Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File:                     T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier:          jOVVorB8UylOLPE9RAmGiidY+M6xt4r5JrsJR2th5NI=
Subject key identifier:   BF:E4:5A:68:18:18:FC:EA:19:06:E5:49:EB:3E:25:33:C2:52:46:C7
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer:       /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial:       01962F7450CA3485D9FA3FB521F2E9BE4B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number:          0D81
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: sF3ZH9ESHiu8zyfjdFNqurNG0Kz8B8IRvNTFYVawfgM=)
                          2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:ca:34:85:d9:fa:3f:b5:21:f2:e9:be:4b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=bfe45a681818fcea1906e549eb3e2533c25246c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:75:50:4d:aa:79:d1:f8:31:54:63:52:ad:
                    a5:9f:32:ed:91:be:1a:d6:11:6f:6b:bc:6c:20:9d:
                    b8:4d:d7:7e:d7:82:84:33:e1:fc:60:6c:71:e3:84:
                    d6:f3:54:e2:30:23:ef:2f:22:cb:5e:d5:29:9e:e9:
                    96:3c:8d:55:35:8b:b7:db:53:4b:c9:93:0d:ce:cc:
                    4e:ad:91:09:7a:a1:6d:3a:f3:a7:9a:2b:27:bc:26:
                    47:77:cf:d7:e7:b1:d3:8e:fa:1b:c1:3a:fe:46:75:
                    3a:26:98:0a:f7:1b:10:be:31:8f:71:59:5f:86:a9:
                    d7:ca:2b:6e:91:84:ec:87:55:ab:63:aa:fb:a0:a2:
                    34:b9:ed:34:13:65:00:7b:a2:9d:f5:a1:08:83:b4:
                    76:d3:68:e3:51:94:73:60:83:81:0b:ed:3c:8f:30:
                    de:91:30:07:3f:6f:44:e2:dd:3b:00:63:a5:b1:47:
                    1f:2c:48:86:4a:19:1b:92:45:47:f3:cd:17:b3:a5:
                    ad:1e:1f:53:47:48:c2:4e:d6:55:c8:aa:a1:e5:7d:
                    38:f1:d1:c3:80:e7:da:97:c3:a0:63:30:ed:14:4e:
                    94:d9:6e:7b:5d:25:41:fe:99:ac:31:58:c2:8c:0c:
                    f4:25:c0:fa:4b:8d:d3:f8:6a:2d:9d:07:0b:b7:ed:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E4:5A:68:18:18:FC:EA:19:06:E5:49:EB:3E:25:33:C2:52:46:C7
            X509v3 Authority Key Identifier:
                keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:03:58:12:7d:8f:ca:16:15:cd:20:64:34:fe:66:e0:d7:
         58:cf:28:a4:f3:75:07:e3:f7:39:69:9f:a3:50:d4:5f:7b:08:
         4d:fe:6f:cd:56:19:2a:4f:32:72:3e:de:bc:7f:70:90:3f:0e:
         c6:b4:b7:c7:4f:1d:57:b7:a5:95:14:fc:32:a7:ee:65:8c:96:
         e5:b6:cf:9f:39:24:02:0f:1f:c1:94:e8:d5:e9:47:6d:16:cd:
         ec:9b:d7:30:e3:d9:16:71:12:cd:26:02:71:99:e2:c2:cf:0a:
         17:76:9f:03:27:ae:5e:de:93:d0:ef:c6:c4:ea:4b:87:64:cf:
         26:9b:8e:65:0e:a5:f8:4c:34:0e:6e:dd:f8:b9:9a:fa:cb:3a:
         dd:04:d8:ad:92:3b:ac:a7:42:fd:e8:21:24:a1:73:00:af:d5:
         19:a5:38:8a:e8:ff:34:08:88:1e:19:6a:bf:40:bf:c2:2a:d9:
         49:87:7f:45:b9:df:cd:73:cc:40:fa:d5:1a:c1:87:c5:91:84:
         60:6a:4f:b0:90:bc:31:bd:1e:b0:05:ad:9f:ec:b1:bb:7f:5b:
         70:54:cd:2a:75:02:67:d7:27:6f:b8:8e:c7:79:7e:dd:17:98:
         87:d6:96:51:0d:c5:03:ed:10:a6:40:a7:9a:b9:fe:47:54:d6:
         5e:0e:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----