Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File:                     tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier:          Yt+f7FHsrCcL75c+8YRx3PBUr1k2is1HDs0pQ0nrAtk=
Subject key identifier:   6D:A5:42:62:BF:E8:0B:C0:93:A2:44:D2:A8:43:25:3E:79:D1:4B:28
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer:       /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial:       01962E2AC23694A515B2193962E1926F4306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number:          14BE
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
                          2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
                          3: g5Uoag6M4vCu7dJYWVycSYm4rUU.roa (hash: Ngolk11LXJPCpKR9MzzdDkX8Nba8dwgngUE2uQJceUA=)
                          4: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
                          5: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: 8winxFZIV/AjpwY2khxDWNcRaYw5eyrOWYPqqq9Nae4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c2:36:94:a5:15:b2:19:39:62:e1:92:6f:43:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=6da54262bfe80bc093a244d2a843253e79d14b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:48:93:11:02:08:ae:28:b9:ec:57:c7:f7:
                    fc:80:31:ea:95:f6:6d:39:e5:38:e1:3a:64:84:d6:
                    4d:cc:11:bf:97:ff:9a:d3:b4:e6:4d:d0:d6:52:78:
                    16:49:a5:fd:56:a0:4d:60:94:b3:8b:e8:9e:6e:63:
                    d5:10:92:d5:b7:71:66:7e:f2:a3:5f:1a:5a:04:35:
                    d8:ca:ea:d4:de:93:1c:f8:fc:f0:51:27:a3:5c:7b:
                    03:16:de:b9:7f:23:9c:a4:69:bc:4e:c0:6a:ce:30:
                    19:11:4b:f5:f4:6f:01:8f:f8:50:df:fb:5f:c4:f9:
                    03:19:1e:6b:ba:49:cb:56:50:cc:54:d3:c9:b8:44:
                    62:98:1c:8b:34:bf:87:ee:cf:98:44:d0:27:27:49:
                    24:31:ca:f4:29:4f:5b:36:c2:3c:a1:6b:9b:07:69:
                    b7:a6:d7:19:3c:0d:0e:8a:63:b6:62:1c:f6:7e:62:
                    a1:19:ea:86:2a:51:8e:3a:b4:f2:60:8e:ee:de:be:
                    55:bd:bf:37:cc:27:e6:17:96:cf:79:d6:87:71:7c:
                    42:8d:9e:fa:09:bb:99:bc:58:1f:0b:eb:30:0e:4b:
                    de:65:14:ae:23:fa:8c:48:15:8a:61:b4:e1:95:53:
                    94:0d:1e:bc:b0:fa:01:ac:4f:21:69:60:2b:8b:3c:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:42:62:BF:E8:0B:C0:93:A2:44:D2:A8:43:25:3E:79:D1:4B:28
            X509v3 Authority Key Identifier:
                keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d5:8f:c4:43:bd:99:65:e1:2c:96:b9:96:14:44:96:ad:2f:
         dc:12:a2:65:9b:48:25:82:ec:8a:46:dc:73:b8:86:2e:e1:e3:
         be:72:02:0e:84:22:6c:87:59:cd:4c:6a:a2:ae:2f:74:d2:4b:
         7d:fd:5d:f1:2a:c0:18:e6:a7:0f:03:6e:ed:fa:e5:e8:13:df:
         51:7e:18:ae:bd:9d:84:20:d8:52:48:39:35:b2:34:7f:64:94:
         33:f9:5d:fb:bf:a2:07:d9:08:52:49:09:af:a4:86:c0:17:f5:
         e9:75:13:2a:3a:3d:03:e9:fc:63:2c:7f:ea:09:c0:1e:46:d0:
         c4:02:b6:d9:88:0d:5d:52:b2:3c:0d:49:90:71:1b:ea:f7:77:
         41:1a:b7:4d:27:5b:75:5c:33:0c:e9:a3:80:22:bc:c1:c4:40:
         2a:d3:5b:95:89:78:15:d2:2e:cd:b5:a6:d3:8b:f8:4c:5e:75:
         6b:da:b4:90:fd:b2:4d:a2:e2:cb:ad:6d:58:6c:f1:d9:04:c5:
         18:83:c8:b2:28:65:c5:23:61:c2:38:ac:e2:f8:d1:a8:2b:f2:
         fa:95:22:c1:b4:b1:b5:e3:41:e8:68:ec:f4:49:d9:b2:6a:1c:
         99:e5:dc:fc:70:71:2c:7d:50:b8:d1:52:23:27:48:00:ae:12:
         a6:dd:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----