Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File:                     rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier:          FASM+4dUau60+tzD5darMN6WTTwNPpGC7ZwN7e2BVIA=
Subject key identifier:   FB:72:C7:1E:F7:40:09:38:83:EA:02:91:8C:F8:7C:DE:0E:2D:BC:F4
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer:       /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial:       01962F06793702AF0EE927818E1D75A03151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number:          0D7F
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
                          2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: N1g1WXv04fETyg3N6cuH3InlXvVim7b3GlIsEK63kns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:79:37:02:af:0e:e9:27:81:8e:1d:75:a0:31:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=fb72c71ef740093883ea02918cf87cde0e2dbcf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:99:10:00:7a:f5:3b:ed:55:0d:8f:62:0b:
                    11:c4:34:45:3d:97:68:f4:dd:ba:e9:24:f1:66:4a:
                    f1:14:f7:5b:8c:ca:69:e1:f9:6e:17:b2:5a:0f:ba:
                    9e:eb:a3:f7:71:c2:42:c2:11:bb:d9:db:2e:4b:96:
                    7e:24:22:13:ee:23:cb:99:15:96:11:42:40:47:a8:
                    b7:53:4c:7f:95:67:d1:44:1f:4a:98:85:33:d7:e9:
                    eb:8d:d7:2e:f5:3f:1b:57:e7:20:06:39:bf:9f:08:
                    8e:3b:56:0b:a0:50:8b:5a:97:d3:4b:e4:04:f6:cd:
                    ed:56:9c:3e:c8:16:c3:77:f5:34:83:84:4b:1a:be:
                    fb:f6:5c:84:a9:c2:d5:62:ce:0c:91:f0:31:28:4a:
                    d5:66:7a:c3:43:c6:3c:03:b0:c8:74:83:f1:f1:30:
                    3c:c3:71:45:cc:43:c9:db:71:aa:b9:1f:e6:84:c8:
                    bf:57:8e:39:7f:38:df:6f:49:51:b2:9f:a6:09:99:
                    6d:1c:2f:5a:53:26:00:1a:af:dd:1d:1b:51:09:7a:
                    cc:38:41:49:b5:47:30:20:14:c6:57:d6:33:d3:ab:
                    ae:3d:d5:60:92:74:f5:32:e3:64:71:99:54:ec:1d:
                    22:80:b8:96:36:46:84:6f:d9:c0:e7:12:ef:a4:4c:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:72:C7:1E:F7:40:09:38:83:EA:02:91:8C:F8:7C:DE:0E:2D:BC:F4
            X509v3 Authority Key Identifier:
                keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:ce:ee:d5:c2:eb:1d:a1:2a:34:79:f6:43:0f:ac:79:8e:
         f7:b6:bc:a0:06:bb:99:7b:db:15:91:4e:5c:43:4b:82:57:31:
         91:d8:4e:8a:ff:3b:be:9a:d0:ed:c4:31:ef:5a:3e:f0:d4:26:
         db:27:9f:d4:2b:e6:c2:2c:d1:fb:c6:8f:24:69:f0:85:d1:35:
         62:ba:bc:0f:8c:af:ae:8a:3c:21:e1:ef:af:92:85:72:1a:c7:
         11:9e:e2:2c:59:55:6a:eb:d0:3a:00:18:56:3f:98:dd:1f:39:
         0f:49:f8:8e:91:25:9d:6b:b4:8a:a7:1b:5f:c3:6e:50:78:39:
         70:c3:d9:33:20:11:d4:ed:9f:7d:7a:5e:f8:a2:f7:36:60:9c:
         f5:09:db:31:a2:a1:ab:d6:aa:9e:43:49:bf:ac:3a:91:44:b7:
         1b:91:67:67:67:d8:ec:1a:43:59:77:7a:ab:2e:db:7d:cc:6b:
         ec:f5:ca:a1:96:84:30:5f:18:86:b7:0b:f0:68:b3:32:9f:bd:
         b7:17:fc:42:70:49:5e:04:9c:fc:a1:78:d6:7e:6c:a4:2b:a3:
         b7:05:26:84:a7:dc:8e:2f:1a:c8:17:d9:be:4a:97:9d:a8:72:
         cd:fc:85:09:43:31:bc:ee:e0:14:aa:da:9b:fe:87:ef:8c:db:
         7c:d2:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----