Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File:                     24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier:          t4jjcJ61PJ6+Y5zBRzvkmrhxgHaqJQZIcA8jRIwewF8=
Subject key identifier:   6F:7C:DB:28:72:7B:88:74:2A:17:7E:4B:C3:C1:95:E6:CD:A1:36:7D
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer:       /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial:       01962F3D49F817DAC2DDB62F70CE05263D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number:          0BE4
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: Qr23NQz09lv24n0OIkXDH0H3l6hPSyJ9Es7ChCNqf0Q=)
                          2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:f8:17:da:c2:dd:b6:2f:70:ce:05:26:3d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=6f7cdb28727b88742a177e4bc3c195e6cda1367d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:7f:66:f3:34:68:8f:0d:80:d4:9f:24:fa:
                    63:74:83:50:d0:71:da:20:a6:4a:1d:85:af:63:1d:
                    d8:eb:9b:d3:d6:cd:09:fd:67:05:f9:85:f6:ea:93:
                    13:3e:bb:9a:3c:65:9e:3e:43:79:7c:38:d0:ba:d0:
                    50:fa:40:5e:1d:f1:d3:81:b7:7d:aa:26:c7:d1:c5:
                    b5:41:43:1c:47:a2:a3:c1:23:78:e0:dd:68:f1:36:
                    e6:b7:04:e3:87:b5:37:f4:1f:c3:73:0d:6b:4c:cf:
                    b1:84:4b:89:43:b3:85:f4:87:71:8a:6c:60:9d:d4:
                    7e:db:60:14:e3:b9:c1:22:5a:fa:95:a1:4e:35:f6:
                    da:47:42:1c:98:f0:b2:95:e8:37:29:07:c1:d9:4e:
                    2f:e9:bb:a2:17:5a:71:e8:dd:37:2c:65:fc:04:32:
                    ea:10:e5:1b:9b:82:36:97:30:38:89:5c:ae:a0:1b:
                    cb:90:43:f3:f9:6b:c6:25:01:2f:34:52:2f:d1:36:
                    e1:16:04:0f:18:ee:75:cc:4f:1b:e8:4a:12:6d:f4:
                    06:da:0c:7b:78:58:4a:55:7b:13:ce:0e:08:8c:03:
                    b8:9e:23:4a:72:44:d5:03:41:c8:f6:da:d9:6e:86:
                    0f:7c:5c:29:53:59:e3:70:b2:42:f9:e2:e7:61:e6:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:DB:28:72:7B:88:74:2A:17:7E:4B:C3:C1:95:E6:CD:A1:36:7D
            X509v3 Authority Key Identifier:
                keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c5:71:7d:88:8d:54:c4:af:61:a9:dc:86:74:22:a0:71:cc:
         61:89:2b:14:dd:4e:18:68:44:3f:bd:f5:a1:fb:0f:0f:5d:46:
         30:ec:06:1d:b2:04:c7:a8:8c:bf:43:e2:02:e3:91:aa:80:83:
         06:94:cb:78:7f:91:22:90:0b:4f:0e:46:eb:98:e8:1c:1a:6e:
         70:d0:35:ac:f5:10:59:48:96:0c:c7:b6:63:7e:06:b7:6d:bb:
         ee:c9:26:ba:df:f7:a4:c3:dd:bb:12:78:35:1d:e8:05:75:57:
         94:43:c1:8f:71:b1:6a:ca:63:ec:ae:25:b7:88:a2:ba:36:71:
         62:01:53:5d:01:77:39:88:e5:ca:8e:42:73:02:06:33:7d:21:
         48:b7:f3:ee:87:72:b7:e3:f5:36:12:fa:b3:06:bd:e1:45:0a:
         3b:0f:17:e6:f1:e5:22:18:b2:41:8b:9e:b1:c6:f8:5f:25:15:
         60:1c:dc:13:05:4d:74:be:81:03:28:4b:b6:93:f7:61:db:06:
         5b:07:45:97:7a:c7:46:5d:22:f8:56:2e:74:cd:e7:08:66:43:
         01:2e:df:ef:1a:39:82:5f:cd:23:5e:b6:bc:da:1b:13:ed:70:
         fe:36:ee:ba:b9:e5:e9:7d:81:3b:a2:ab:f3:6f:fd:92:e3:ec:
         92:b4:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----