Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File:                     TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier:          aTXant22HEYaf1mvtRLfFo1pHzi8qVal7EA3yBe/vH0=
Subject key identifier:   8B:F9:13:7D:50:0F:7E:8B:42:CA:85:7B:E5:4C:73:B5:45:07:94:B4
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer:       /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial:       01962E617B5B06CC313E6C99125C45E74050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number:          053F
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
                          2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: gbSQ1qNM+PnsTACwk+nJDUbTgIKmSO9WH8IsD9kI7fY=)
                          3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7b:5b:06:cc:31:3e:6c:99:12:5c:45:e7:40:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=8bf9137d500f7e8b42ca857be54c73b5450794b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:38:4f:53:ba:de:f5:dc:9d:47:b4:64:0c:
                    58:c5:db:84:7a:7d:c3:1c:a8:d6:51:95:37:4a:84:
                    6a:d5:80:a9:0c:19:9f:f2:bf:bc:9d:64:ac:c8:91:
                    a6:92:80:7e:cb:a3:da:bd:a1:b7:75:72:26:da:7a:
                    ce:3a:36:3c:53:a3:a7:ca:bd:c3:99:eb:82:f3:86:
                    a5:f6:48:19:c7:fa:67:8f:ad:b7:87:d9:f1:a4:58:
                    d1:56:e1:c2:19:3a:d5:c9:c5:6b:d1:78:b1:51:33:
                    da:e8:44:50:1e:ab:14:52:c8:06:8d:78:40:3b:b1:
                    45:d8:eb:21:b2:b4:ee:13:bf:eb:07:72:00:9f:de:
                    9a:a6:be:5d:e7:02:5e:da:e0:d7:39:e1:f2:c1:f3:
                    a3:b5:72:f5:01:e8:39:c9:9f:67:6f:3f:ea:f6:ef:
                    ac:a2:a0:25:de:f1:47:f2:e9:4c:e4:19:fe:b6:37:
                    0b:f9:a0:d9:1e:46:16:06:12:bc:c0:30:33:03:fc:
                    d7:58:a1:bb:57:d9:46:e2:49:d7:fe:8e:d7:8a:a0:
                    8d:cd:88:c7:94:a9:3b:41:55:de:09:e6:7c:00:15:
                    9d:ff:00:ca:43:e8:4c:0b:76:9e:2c:51:d5:62:78:
                    2c:55:4a:68:12:18:d5:dd:2e:dd:ff:17:84:df:b5:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:13:7D:50:0F:7E:8B:42:CA:85:7B:E5:4C:73:B5:45:07:94:B4
            X509v3 Authority Key Identifier:
                keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e8:fd:e4:40:f8:38:58:0f:3f:1d:c5:05:f2:5e:cc:73:9b:
         dc:46:0d:47:65:f1:d8:6b:dd:d2:38:59:e8:1e:b1:a7:0b:07:
         cb:9e:12:22:30:72:29:86:13:19:dc:8a:5f:4d:f0:ce:66:cd:
         62:2f:0d:cf:37:ee:f1:a2:cb:e5:8d:fb:10:50:a6:97:99:27:
         d9:3d:ce:41:3c:9f:50:28:06:3a:43:9a:9e:f7:10:40:5a:7a:
         5a:cb:e1:b7:60:30:79:44:b3:76:5c:51:4d:52:96:b7:8b:93:
         52:7b:35:30:a2:aa:b4:95:31:9f:b6:a0:95:47:6c:f7:37:f0:
         39:2b:81:22:fd:7d:99:ba:7a:94:d2:3d:ad:eb:87:e7:f6:c4:
         49:4f:a2:42:99:49:e4:fd:9f:41:b4:f7:f1:d5:15:64:d1:60:
         57:ba:7c:8a:8d:41:a8:1c:2e:e5:30:d7:1f:01:1a:9d:cf:b8:
         af:5c:6e:55:0b:30:45:62:b1:7a:b2:cc:d8:da:f2:a7:f2:6e:
         25:44:3e:47:51:72:78:53:5c:c9:e1:8d:2e:65:92:ff:bc:5d:
         5e:58:22:c0:f9:72:3e:78:bc:68:ce:5f:d6:70:fe:01:0a:0d:
         5e:5d:ac:a9:78:7b:c5:56:ca:5f:c0:d7:e7:e1:8d:11:08:9b:
         9f:d3:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----