Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File:                     tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier:          uWJZu2DFmJJSBL3vSpLJHDawRjvgn9dq9XyNAF4MR8E=
Subject key identifier:   A6:10:C5:5E:3A:C0:83:FD:99:50:F4:DB:41:84:7A:82:D2:35:AC:5F
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer:       /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial:       01962E61C08631F5D8A839AED6211126CA0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number:          0843
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: Dnpb75XdwM7LxtjkYlloNVMA6rs.roa (hash: EzyV/txDtZvmkY6vt32XISbysVcisfy2gnGp9jREhPs=)
                          2: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
                          3: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: ZSclEhBmAX3Z2VH1e/2iLsd9LrIravGb3Z3x67SgXQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c0:86:31:f5:d8:a8:39:ae:d6:21:11:26:ca:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=a610c55e3ac083fd9950f4db41847a82d235ac5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:a4:cf:b1:3c:47:43:56:c9:3a:a6:c3:93:
                    ab:65:51:bd:e5:16:43:4b:99:0d:78:49:5c:e4:ea:
                    5d:51:3d:26:c0:79:f9:2c:c0:3d:40:c0:cf:76:a2:
                    ce:67:6a:36:1c:ce:fe:2b:f0:77:7f:90:de:fa:d1:
                    43:5e:87:f8:e8:f1:1a:11:4b:ba:9e:76:e1:0b:c4:
                    8f:57:e9:b4:f3:f3:49:e8:b4:28:60:43:5c:8f:3b:
                    19:86:24:ab:3d:9c:31:af:dc:82:f1:2b:3e:7e:d1:
                    4f:06:bb:a4:ce:e7:31:21:f3:e6:6f:10:46:be:04:
                    88:5e:e2:b1:8c:5d:3e:00:4d:f3:45:b3:d9:ad:1c:
                    c9:8b:6c:50:df:80:20:e4:50:89:97:57:a3:bf:2b:
                    ac:7c:9d:15:6e:3a:f0:fb:06:e8:f5:3e:38:cd:e0:
                    ad:fe:05:47:fc:65:a2:0e:88:fd:39:95:48:86:2c:
                    3a:b3:f6:4d:bc:34:f8:80:4f:ef:d1:df:40:00:67:
                    c4:1c:4b:54:b1:93:7c:8a:6c:02:eb:2c:16:b9:64:
                    a9:ff:4e:74:92:a0:88:85:97:d3:cc:2b:41:cc:e1:
                    dd:46:99:42:76:fc:ee:7b:4f:4c:9f:c4:07:e8:1e:
                    b2:46:a2:7c:48:9c:a2:a3:a1:01:f5:ae:4a:20:f7:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:10:C5:5E:3A:C0:83:FD:99:50:F4:DB:41:84:7A:82:D2:35:AC:5F
            X509v3 Authority Key Identifier:
                keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:12:11:e0:49:87:ec:72:70:30:05:39:13:2e:42:f9:07:
         b8:71:29:2f:b5:dc:da:37:35:51:35:51:60:70:a6:d1:8b:89:
         d2:da:c3:44:c6:ba:9f:19:76:5f:15:3b:71:6e:68:4e:0b:02:
         08:50:a3:a0:59:40:73:74:b0:36:ec:ec:b9:10:09:94:27:21:
         dd:4c:71:70:31:a0:92:2a:57:f5:b7:df:ca:42:31:9f:2f:98:
         39:a2:dd:09:56:c0:6d:33:7b:f3:2f:64:1d:6a:83:b8:e2:9d:
         12:be:f8:89:fa:64:4f:06:16:d8:03:3d:72:02:21:84:88:0b:
         92:86:e2:23:fd:8a:20:38:d1:b5:a9:92:ee:eb:7f:f3:90:71:
         82:b1:1f:f0:e9:d1:b0:c0:4c:50:ec:93:81:9f:c3:22:70:62:
         c4:7e:cf:ca:ca:8b:db:ec:cf:7e:01:91:5c:b4:07:f2:b9:55:
         3d:bc:02:03:65:a8:c6:b3:d8:4e:1c:d4:e2:a6:16:10:25:19:
         d9:05:fa:b9:49:fd:70:5c:12:8b:d5:f3:44:4e:8f:c1:25:44:
         cd:a2:46:6e:c0:94:92:92:af:4c:66:76:ff:1e:95:0d:a2:5c:
         8e:e9:07:77:ca:61:4c:9e:6a:ab:9b:2c:9d:1d:ce:d8:39:fa:
         0a:e7:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----