Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File:                     TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier:          q94JZ3LRQYWndJMM4Sq2exj75C9FRD6Wyd141OiraBs=
Subject key identifier:   83:71:B7:86:A7:70:85:D5:26:C4:D9:41:D7:25:92:13:38:4D:B8:9E
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer:       /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial:       01962FAB8BC1B8527A549F4ADEB7A2F8F0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: /RfkLUgckY2X/dGcuiW4WOOcTksCG7cmu+XaiKxR6s8=)
                          2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:c1:b8:52:7a:54:9f:4a:de:b7:a2:f8:f0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=8371b786a77085d526c4d941d7259213384db89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:77:58:59:6a:1a:47:11:ad:2e:a2:d7:cb:
                    7a:f0:3a:4b:84:c5:fa:01:0e:fd:93:15:e5:b2:1e:
                    3a:53:98:45:58:69:de:50:36:30:65:4e:77:0b:da:
                    c5:b8:6b:c3:6c:8a:1c:97:2d:33:4c:e4:1e:ad:a2:
                    31:42:6c:73:26:70:44:33:d2:67:2e:cf:33:d3:67:
                    52:34:7a:44:54:27:3f:92:a7:75:33:c8:af:e6:73:
                    9f:5c:ab:f0:8f:bd:71:8b:5c:50:96:73:0f:f7:80:
                    25:72:26:28:02:b3:47:28:e9:23:77:48:1e:ad:b0:
                    d7:09:72:af:52:a5:27:b6:c1:d3:93:b2:b9:29:f5:
                    60:81:df:ef:3d:45:73:21:52:af:50:05:70:84:b9:
                    94:58:85:39:d1:4d:9f:9a:c2:f4:65:00:47:4c:a9:
                    fc:c4:51:a6:53:a7:66:ad:b9:02:14:29:e0:b0:a8:
                    e2:88:97:c0:98:8f:62:ec:b4:4d:59:74:7f:30:3d:
                    43:28:d9:3f:68:ce:2b:da:67:05:ba:02:4a:62:ef:
                    12:98:91:39:de:6a:57:fe:bf:12:04:80:a8:8a:51:
                    08:69:24:ac:31:d8:77:dc:06:6b:b6:18:a0:c7:27:
                    dc:d1:21:a3:fd:f5:e2:01:04:7d:1a:90:cc:34:f3:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:B7:86:A7:70:85:D5:26:C4:D9:41:D7:25:92:13:38:4D:B8:9E
            X509v3 Authority Key Identifier:
                keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:df:cd:66:50:5c:9b:f5:e1:3d:bb:b6:fa:ca:75:ea:e8:46:
         a5:d7:08:1f:76:6d:10:ce:01:36:e9:9d:40:30:bd:87:93:83:
         26:b8:90:a4:b7:de:09:a8:09:14:f5:05:0d:b9:eb:6b:a3:01:
         a8:75:df:8d:0d:e5:d3:6b:1c:78:76:85:eb:df:9b:2c:68:69:
         54:19:88:77:99:28:3f:53:ef:57:f3:88:0a:cc:68:fd:61:1d:
         cb:6b:8a:c3:61:44:b3:30:7c:c3:93:7e:a3:2f:3e:9d:7a:9f:
         14:30:0d:30:2c:c6:f3:99:32:25:86:3c:50:7d:7b:5a:83:1e:
         54:b8:85:23:c4:d3:7a:07:04:a5:32:0a:c9:a7:2d:77:8c:c2:
         27:00:e4:d1:5c:4b:92:6a:84:06:fa:a7:fe:1a:dd:ea:47:5a:
         ec:c4:8b:3e:24:a6:73:f6:ff:8b:48:f8:13:a3:90:e6:ec:2e:
         23:1e:de:95:bb:66:5b:26:e2:a8:16:30:ee:f6:ac:87:18:30:
         e2:54:77:e2:f3:95:6b:f2:50:1d:e1:83:05:fe:0c:49:f3:9a:
         91:75:ed:0d:44:b6:4c:1c:b3:f9:0d:ee:0e:ad:69:46:82:8e:
         8d:c3:fe:e2:10:9b:d0:26:61:d3:88:df:22:e1:da:14:dc:d2:
         f8:05:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----