Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File:                     tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier:          nuZ2hvzm29Ka+SYOw9iQni2UmRkE4tkT2+N6fZtflOc=
Subject key identifier:   0A:D2:E5:61:1C:5A:07:8D:BB:E2:98:DF:97:C2:E4:14:F4:C7:58:3A
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer:       /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial:       01962E620F70E5C14047C49123A58BC0F8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number:          0F
Signing time:             Sun 13 Apr 2025 09:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:40 +0000
Files and hashes:         1: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: HKHt1coK7eW9Q/zpYsAgk5nL0i/zGghWp6ylLAnOpI8=)
                          2: zAVl6KN24j-HKETuiZlV3hao63U.roa (hash: djF473q/t5BuBhPbvFB06yhsIPQKmfmJ61GIeE/TTOg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0f:70:e5:c1:40:47:c4:91:23:a5:8b:c0:f8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
        Validity
            Not Before: Apr 13 09:01:40 2025 GMT
            Not After : Apr 14 09:01:40 2025 GMT
        Subject: CN=0ad2e5611c5a078dbbe298df97c2e414f4c7583a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:08:86:5e:63:9d:b7:9f:de:43:22:9b:ee:
                    32:84:61:0e:8e:72:75:bb:01:a2:2b:df:03:3d:e0:
                    67:27:82:cf:19:dc:e6:4d:92:72:6d:dd:b9:83:a7:
                    6e:b6:3e:b5:2b:5e:a9:63:a3:45:fe:47:3d:e0:93:
                    5d:d0:b7:38:ff:73:63:57:18:4e:2d:ca:9f:77:45:
                    cc:61:35:fc:86:7e:6f:1d:f5:f3:88:eb:87:44:1a:
                    01:9c:5c:5e:e1:83:e4:0c:56:3d:13:99:9e:42:cc:
                    ee:57:63:ed:e0:e5:dd:4f:b2:ba:99:6a:83:54:1e:
                    f2:1e:cc:02:1e:25:8c:89:b1:37:05:3f:66:2c:81:
                    69:fb:6b:e8:82:34:59:f8:c0:e3:45:1e:6a:05:59:
                    6c:69:aa:14:93:d0:11:73:34:65:ed:6e:73:ad:53:
                    65:d3:e9:e9:48:0a:29:40:98:a7:4c:a4:6b:e4:d2:
                    14:4b:1d:0d:fa:54:e8:f7:b4:06:7b:e4:fa:97:24:
                    88:33:25:1a:6b:b1:a4:7f:ff:4a:83:c0:70:be:e4:
                    26:9f:04:9f:b6:6a:29:75:c3:3b:90:6e:44:84:9a:
                    59:17:20:19:5d:e3:a8:f8:83:9a:d9:47:06:7b:59:
                    a8:bb:8e:19:e8:46:06:9c:01:3d:14:8c:d3:cb:c8:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D2:E5:61:1C:5A:07:8D:BB:E2:98:DF:97:C2:E4:14:F4:C7:58:3A
            X509v3 Authority Key Identifier:
                keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:c6:90:e6:98:a3:bd:ce:e9:ba:f9:b3:7f:e7:34:94:c3:
         b2:a3:15:80:32:39:ef:ce:96:8a:01:68:a2:c9:b3:a8:0f:df:
         01:16:18:80:aa:69:e8:f0:72:69:e1:05:61:c2:17:bf:ee:ef:
         23:3d:92:38:ca:7e:43:96:e1:42:0a:9e:f8:11:02:0a:90:e9:
         45:b6:01:f9:7a:14:67:bc:c4:a2:dc:7f:f1:74:af:90:72:fe:
         50:c4:60:96:00:7d:a4:15:5d:0c:df:b4:77:c2:2b:50:68:43:
         06:97:7b:9c:83:e6:d6:dc:ba:aa:95:81:90:2f:d6:ab:6f:3a:
         70:0e:99:11:f1:36:fb:24:e7:7a:96:d9:e7:21:2a:c7:70:a4:
         de:32:e4:f5:db:c4:70:7f:8f:61:ae:2f:2b:ae:11:a8:f4:3e:
         40:1d:39:18:62:75:4b:2e:67:76:a7:c8:69:fb:b8:ea:cc:fb:
         55:e3:c6:ea:bb:b3:55:3d:fc:a2:db:0c:43:6b:14:13:34:09:
         95:25:30:30:29:bf:9b:21:59:32:dc:b7:4d:98:bf:1b:61:d5:
         f6:7a:84:9b:84:87:e7:0f:1e:c6:37:8e:a6:1c:58:28:e5:9a:
         22:a4:0a:5f:e3:77:5c:ec:0f:ec:b6:eb:92:45:be:14:96:1f:
         8c:fa:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----