bb:8f:e0:89:
         ee:4b:c8:a4:5e:dc:2f:f5:b7:02:22:01:1d:2a:07:df:86:19:
         c5:7f:0a:7e:97:31:48:53:1c:34:31:66:d2:65:9e:31:e1:ee:
         33:19:73:5e:70:1b:8a:fa:e6:d5:78:8d:af:78:6b:21:93:94:
         1f:27:65:94:93:8d:fb:d5:69:85:c6:49:47:df:3a:1e:83:9a:
         37:fa:f1:c8:f8:e2:83:e4:b9:b6:04:b3:00:1b:2d:70:7c:40:
         4f:a2:8d:5c:c8:e1:4a:e4:89:7b:c0:cb:16:94:31:73:ed:e0:
         77:60:70:71:aa:40:5e:b0:43:09:d6:a5:a4:76:f6:59:10:2d:
         1b:6e:02:19:7c:61:c3:f1:29:bc:28:05:32:0c:99:5a:2a:94:
         0b:2c:bd:87:10:b9:0c:65:da:53:dc:3b:73:1d:e6:0e:e3:69:
         8c:0b:81:0c:52:63:2f:c5:07:17:32:41:1c:d0:7f:ef:87:cb:
         9a:4b:8e:c3:e0:46:98:15:cc:e0:b2:29:d3:5f:c4:2c:6f:eb:
         98:a4:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----