Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File:                     tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier:          WaX0b/+AH/ZPY7nINQIeHsh8g95XinO+DpsyRb7kIoc=
Subject key identifier:   A8:2F:56:81:B3:0D:14:07:E0:7F:2B:B3:9B:11:94:96:12:20:8B:09
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       01962E61AE59ECCEAE4656278DE953B14022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: fyxM_h2WX6rYIy5hg25YZB5O2CM.roa (hash: 9Ti3G/owzw7kR0D0MPQYXnuvUJArE0MI+SK12KJz4Yg=)
                          2: shF1G42LQitQPvZfxehzohMRUrU.roa (hash: g2S5jc6HR4fQzCYw/zOiH9jd1mhIq7ZtkSDHMtrwc4E=)
                          3: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: osZnUiwsXvnKvOVdxNA+7H8n4kkTxt5Sex1RtpiiVng=)
                          4: zyYFRHKcIrTD9dtbNer5GUgk4uk.roa (hash: j/jB5+az+sxCe92XxmcMBTNdT2rTViq3Gn9CJHgWFM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ae:59:ec:ce:ae:46:56:27:8d:e9:53:b1:40:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=a82f5681b30d1407e07f2bb39b11949612208b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:0b:9e:48:7b:3d:cc:d3:26:27:d1:ed:24:
                    e4:c1:88:05:20:4a:3e:91:36:1c:f2:37:9f:84:06:
                    5f:ef:51:32:73:9a:5e:ee:d0:53:28:3d:c3:03:c0:
                    17:3c:48:d9:ae:b4:2b:ba:3b:3f:dc:06:0f:ba:4a:
                    14:2f:0c:ad:43:4a:7d:d7:76:63:45:0e:66:81:c7:
                    aa:9a:00:9c:38:35:9b:77:e3:8d:1a:92:2e:bd:a1:
                    d0:b2:48:57:e9:aa:ed:f9:f6:6d:39:d5:4f:b7:77:
                    62:ed:5f:83:9c:37:7e:37:0f:cb:6f:97:08:ce:ec:
                    9c:a0:9d:03:25:19:0f:04:d9:d4:09:3d:61:04:a7:
                    ac:eb:19:b9:63:ba:69:ba:72:16:5e:2a:2e:2d:a0:
                    25:83:b7:0f:7b:4c:40:c3:88:7a:19:78:a9:89:59:
                    c0:57:14:3e:c3:cb:ea:00:42:62:7b:9a:26:73:63:
                    e8:25:3f:2c:4c:f3:a1:c7:e7:8e:f3:89:05:c2:82:
                    1f:26:fc:76:e0:43:0d:9f:a4:39:1d:17:38:7d:7c:
                    ac:79:6f:34:16:d8:7e:a3:a9:03:bf:7f:fb:5f:d4:
                    5f:b9:38:e1:36:90:12:4e:f3:26:3d:7c:24:78:84:
                    64:02:da:46:e2:fb:c8:d0:27:87:1a:4d:aa:bc:ec:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2F:56:81:B3:0D:14:07:E0:7F:2B:B3:9B:11:94:96:12:20:8B:09
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:c1:c9:b2:d5:bc:7a:9c:77:61:42:a9:2c:f1:06:9f:4e:
         82:97:57:07:fe:c0:1e:9d:3b:9b:73:ca:2d:e5:76:9e:4e:80:
         f1:d9:69:cb:64:9e:73:8b:b3:4b:fc:5f:92:75:e4:cb:1d:de:
         08:5f:b5:60:7a:5b:be:d3:d6:29:b1:44:a5:9b:77:cf:78:cf:
         37:57:3b:54:db:01:f2:c8:ee:6d:12:c0:d2:c3:ab:f9:a1:df:
         5a:39:cb:85:77:84:34:71:25:ac:38:04:42:d3:5a:4b:85:dd:
         0f:17:8e:c7:40:dd:d2:46:13:20:68:cb:90:c5:2c:d5:df:ca:
         e3:c8:25:4b:db:f8:19:9c:1b:e2:ed:93:28:51:aa:43:e4:8b:
         69:a1:b1:b2:75:a6:97:3e:08:04:db:8f:8f:37:5b:5d:8f:49:
         5e:32:9c:20:fc:3c:2a:7e:be:e1:3c:05:ee:8b:d6:73:cb:4b:
         90:1d:ee:89:4b:36:a4:09:9c:be:ca:16:34:99:e9:01:bf:30:
         7f:2a:91:a6:13:e4:67:db:ee:2d:70:87:79:90:09:09:fc:01:
         b3:78:d7:4c:48:62:4e:38:17:a3:ba:e3:03:e2:57:67:2f:8a:
         0b:cc:2a:64:87:59:b9:36:bc:f0:7a:bd:77:5a:d3:c5:33:ed:
         33:7b:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----