Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File:                     tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier:          hrrw+XqAkEaHeAoDf0eyhWVSUuAq5ocb8NetXAKBLH0=
Subject key identifier:   09:F5:C4:E9:1E:24:24:70:71:32:B1:08:F0:AB:64:02:B3:1B:10:BF
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer:       /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial:       01962DF3D8734A8384EEA89AC8C6D07999C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
                          2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
                          3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: A2a9HA0uyAQpKc0Pk66N/jZqEfaXAHL1T3Jj0Utf1DU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:73:4a:83:84:ee:a8:9a:c8:c6:d0:79:99:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=09f5c4e91e2424707132b108f0ab6402b31b10bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:70:87:64:40:da:32:ca:e4:bb:f3:04:d9:
                    b7:a8:d5:83:b4:15:01:c1:a7:43:ca:da:f7:3a:66:
                    da:73:45:9a:9c:d4:b4:e7:4f:d1:1d:28:92:7d:4e:
                    3e:24:35:4f:ca:95:9b:96:9a:08:a1:8e:4c:41:2c:
                    a8:b7:c6:1d:1b:35:75:00:93:bc:89:ff:1e:f4:28:
                    17:5a:6c:0d:25:72:3a:5d:71:84:b5:b7:99:1d:37:
                    32:ad:87:df:ce:1e:ac:be:25:00:fa:5c:97:50:3a:
                    5b:22:d8:8d:e1:61:81:44:16:42:c0:b0:39:53:74:
                    10:c5:83:f4:d0:12:94:77:e5:8b:70:52:4d:a9:ac:
                    17:67:de:b4:f0:8b:3b:5b:f8:8b:09:ff:2b:f1:dd:
                    db:a9:a7:cf:66:32:90:81:06:48:15:cf:8d:e7:ea:
                    4e:3d:29:c7:84:33:76:56:fe:05:26:c0:90:5f:dd:
                    25:25:ea:82:ec:0d:5b:c3:71:49:91:b7:47:de:44:
                    3c:23:d1:1b:00:b4:3e:3e:91:49:7f:c4:31:54:17:
                    f2:87:78:e0:74:65:10:8d:78:a3:43:a9:30:1d:c8:
                    27:b8:96:fc:69:37:cd:a0:6c:5a:32:60:b7:3c:6a:
                    ef:94:bc:1f:22:4c:ab:2b:a1:82:c3:c4:e1:bc:0e:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:C4:E9:1E:24:24:70:71:32:B1:08:F0:AB:64:02:B3:1B:10:BF
            X509v3 Authority Key Identifier:
                keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cc:5e:00:5d:d5:7a:d1:ee:45:21:e2:c4:31:31:e0:d0:73:
         da:ba:10:0b:70:ac:7c:c2:06:05:ad:28:95:d7:b0:2b:c8:58:
         24:aa:4c:81:ab:2d:ce:88:69:29:90:b7:55:10:75:fe:a9:3c:
         09:89:43:e5:52:ee:cf:98:25:73:55:b9:17:1a:ab:a2:17:36:
         7d:b7:f3:fe:62:d5:a4:01:ac:54:ca:af:ee:11:e6:e0:42:35:
         9d:fc:12:ae:37:14:50:44:90:3a:62:4c:54:7a:7e:d8:d5:3f:
         6a:32:28:66:ed:b5:23:f1:86:d0:dc:96:23:1e:78:c0:c0:16:
         1d:16:cd:0b:96:99:af:fb:41:86:ee:72:36:f4:e8:d6:08:6f:
         4a:94:5a:ec:ce:39:6e:9a:1e:de:67:8d:48:58:cc:05:71:db:
         70:ee:3d:cd:2c:65:ce:68:29:05:89:2c:9d:a0:83:b4:d6:82:
         34:c6:dd:f2:4b:1d:ea:43:e3:85:c9:01:9e:01:40:ef:1e:87:
         0d:8c:d2:ca:aa:1b:09:d8:8c:58:6f:ab:13:e3:44:84:99:ba:
         04:36:7a:ce:13:e0:b3:57:2d:34:09:3a:5f:92:46:de:dd:cb:
         dc:8f:72:d9:e4:c0:bc:28:e0:26:76:87:e8:7a:a6:a4:e7:d1:
         a6:af:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----