Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File:                     tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier:          Cs1eaPR3B6CZNvQ5hWfvq+q8oV0MfBrZjZsGD8/b45k=
Subject key identifier:   89:C8:DE:14:D3:0C:1B:4A:79:E8:CF:36:09:73:D9:90:5F:F2:91:0F
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer:       /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial:       01962E2AFE985E58177C97714D92953274D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number:          0B4D
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
                          2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
                          3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: IApI2zyd820yLLI7qfwqxoa+4OMUZgb3LzNmw6veDTY=)
                          4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fe:98:5e:58:17:7c:97:71:4d:92:95:32:74:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=89c8de14d30c1b4a79e8cf360973d9905ff2910f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:88:5d:17:3c:59:b2:b3:d9:95:ab:d4:2d:
                    5c:b4:68:f8:33:bc:cd:0f:92:92:23:28:ca:b6:72:
                    ab:d3:2e:a1:bb:e2:be:42:9e:09:23:d4:11:ea:da:
                    5f:e8:3c:ff:36:da:58:9b:ca:a8:42:59:ac:5d:db:
                    4c:3c:18:5a:6b:9a:52:d1:df:cc:ad:b5:27:39:d4:
                    c7:94:d5:60:54:8f:23:99:82:79:55:5e:ab:5d:ba:
                    db:89:f4:c5:8e:5f:db:18:bf:02:22:55:d5:4c:d5:
                    d9:1c:95:3a:93:53:0e:b8:ad:7b:7f:35:cb:bb:86:
                    b2:a6:70:cd:67:60:e7:08:80:5d:b5:e2:b3:c2:5c:
                    0e:77:95:86:f2:27:df:94:1d:0a:93:b4:fc:bb:fb:
                    ab:f1:e0:5a:81:78:16:54:5e:49:a1:53:da:4b:3a:
                    17:c5:99:dd:43:b4:5d:e6:d0:66:1a:2e:cb:b2:87:
                    41:8c:06:71:89:d7:1c:f3:27:39:e9:dd:95:b1:e6:
                    91:41:d2:8f:5d:6b:05:12:83:ae:0b:c7:ef:cc:f8:
                    fc:09:94:0b:9f:c9:6f:58:e7:d1:f5:24:e5:52:53:
                    63:a8:81:c3:83:b3:96:14:10:0b:c3:9c:6c:92:cd:
                    e0:fe:af:2b:68:fd:12:51:e4:21:12:2f:7d:0a:a6:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C8:DE:14:D3:0C:1B:4A:79:E8:CF:36:09:73:D9:90:5F:F2:91:0F
            X509v3 Authority Key Identifier:
                keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9e:1c:69:2c:23:06:04:fc:c6:49:f8:44:7b:37:f6:04:62:
         a6:1b:80:c3:c9:d0:0c:c3:46:04:21:93:82:96:59:a1:9a:ba:
         d7:c8:42:33:ed:7d:37:13:79:69:58:56:86:de:38:13:1a:ca:
         de:b2:d9:6c:0b:cd:a3:e8:08:d6:b4:5f:e4:8b:73:78:23:3e:
         4e:f2:c8:6a:73:2b:d7:24:11:34:30:f5:44:e6:ba:d2:61:26:
         8d:dd:d2:ab:10:a7:70:00:75:bb:38:77:db:07:ad:b5:5e:bc:
         d7:f0:66:38:f5:97:16:8b:e6:01:8c:1f:d0:a3:9d:99:db:d5:
         bb:8c:19:9b:5d:34:df:c2:9c:97:62:ef:0c:57:00:47:e2:89:
         dd:f9:0f:b6:9d:46:16:04:84:6f:be:74:7d:4a:c8:89:7c:18:
         a8:25:23:2d:80:f5:57:3a:ef:37:03:45:96:0a:a2:3f:5c:13:
         d4:76:ba:02:b6:13:a5:56:f9:c5:46:2e:09:e6:92:6e:5a:09:
         0e:dc:e5:1f:86:55:cb:e1:57:9b:51:c6:db:3f:c9:70:e4:52:
         92:53:f2:c0:9d:a1:33:db:7f:66:7c:b3:52:31:23:2e:4e:31:
         f2:a1:30:b5:e5:97:b4:65:f0:d9:01:ff:61:48:71:73:0a:ac:
         36:c5:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----