Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File:                     Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier:          RSRb7nWmZ3X6yjzp38SK5Jwac8xt+mvSmVsk+/bmIWM=
Subject key identifier:   11:DD:3C:9E:8F:E2:39:01:C7:E7:91:9D:ED:CF:3F:9D:BC:B4:10:6F
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer:       /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial:       01962E98724D08315C79AA6F4B7CD02151DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number:          139B
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=)
                          2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: juwyvr/uo+zv0POwUkGMOWb0rgQoDpgJXmkOFmf8NzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:72:4d:08:31:5c:79:aa:6f:4b:7c:d0:21:51:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=11dd3c9e8fe23901c7e7919dedcf3f9dbcb4106f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:5c:da:c5:a7:24:94:15:3e:83:7f:92:b9:
                    63:7f:ab:52:2d:a9:3d:d5:8a:70:e2:32:a8:50:8f:
                    3f:91:96:05:aa:43:2e:04:5e:c5:ed:8f:ff:79:ba:
                    bb:46:b9:ac:10:b0:cc:18:e8:48:bc:a2:62:be:f2:
                    21:9e:5f:cb:13:2f:99:9e:ab:ce:b0:08:1d:a8:8b:
                    07:16:e7:d9:81:74:84:8d:cd:7c:cb:23:bb:c6:3c:
                    af:71:f6:ff:33:34:a9:0e:44:78:82:88:2b:69:fd:
                    b1:12:a8:f1:d1:57:ff:2d:2a:43:58:9d:7b:60:dc:
                    8d:0e:22:a3:75:0b:87:14:ed:de:fc:79:34:75:ac:
                    62:e8:e2:23:dc:62:c2:9c:d5:13:0b:06:c4:c3:a4:
                    6c:b2:b7:b2:2c:7d:eb:a4:e8:42:9e:63:67:93:e7:
                    6c:8e:c5:32:58:70:b3:fc:1d:f3:c6:ef:5c:a7:39:
                    97:8f:69:54:fb:ce:d3:20:e1:cf:1e:25:f0:e8:a5:
                    4e:14:2f:c5:fd:fd:97:f3:b2:26:f7:a2:10:85:5d:
                    92:6b:9e:7e:be:dc:3f:99:ac:0e:12:77:ee:f6:d9:
                    37:fa:ad:5b:2f:18:cb:3e:32:7e:d8:cb:73:a6:76:
                    1d:0a:0f:f8:fa:f4:76:17:d2:79:df:bb:d5:26:83:
                    69:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DD:3C:9E:8F:E2:39:01:C7:E7:91:9D:ED:CF:3F:9D:BC:B4:10:6F
            X509v3 Authority Key Identifier:
                keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:30:17:0d:cd:ec:30:7d:99:7a:4d:06:63:93:e5:ed:fd:63:
         dc:1f:3e:c6:4e:a9:9c:6f:46:9e:1d:c3:14:65:dc:2c:de:9c:
         ac:4d:50:07:97:cb:81:ad:09:25:de:4c:9e:06:8b:fb:88:cb:
         1e:99:28:11:20:38:5c:64:6c:96:12:7f:bd:15:32:0a:1c:f1:
         c0:47:91:ac:11:1b:52:24:03:6b:e1:ae:34:a6:41:a9:54:54:
         cf:50:47:16:74:ea:11:20:68:6e:70:36:1a:71:7e:55:cc:39:
         39:46:57:60:b8:87:28:d2:af:4c:60:62:54:f0:c8:1e:09:f8:
         65:f5:ee:06:da:84:08:2d:1f:e5:80:04:61:6f:7d:c8:40:93:
         dd:4f:32:1f:37:87:7d:57:3f:29:ae:93:a2:a0:cf:2b:85:9d:
         99:8d:49:c8:53:33:c1:44:91:64:00:12:93:13:19:57:cc:0a:
         6d:50:82:2b:1d:af:87:1d:93:72:eb:5c:34:0b:48:40:7b:d1:
         cb:f2:62:6c:3f:85:1e:cc:8d:ff:bf:04:21:01:76:30:28:99:
         a9:d2:47:ae:58:bb:09:ce:8b:0d:41:8b:0c:e3:0c:e3:52:3d:
         d3:c3:5c:7a:35:9f:cd:f3:a2:bd:ee:f7:c0:cb:78:2e:72:c2:
         9b:b0:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----