Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
File:                     T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft (raw, json)
Hash identifier:          pTP499vVfPbS9ASxpHELehox5hdH2OKx4Z1zmfx9dSk=
Subject key identifier:   4F:64:03:65:4E:64:D8:11:66:F6:C8:01:5D:99:DC:51:8E:42:63:4A
Authority key identifier: 4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B
Certificate issuer:       /CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
Certificate serial:       01962E61739A342D99A1482900A78162EA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft
Manifest number:          1041
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl (hash: pUZ8BeoJv+93iPxfFYifcX0GngLOlnezYSGWoLSC+Vk=)
                          2: ZowTG3oT7jR7fyuFs8EJsOqQnDk.roa (hash: BeTzHEyDuFcWSVUJFUf815UpcdMSl9Ku2ZGRMNQ+8lo=)
                          3: oN_HXrNwEKHWNOBeBXWLmMaedS8.roa (hash: EF1LIVK1qYYVxrGAD02d8UOfG8Hm02T8nbZi/iaVNaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:73:9a:34:2d:99:a1:48:29:00:a7:81:62:ea:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f672d39929731aed9e01bc5a9e6d680f4659a0b
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=4f6403654e64d81166f6c8015d99dc518e42634a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:a1:89:39:5c:27:59:99:6c:a3:9a:3b:8b:
                    12:c4:4c:8a:ae:b5:d3:6d:8e:88:cd:a1:94:ee:20:
                    fb:e6:12:46:46:1f:c0:ef:dd:4e:74:a2:96:ae:7e:
                    b9:7d:e3:e5:26:b1:46:dc:d8:7d:e1:c8:65:45:dd:
                    b0:a0:67:45:40:58:f9:e4:90:cb:f7:72:5b:96:db:
                    63:48:17:9c:cd:d4:eb:e2:be:fa:dd:ba:48:8a:f7:
                    48:15:ca:39:ce:f2:f4:ad:30:ca:fc:f9:d3:d9:4b:
                    d5:28:86:58:18:7b:3f:b1:12:e3:7c:43:46:50:8e:
                    80:e1:25:52:17:42:b2:58:78:9c:58:6e:d5:5d:d6:
                    1b:4e:84:1a:b3:25:b9:4d:cd:9c:ef:b8:a9:3f:b8:
                    43:41:f7:da:22:ea:37:61:d4:d1:69:f1:bb:8f:14:
                    e9:2b:0d:4f:40:9b:49:cd:97:e1:e6:a8:de:81:c8:
                    7e:7f:c8:c2:29:81:f4:69:ef:64:b8:21:c1:07:b8:
                    16:49:7c:4f:9f:02:ac:80:39:7b:5b:1a:d4:9f:8a:
                    f9:29:a7:37:a3:ce:2f:af:19:d4:f3:4a:ec:1d:a6:
                    f1:2c:fa:54:c4:17:cf:0f:9d:ec:9f:24:8e:cf:6a:
                    cd:10:b1:7f:3d:a5:39:fd:2e:00:fe:a7:6d:30:c8:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:64:03:65:4E:64:D8:11:66:F6:C8:01:5D:99:DC:51:8E:42:63:4A
            X509v3 Authority Key Identifier:
                keyid:4F:67:2D:39:92:97:31:AE:D9:E0:1B:C5:A9:E6:D6:80:F4:65:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2ctOZKXMa7Z4BvFqebWgPRlmgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/35c0b9-2855-4b20-8c80-7e280752da21/1/T2ctOZKXMa7Z4BvFqebWgPRlmgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:30:9b:50:1d:a1:58:5b:b2:94:a8:44:ec:23:14:4a:95:88:
         74:e0:05:dc:f2:45:47:ae:84:da:8b:33:dc:c8:51:4b:c4:91:
         20:0d:7d:4a:ad:fb:b0:78:16:b1:d9:99:b1:c5:32:c7:cd:58:
         49:14:38:9a:7f:3e:04:7d:92:64:41:98:c5:01:5e:75:5e:df:
         d5:2a:ba:a4:74:e7:d1:5e:03:ab:23:86:c4:b5:e5:5a:5d:db:
         3a:d3:06:4a:af:fb:54:15:85:9e:69:be:8d:ff:0a:69:17:3d:
         03:e8:2d:ec:0d:45:0a:97:b1:e1:1e:cf:d6:64:70:45:cf:90:
         81:93:a0:21:d3:cd:74:c5:91:75:97:6d:b7:7b:26:a4:78:f5:
         d9:54:6c:a4:39:fe:08:d1:ec:e8:6f:b8:10:2c:ab:1c:5e:fe:
         04:d1:1c:d7:91:b4:b6:55:df:01:52:be:ff:a6:91:81:57:16:
         7f:70:05:80:fb:79:e1:7c:91:f6:6e:9f:51:f3:a5:dd:21:60:
         5d:85:df:02:81:48:15:74:31:7d:e3:23:45:c0:8f:64:c4:d3:
         85:51:f4:4b:1c:1e:e5:aa:85:e8:92:41:db:7e:eb:33:1c:ee:
         66:d6:8c:3f:40:40:5f:92:57:56:5f:8a:ff:ea:06:5f:75:5c:
         f5:13:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----