Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File:                     tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier:          vl/k5sPIXvj//X/BmBTSsJtdulRIsEVIO5ACZdmlXjE=
Subject key identifier:   25:D3:72:70:2C:C4:AE:29:00:2B:86:6D:66:41:C6:C8:78:14:C1:BB
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer:       /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial:       01962E2B1188D33EBE42FC803008791025B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
                          2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: c5V9Eo//rDIt0mLmwpdYAFBwAU5THsT7WyrEOvvlPgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:11:88:d3:3e:be:42:fc:80:30:08:79:10:25:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=25d372702cc4ae29002b866d6641c6c87814c1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:71:ac:ba:60:e3:75:82:9f:89:84:b4:1e:
                    b1:c8:65:1d:46:1d:14:7b:cc:11:ab:47:48:12:5a:
                    1a:4e:38:de:99:8e:b7:b9:23:98:85:7c:e6:a6:df:
                    df:07:71:de:dd:0f:84:cd:0e:cc:60:9a:03:74:8b:
                    3d:08:39:5e:9f:8b:d1:f4:57:d6:4a:71:29:db:92:
                    b0:96:b8:63:72:2b:3e:36:55:7c:b6:0e:35:1a:ef:
                    5c:d2:06:d5:8e:a8:cb:58:fd:2c:d2:3d:bc:4e:5c:
                    26:d3:80:a5:ac:33:ce:4b:96:31:d9:2e:e1:0d:90:
                    8b:b0:9e:e7:6c:18:33:a8:0c:3a:87:3a:56:3b:b2:
                    a1:47:96:ed:4a:20:22:dc:be:d7:fc:e7:ff:b4:3e:
                    4d:81:bf:96:34:dd:6b:ce:34:ce:7b:c5:47:cc:9c:
                    64:d1:48:9a:61:dc:98:ed:5f:9f:96:af:d2:ec:55:
                    00:e6:ac:d5:d4:b3:58:d4:a9:f1:a2:8c:7a:a0:3f:
                    8b:e3:51:54:b7:6c:14:9d:22:cf:6d:df:95:97:ac:
                    30:f8:26:9c:a7:5e:83:66:99:ab:b8:71:4a:57:9e:
                    82:81:c9:a5:60:24:52:2c:2b:8c:cc:a8:2d:5c:a1:
                    bf:f8:05:16:a5:d8:c5:48:01:54:89:90:32:d3:f0:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:72:70:2C:C4:AE:29:00:2B:86:6D:66:41:C6:C8:78:14:C1:BB
            X509v3 Authority Key Identifier:
                keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:17:f9:49:ed:d1:db:b3:9f:a5:51:18:8a:c0:d2:ee:d8:e2:
         29:79:91:78:88:51:73:8c:27:b1:ca:1c:a4:40:b2:5f:0d:2d:
         b2:c2:31:8e:a5:1b:e1:ad:fb:81:38:8a:2b:55:cd:6e:c5:fd:
         7d:d1:e2:73:64:4f:56:94:64:ea:ac:cd:43:55:47:92:3f:15:
         98:f1:ce:f3:eb:31:70:7d:40:a8:a2:a8:09:c8:5b:9d:21:f4:
         db:9f:6a:0d:7f:ce:b4:58:ef:e4:cc:9d:fc:fe:1a:e6:e7:3b:
         42:01:b6:84:f3:7a:95:24:37:be:95:50:be:c3:95:ee:9d:c2:
         1c:2e:38:a1:20:8c:a3:46:2f:3d:00:b5:68:e5:9c:b0:60:a9:
         da:49:13:00:7b:5a:3e:37:4b:b2:8f:b2:43:cc:94:36:3c:85:
         20:19:29:09:59:69:d8:22:a0:46:bc:23:13:20:de:84:d0:d4:
         b3:22:95:3c:e3:ee:0d:5a:6b:bd:30:bb:dd:18:55:aa:5e:c5:
         5d:80:6c:a7:cc:6e:fa:bb:0a:49:56:a4:fc:d2:88:13:57:40:
         47:bb:b8:fe:4f:38:c6:96:ea:8e:91:db:6b:64:0b:67:d7:db:
         5a:19:c2:e7:43:d7:76:34:f7:6b:99:2a:b0:b8:db:10:d2:24:
         4a:8b:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----