Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File:                     tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier:          Jfw+cPCsGxvQJYtlcfbCxneY23MQ1ou+F3Te52ih0Wc=
Subject key identifier:   B7:18:41:4F:1B:08:56:94:2B:0E:15:E8:E8:08:33:69:BB:12:CC:4F
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer:       /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial:       01962E619CEFEF3CC358CF0976E416119124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number:          0512
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
                          2: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: V+a/h61D743f2Xh+EKhmwsk0k4fEZr0R/0HIYmBz3BE=)
                          3: uFhGxvFPYDvb2v140YiHipd78V8.roa (hash: UAbeVGlliINlNYidgR2wj1fJ9xz6RHolZocdGOJb52Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9c:ef:ef:3c:c3:58:cf:09:76:e4:16:11:91:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=b718414f1b0856942b0e15e8e8083369bb12cc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:68:b8:d5:54:49:08:17:0a:bf:b3:92:6a:
                    fe:10:5f:d1:60:ac:27:8d:02:59:c7:cd:6f:76:89:
                    f2:f1:56:bd:32:01:60:fc:91:86:11:37:8c:83:d9:
                    ec:ab:5e:3c:59:c2:b6:aa:82:82:0a:84:57:5c:71:
                    64:00:68:4c:80:24:7c:a8:4e:a3:f1:85:a6:07:03:
                    86:09:12:07:24:77:b6:49:2b:6c:ad:d7:e0:22:03:
                    e7:83:60:6e:24:27:00:af:a0:2b:1d:c7:e2:75:15:
                    ea:30:0a:ec:28:a9:0a:a3:5e:87:68:82:6a:05:c3:
                    c6:64:a8:9c:e4:ea:76:f7:a4:8a:6f:1d:cc:95:c0:
                    32:f0:c9:d5:2d:41:b2:c8:86:b3:85:d5:8e:c4:c9:
                    00:30:0a:ef:ae:1a:19:32:9b:a4:65:29:39:b0:97:
                    30:34:fd:84:0c:45:23:6a:cb:5c:2a:97:d8:b6:64:
                    15:07:4b:c9:e3:a1:3f:6a:56:df:6b:4b:1a:df:54:
                    29:1a:58:81:b2:0f:00:ac:92:e4:e7:51:dd:ba:de:
                    39:1c:aa:67:32:d3:98:72:54:06:65:7c:78:8d:72:
                    1a:63:1c:a1:b3:fa:34:6f:dd:ba:8a:ee:0e:b2:2b:
                    fe:1a:b8:46:57:7c:37:ac:2f:3d:bf:f8:3d:93:a6:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:41:4F:1B:08:56:94:2B:0E:15:E8:E8:08:33:69:BB:12:CC:4F
            X509v3 Authority Key Identifier:
                keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:f7:04:5f:ac:39:17:59:44:aa:52:af:6e:15:1a:3e:39:
         c9:9f:d0:9e:33:02:c5:2c:33:d8:7b:c0:f5:53:ee:21:7f:b2:
         50:5c:dc:f4:9e:2e:4e:ce:c1:ee:de:fd:60:e4:8d:69:39:c7:
         36:f7:9a:fc:1f:41:8e:5d:82:93:d9:a7:33:76:ab:f5:c0:7c:
         df:3a:13:03:45:8b:e4:f6:fc:42:28:ab:25:7b:96:2f:44:c1:
         c0:00:c4:f4:c9:55:0f:e4:4c:9e:90:ac:74:13:17:85:37:02:
         7b:7e:cb:40:5a:9b:e5:7f:5f:48:01:37:07:c6:7b:ad:4a:e3:
         64:4c:3c:97:61:4b:f7:44:91:55:f9:45:da:5b:f6:3f:7c:42:
         1b:51:c1:31:61:8f:51:82:b1:93:79:69:59:a8:dc:25:ea:1c:
         c7:39:b7:45:9a:26:fe:92:50:fc:b5:0e:e9:17:97:9a:c6:32:
         df:88:fd:a0:ff:0f:d3:95:da:bd:7c:a8:22:5e:86:fe:e4:52:
         94:c7:c2:85:a8:2e:3c:96:bc:b5:76:72:52:82:1c:34:4b:ad:
         c6:99:76:f7:33:2c:c7:19:b5:a1:33:e0:7f:a4:27:59:73:57:
         ff:aa:4a:d8:b2:a4:f8:a2:d3:9f:56:10:8d:c9:4b:8f:30:4b:
         3e:86:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----