Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File:                     T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier:          Batn7leIbsG8oxEtbxKFdjQJ5o/wRiHXUDtKVKKAWX4=
Subject key identifier:   B0:F6:CB:BC:FE:2C:D1:C0:93:0D:EB:40:95:7C:BD:E6:DE:28:C0:CC
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer:       /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial:       01962F747E527A598E755B42E36EC58771C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number:          0449
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: q/5nhJpV2WFKwnI5E8Is514hP+eVc/NVZ03KgOqNFzA=)
                          2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7e:52:7a:59:8e:75:5b:42:e3:6e:c5:87:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=b0f6cbbcfe2cd1c0930deb40957cbde6de28c0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:f7:01:30:80:4d:af:8b:0b:a1:5b:48:7f:
                    2a:11:e9:bd:d8:eb:a7:8c:5e:5a:bb:1d:56:e1:88:
                    5f:24:a5:87:b0:34:c3:6f:d2:24:63:e0:02:59:a0:
                    1c:6d:a1:ac:ce:49:eb:67:55:5a:3c:8c:18:83:71:
                    a4:d0:83:d0:af:2d:ce:d7:a7:ab:12:47:20:4f:be:
                    f8:5c:4a:97:d0:d0:2d:b6:10:93:af:4d:ae:8c:1b:
                    11:8c:f2:05:79:51:ec:c9:bc:22:b8:6f:7e:49:9c:
                    d0:ba:92:65:b7:dd:cb:9f:3f:ff:82:c4:3a:70:06:
                    17:ee:8b:8f:36:e3:5a:d7:e9:9b:af:a1:c8:c0:25:
                    b5:de:90:f3:ca:f4:28:9a:5d:0d:ef:58:ce:e2:3f:
                    45:8d:ee:36:f3:af:31:e6:e7:f1:ad:c5:a5:62:10:
                    f6:bd:3b:ba:5c:09:81:8a:a7:ac:d4:74:7c:42:61:
                    5f:b5:cc:d6:ae:9e:19:5d:d0:3a:85:e4:ea:2f:06:
                    f5:1c:6f:dd:fb:c5:a3:77:a2:ed:a0:40:3c:52:fe:
                    53:8e:6f:b9:74:c0:cc:29:1b:6a:0c:55:28:e7:f4:
                    0f:fd:36:98:2a:61:bf:68:1e:68:bd:e6:e7:99:3a:
                    a8:66:6a:98:8d:b6:18:c5:93:cc:75:7b:fa:f3:be:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F6:CB:BC:FE:2C:D1:C0:93:0D:EB:40:95:7C:BD:E6:DE:28:C0:CC
            X509v3 Authority Key Identifier:
                keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:2f:6b:64:1f:c6:97:00:5f:a9:43:97:f2:69:6d:76:a2:
         77:0e:f7:4e:f5:3b:04:32:15:4b:64:6c:7e:ae:5b:a9:f5:d2:
         e5:13:e8:e5:d9:ae:3d:a5:9b:54:1b:08:14:92:c9:a2:7d:5d:
         78:86:84:a7:4f:2c:3a:37:41:f2:46:ac:03:f9:b7:d6:ca:da:
         71:91:57:ef:64:c4:19:c8:58:89:e3:3e:d6:5e:ab:5d:36:4e:
         45:70:5c:50:15:0e:7a:d1:ef:4f:cb:f4:c6:0c:59:33:cd:15:
         27:78:fe:f3:e8:01:06:82:8c:2b:31:48:1a:6c:06:8e:75:d7:
         60:0b:c5:56:7a:01:49:3c:ad:00:77:ab:b0:8d:8a:7a:db:df:
         5a:bf:d4:73:55:8f:7e:df:c2:ed:bd:e3:e2:9f:8a:00:73:38:
         b1:19:d8:34:86:88:f6:2b:95:07:72:99:19:3a:44:36:bf:da:
         7e:ba:43:ac:71:13:ff:57:e1:e0:50:b0:ca:b5:e6:a5:07:79:
         87:02:ce:e9:62:1a:1f:0b:64:8f:0a:55:21:cd:42:a7:59:2a:
         d5:58:6b:e7:df:6b:eb:cd:b6:16:e5:91:19:26:c8:73:1d:b5:
         59:be:72:0f:ff:de:d0:d3:de:fb:d8:93:b6:00:cc:39:c9:57:
         08:d4:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----