Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File:                     tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier:          zlPW1S8zmgHJpYvbhefvfXn1+PpUzlXe0rX/tp8igZQ=
Subject key identifier:   A6:CE:D7:45:D3:C2:77:75:0C:B2:95:D7:97:7C:02:D3:D8:77:DF:67
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer:       /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial:       01962E2B3F859D642C7581B88CD6798AC08D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
                          2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: o7XFTQTTAr4mzf8pSgv9xdg7f55SJGFyXXmnGmJbVQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3f:85:9d:64:2c:75:81:b8:8c:d6:79:8a:c0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=a6ced745d3c277750cb295d7977c02d3d877df67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:9c:69:b7:55:87:66:a6:83:70:46:15:e9:
                    60:ad:27:2a:48:16:d0:85:2a:ff:12:6a:da:65:85:
                    db:30:2e:91:59:28:81:41:46:ea:95:2c:2d:9e:dc:
                    89:c2:b2:90:bd:f5:3c:5a:ee:fc:29:10:ab:69:d6:
                    40:da:5e:ec:90:08:91:ea:d6:01:42:6e:9e:45:7b:
                    2f:92:4c:c4:8f:90:ca:1d:e3:08:11:fe:95:57:7f:
                    6c:93:71:44:a1:7b:db:6a:6a:e5:79:c6:c3:08:40:
                    f0:d0:17:f1:ca:ee:c8:57:87:a6:55:a9:e2:6c:79:
                    14:22:70:b6:f1:6e:dd:26:0f:0f:aa:23:ae:b0:f6:
                    7d:71:21:9f:77:07:19:ad:b2:19:89:92:f6:9d:50:
                    b4:18:b2:a2:76:e1:e1:df:8e:d5:e3:77:23:ca:a7:
                    0a:0a:ac:09:3d:d9:a9:f7:04:81:4c:ee:ee:9b:90:
                    b0:25:be:65:a0:49:c3:1d:d7:08:5a:5b:ed:2a:2c:
                    fc:4a:e8:44:b7:f2:46:8b:cb:0b:96:eb:5a:0d:0c:
                    4a:1c:d8:ad:73:04:98:4a:c9:df:4b:1d:c7:db:50:
                    05:53:8b:d7:3b:89:72:23:1a:b1:c3:b9:cd:72:85:
                    34:2b:d5:01:7b:ae:bf:55:62:7f:e4:4f:ba:a7:c1:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CE:D7:45:D3:C2:77:75:0C:B2:95:D7:97:7C:02:D3:D8:77:DF:67
            X509v3 Authority Key Identifier:
                keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d0:45:8f:f3:2f:e6:fe:29:a0:13:1b:f7:74:c6:bd:2e:0b:
         4d:c9:bd:df:17:29:10:ff:b6:d3:9f:6e:bd:19:d9:78:01:cf:
         93:d0:66:22:43:b7:e7:09:48:9b:3e:7a:d3:0a:16:f1:f2:f0:
         0b:49:48:27:9d:b7:62:f4:8a:9c:de:95:d6:8e:0f:26:6d:83:
         d0:99:d8:3c:d9:2b:1a:c6:ad:05:73:e7:a0:7b:98:34:f5:4e:
         a5:be:ba:a7:10:79:78:ae:fb:64:e6:ed:78:8d:6e:49:dc:69:
         8f:fc:65:1a:a5:12:1d:e8:ff:7d:4f:11:d8:a7:0d:0a:d6:6e:
         5e:a4:de:02:f4:2f:8b:ee:8d:96:45:aa:4d:99:7c:ab:53:ed:
         d4:c1:8f:14:ec:b7:42:92:33:f7:96:67:b5:98:ef:7b:af:42:
         bb:d2:76:ba:cb:bd:cf:99:20:48:df:22:b8:12:4e:2f:13:5d:
         ac:89:4b:9c:ca:32:d5:ba:c1:50:42:fb:29:3a:9d:34:d4:a6:
         70:a0:6e:75:1a:2b:14:58:dc:de:c6:fb:49:96:42:61:5f:ca:
         69:b5:62:6e:57:01:14:2d:f4:45:e6:f1:2f:bc:2a:fb:10:f4:
         2c:04:0e:00:d4:70:5c:0a:bd:17:ea:58:be:4f:f5:99:6d:ae:
         1c:17:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----