Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File:                     T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier:          xw5LTy/XqnxyHO0+sREWu23dMUqey4gZ15OK+5va70c=
Subject key identifier:   8B:37:58:57:5C:02:85:AA:AE:F8:71:E8:CC:B7:F2:7C:B0:76:76:A9
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer:       /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial:       01962E988EE05BFE1B3EEC802A3E3A64055B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=)
                          2: 3RF21_ECpL5M_wnxKo1LaLxJwIk.roa (hash: DwVXHnFiU49l5hw1O5O7YFwPLdE2x6EWi17vCjDfMV4=)
                          3: OfliSFK47yOA2Tkix0wrkAH4x2c.roa (hash: B0Voqn9uU+7JqaJFZrNcBBKpjX2nZFFKEZ39gYCt+es=)
                          4: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: r6S3vXhyretp1DVjlIhxETNBx59O80hRGwEyc8GJvRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8e:e0:5b:fe:1b:3e:ec:80:2a:3e:3a:64:05:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=8b3758575c0285aaaef871e8ccb7f27cb07676a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:79:df:81:f8:90:b8:11:f0:b0:1a:37:4d:
                    cd:2a:0d:43:00:5d:ef:30:be:4b:f8:83:04:26:4d:
                    6c:25:af:40:9b:d8:94:5d:d0:7d:c1:3a:53:cc:e2:
                    95:45:f3:c5:07:b5:7b:ed:a0:a6:16:18:e5:f3:68:
                    59:af:44:be:84:0a:36:51:97:3d:23:c6:58:f9:37:
                    3e:f2:45:60:3c:a8:c1:4f:37:51:b3:45:86:f5:74:
                    35:23:b8:e3:f2:85:0a:f0:0b:76:b1:fa:46:bc:a8:
                    e9:00:d9:14:5b:9b:7b:a1:ca:d2:bd:94:cf:1e:0b:
                    75:05:d4:7c:f8:29:fa:24:a3:a0:96:25:f6:8f:02:
                    ff:21:28:a6:cb:ab:bf:ec:93:40:41:87:40:d5:98:
                    5c:37:7f:f0:38:a9:76:7d:7f:13:6d:87:e5:ce:2b:
                    d3:91:a7:f9:1e:52:53:b9:74:28:f2:0b:69:0a:00:
                    13:53:cd:ef:07:a5:f4:29:9c:68:e2:b4:f8:ae:e8:
                    32:3b:2a:98:76:14:8e:38:3b:84:c9:51:b8:ca:e6:
                    a8:09:c2:14:7c:02:74:41:9f:94:f3:be:a0:43:03:
                    9d:b5:b7:f6:70:95:21:2b:05:73:8a:8d:b2:6a:16:
                    ab:ca:19:af:02:16:f7:7e:0c:df:b4:8c:08:97:fc:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:37:58:57:5C:02:85:AA:AE:F8:71:E8:CC:B7:F2:7C:B0:76:76:A9
            X509v3 Authority Key Identifier:
                keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:a6:92:f3:99:5c:16:14:19:0d:74:8b:a8:ba:2a:51:65:
         47:1e:fe:26:b0:e2:2f:9a:f9:c2:2e:64:11:08:e8:3c:0b:21:
         cb:1b:65:56:12:c7:10:97:ca:30:66:54:2f:76:f0:95:7d:d4:
         6d:c9:2b:32:7e:8e:2d:7d:48:4c:9f:4a:75:c2:77:87:10:c3:
         90:9f:e1:f0:af:c8:a3:8f:99:fa:fe:5b:d2:76:14:75:09:3a:
         39:aa:c7:9d:44:93:a8:40:d5:1b:de:72:cd:98:28:32:2a:5a:
         f4:bd:1b:de:04:07:cf:9a:23:63:c3:db:fe:6f:b4:e1:7a:e3:
         46:79:ba:ac:71:f2:96:05:75:2a:2c:f6:24:e6:6e:f1:a1:7a:
         f4:02:18:a0:4d:35:8d:ac:8a:b5:91:0a:85:8a:28:4c:7f:f8:
         26:55:f1:75:e1:06:5d:b4:9e:a4:d0:80:35:cc:4c:a9:00:1c:
         83:64:3d:94:cf:61:fe:0f:fe:9a:d6:84:8a:74:82:8f:5c:24:
         d3:15:32:3f:b7:a3:8a:7a:d4:5d:63:4d:ab:9c:77:ca:29:ae:
         b5:60:7c:18:a7:6f:9d:1c:bd:92:65:70:50:c1:44:81:4d:ed:
         03:b2:08:10:49:e9:e5:74:75:b2:2a:09:ba:0c:8a:8a:4a:c4:
         ad:f2:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----