Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File:                     trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier:          vqh3r24tsFb8gNiEGf6DBGxku9shsl24PldKbpMBN8Y=
Subject key identifier:   EA:2A:61:29:2C:5F:8E:5A:9B:63:9A:E6:3D:B0:D7:8B:41:91:93:23
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer:       /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial:       01962ECFCB540BDEE014D3D0AD31DE8C2BAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number:          082A
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: _oI-Lkb0IuWy-UHIoAbDqvwfl1s.roa (hash: mRZXCcW1ghBXMTwSw7NYgVRMYeyGjl4gH8juqLCzVks=)
                          2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: Gf/fR4kXQwKMNCGi00T27youNNHLoIQumKtdOBU6MWg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:54:0b:de:e0:14:d3:d0:ad:31:de:8c:2b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=ea2a61292c5f8e5a9b639ae63db0d78b41919323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:86:4a:2d:be:23:aa:4a:6d:25:0f:68:40:
                    d3:0e:16:59:03:54:79:bf:fe:1d:d9:08:ff:ef:c2:
                    b2:97:28:31:db:bf:88:bd:98:8d:c9:60:02:2d:37:
                    e8:2f:cc:85:89:d8:b9:e8:a8:77:e1:7c:d0:7f:08:
                    9a:dd:90:ec:cd:56:e5:44:2c:f6:bb:a3:c9:0a:6e:
                    57:7b:f4:72:10:77:46:a0:e1:18:d2:0b:a2:9f:c3:
                    eb:16:42:7f:9c:f6:9c:db:09:e8:98:63:67:a8:ec:
                    b2:5e:61:ce:a6:05:f6:38:52:07:f7:1f:f6:3f:f0:
                    33:f0:bd:3d:97:d5:d0:77:ad:d1:bd:5c:aa:99:d0:
                    7e:8e:7b:ee:c9:cd:a1:10:35:5c:21:f8:24:c6:fe:
                    5c:4f:be:2e:84:e0:3f:99:db:04:aa:e7:d1:bf:80:
                    62:f4:82:ef:3d:98:40:40:ef:3a:a5:31:3a:a9:9e:
                    26:26:d1:a0:ce:62:2d:cc:84:f3:dd:7d:10:37:e1:
                    cb:c2:ee:78:8e:cd:a6:7f:50:d4:84:8c:fc:be:61:
                    56:68:ca:36:08:15:30:2d:83:e5:49:7e:2e:4e:a4:
                    8f:4d:e9:b9:87:f4:41:9c:e3:0f:aa:52:a0:6b:2e:
                    55:c1:2b:75:a8:a5:ab:9b:10:bf:2b:64:40:eb:40:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2A:61:29:2C:5F:8E:5A:9B:63:9A:E6:3D:B0:D7:8B:41:91:93:23
            X509v3 Authority Key Identifier:
                keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bf:e5:f1:b0:2d:cf:e8:7f:dd:f5:e4:2b:4d:d8:d9:48:9c:
         be:98:a3:70:3f:49:a2:b9:13:df:a8:e0:64:dc:34:4f:00:39:
         90:50:c6:d5:7d:6d:cb:5b:68:4b:c4:2d:89:e5:59:6b:48:65:
         3c:f2:b1:98:e9:57:bc:50:77:f8:90:f1:8a:af:84:31:7a:96:
         d7:58:ab:03:35:52:de:55:bc:bc:f2:26:be:d9:6f:ae:30:76:
         08:52:53:f6:3c:78:77:37:ee:df:7e:af:69:db:fc:82:e4:6a:
         93:2e:d9:d0:98:ce:27:fc:0d:ec:52:18:87:e7:ed:a2:2a:94:
         55:a2:e4:fe:a9:82:ae:a4:e1:94:d7:55:64:96:8d:24:f4:ed:
         c8:37:86:f9:1d:06:da:45:c3:cd:3f:5c:95:3b:68:3b:9f:42:
         10:61:ce:80:07:6c:cb:d0:85:d9:93:5d:ae:72:6f:9e:78:71:
         73:39:77:1b:fd:bd:fc:8c:55:f4:e8:62:ab:64:61:1c:a4:9c:
         6f:6b:fd:25:a1:1f:fc:ee:cb:32:a9:84:9a:80:18:23:03:2b:
         01:9e:f3:4e:02:fd:da:0b:51:de:a0:14:15:0d:96:f6:a1:45:
         cd:af:54:a8:f6:72:29:8b:fc:ca:9a:34:d2:6e:2e:ec:0b:33:
         bb:2c:6d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----