Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File:                     tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier:          RbG34nu7oMMjLvQhwMcuJ88sWuAzVKI3OscYQM+p1qI=
Subject key identifier:   A0:9B:62:80:21:C8:BB:8C:F7:ED:E1:F3:A9:19:99:08:58:BC:BE:03
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer:       /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial:       01962E2B3ED98A9919A551CC0EBE28D3E51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
                          2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
                          3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
                          4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: n9q9ELv9J7s8WUVp1vdgblTbXzkfiqIjrbpUj4ulPxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3e:d9:8a:99:19:a5:51:cc:0e:be:28:d3:e5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=a09b628021c8bb8cf7ede1f3a919990858bcbe03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:01:e0:f2:21:07:8a:f7:61:43:fb:4f:38:
                    dd:c4:bd:39:7e:03:f6:fd:f8:83:06:96:00:95:e3:
                    f7:b8:55:a4:39:d3:5f:c4:c5:5c:6a:65:bf:07:1f:
                    ea:24:ce:ca:5f:78:49:93:1c:2a:95:ed:44:7c:36:
                    6f:21:cf:dd:df:7c:b9:e1:85:e7:03:fd:0c:99:5c:
                    df:f2:67:9d:89:b5:ee:d1:02:48:b4:75:5a:ba:93:
                    5f:4f:a7:e6:a4:a9:75:26:6b:95:60:df:93:77:55:
                    ff:41:70:80:6a:fe:05:04:44:33:ba:13:37:43:85:
                    c7:c7:c0:07:66:1c:9c:71:76:97:cc:22:71:55:79:
                    a9:90:3c:a3:1b:4b:8b:3b:75:bc:ab:f4:27:d3:c6:
                    40:37:e5:d6:4e:89:0a:5f:77:cc:50:3d:50:0e:3b:
                    81:0e:dd:58:b1:dc:8f:ad:8e:92:6d:cf:41:8b:51:
                    68:1c:3b:31:34:c7:7e:35:ce:fa:f8:76:d3:01:94:
                    8d:88:3a:2b:e9:0d:03:e9:b4:e0:70:39:e6:5e:d5:
                    0d:39:b3:a8:67:f6:29:96:f9:23:97:ba:e6:a2:cd:
                    87:63:81:f4:43:ce:6e:2a:e9:10:8c:aa:db:f9:cf:
                    4d:59:15:15:92:85:cb:10:49:b5:15:13:5b:fb:23:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:62:80:21:C8:BB:8C:F7:ED:E1:F3:A9:19:99:08:58:BC:BE:03
            X509v3 Authority Key Identifier:
                keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ba:e8:58:b8:54:49:21:17:77:5d:44:1a:b3:76:6f:41:e5:
         a6:5b:eb:ea:59:28:a1:03:5f:90:31:6b:96:3b:d1:cb:db:a6:
         3e:87:a9:34:d8:f4:29:44:3e:64:72:73:14:96:dd:42:2a:c2:
         58:b8:f2:b3:b5:5f:72:88:13:bd:85:b3:ca:22:ad:5d:17:84:
         63:2d:4f:c0:26:62:69:3e:2d:d7:d1:af:85:66:24:11:f9:6f:
         98:49:e4:c2:10:fd:b9:5c:08:b5:57:42:8c:4a:b0:eb:c8:7b:
         50:85:0d:0e:db:36:b6:32:3b:7b:93:d8:1c:bc:b8:98:e8:2c:
         7f:32:ff:4b:6c:47:73:c3:a2:00:37:27:f8:76:1b:e7:bb:c3:
         e1:bf:90:4a:30:24:2f:88:d2:d2:2b:95:90:a3:6c:70:11:0b:
         b3:ed:f2:74:63:8e:d7:72:51:70:ad:0b:40:61:5b:48:18:ab:
         ae:df:8f:44:0a:75:34:12:e5:78:bd:48:9a:28:60:c9:8c:d6:
         32:af:bf:42:98:67:b8:6d:2e:23:7b:81:52:75:e2:9c:ad:09:
         24:70:d5:d0:d5:fc:a1:e1:ef:ae:2d:1a:9b:8c:a4:e9:79:47:
         e6:c8:55:c4:75:2f:f0:51:7c:66:10:3b:89:1f:fd:ac:2e:4a:
         65:9b:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----