Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          7WUh9lbfOrMABfLtfDFWGFscb0ME9C1xlN8y02mAt6c=
Subject key identifier:   E3:CA:7E:A5:CD:1B:84:44:1A:51:F9:DC:D7:7E:0B:BC:84:D5:E6:07
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       01962F3D6D260B9FA869A9C0AA16270D3FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: aoEEfwaTQxbP/ZZN8HthsmdufIY9AvPjDm4Iwibmjh4=)
                          2: TJcT2DJKq9sbzduugmROupXys-s.roa (hash: 945dsBaVvuzrinluSo92NkW9CX506XM50XuIK87H/WU=)
                          3: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (hash: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=)
                          4: qrp40JibSYUajfp86w1boBXGmSo.roa (hash: Hf8opJvaDtrLthe1laKTVc3MNwDoesRiktOsOBQx/Ss=)
                          5: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (hash: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6d:26:0b:9f:a8:69:a9:c0:aa:16:27:0d:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=e3ca7ea5cd1b84441a51f9dcd77e0bbc84d5e607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:14:9e:cb:87:59:70:03:36:3f:7e:1f:d0:
                    94:b7:a6:5e:a8:46:cb:b4:4a:d8:de:df:1d:d7:e3:
                    c6:ea:2b:6d:66:5a:62:3f:91:63:90:44:2e:cb:c2:
                    b5:d5:78:d5:35:72:67:4d:1d:dd:61:fb:04:64:8b:
                    11:4d:1f:bc:4a:93:18:72:90:35:3c:98:19:d7:31:
                    9c:06:34:c1:88:d2:52:eb:3e:3c:d2:11:fc:d8:e2:
                    61:de:52:7a:30:f2:48:7c:bf:38:b9:80:d9:34:40:
                    c8:f4:a6:33:5b:ae:ad:0f:d3:d8:bd:06:c7:0a:15:
                    0c:d8:c6:36:ac:65:e0:a0:79:4e:98:fa:34:b6:95:
                    83:7c:ab:d3:0d:63:a9:76:09:dc:84:a7:61:e3:9c:
                    38:6a:22:65:58:df:0c:ff:78:97:c1:98:5c:1c:d2:
                    42:e7:ad:7b:dd:4c:80:06:76:5f:75:23:a5:7e:83:
                    16:ca:53:02:17:2c:e4:d5:86:ff:8a:65:d6:95:31:
                    f9:62:f5:31:72:f4:fd:b5:ea:61:56:45:ea:47:11:
                    1a:d9:16:91:3f:40:2d:db:d0:79:ed:b3:21:04:c2:
                    ae:e7:d8:f0:e1:96:97:01:6c:85:32:5c:c8:94:0b:
                    c4:f0:83:2f:89:76:c6:5f:c7:a4:fc:86:00:e6:b3:
                    19:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CA:7E:A5:CD:1B:84:44:1A:51:F9:DC:D7:7E:0B:BC:84:D5:E6:07
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8e:76:6d:54:d2:4b:62:c3:57:89:e6:24:35:c9:74:6b:0c:
         bf:7b:ec:51:7f:fa:06:cb:28:88:10:1e:56:7d:53:7e:0d:c8:
         25:d0:3d:76:16:47:5f:ff:ad:e7:a2:ab:64:85:a1:23:5d:aa:
         b9:9e:b9:10:1e:4a:fc:ad:8a:63:c2:f5:02:b1:4b:ae:27:2b:
         e9:36:44:0c:ee:f6:28:e8:a0:0d:a3:f8:8d:ba:38:33:77:e8:
         63:b6:03:d6:05:1c:26:ea:f4:38:46:b0:56:de:cf:46:eb:f3:
         85:5b:61:70:0e:42:5a:b7:56:fe:4a:41:c4:c1:0a:4d:a0:4e:
         d3:79:ba:27:3c:7a:b1:a7:33:55:86:2e:b3:84:1d:5f:75:91:
         fb:b1:3a:bd:3f:d8:59:b4:52:9f:d1:46:57:c6:26:1e:08:4c:
         d1:6c:8f:da:db:21:36:dd:e0:c6:0f:07:f7:4b:d0:12:62:62:
         f1:e8:c4:1f:fe:06:76:cd:15:42:8a:3a:0e:21:19:d9:bc:94:
         29:b7:d9:1a:63:f6:90:1d:76:c9:a6:8d:06:b9:47:05:ac:d9:
         36:44:92:f2:e0:a3:56:6b:ea:f4:ad:18:6a:64:4a:56:1e:1c:
         30:3e:38:f1:ac:7c:66:5a:83:eb:96:6d:72:3e:2d:a9:1a:e5:
         40:07:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----