Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File:                     t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier:          u/xp1LVJMY8FBksQ+4xQtbHZ0zT6r69d1Y5YIitZUbQ=
Subject key identifier:   72:6F:9A:24:54:50:65:42:1F:88:6E:39:19:EF:FE:83:B4:65:5F:83
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer:       /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial:       01962F744F2D37DD44E1B7D50AB8B9AEA49C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
                          2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: 6kX41j+g1FPwlol0Do4xqFVTRxg54nRUzuPkWK22hD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4f:2d:37:dd:44:e1:b7:d5:0a:b8:b9:ae:a4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=726f9a24545065421f886e3919effe83b4655f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:2b:e0:e0:19:49:82:54:59:12:e1:6f:12:
                    07:c8:64:50:6c:ea:a1:e5:0c:ef:19:b6:9b:15:ce:
                    af:c8:65:55:97:1e:f7:4c:94:69:c9:cc:1f:ac:8e:
                    25:2f:cd:7e:8d:81:54:b5:8f:a4:a0:79:27:11:7c:
                    a7:c0:a2:0d:83:dc:0d:98:0f:3f:62:53:d4:24:ca:
                    b5:72:c2:15:fd:2d:f4:53:2a:b5:fb:48:da:a4:3c:
                    61:6c:d7:8c:62:f1:a7:7e:77:87:49:56:2e:d1:fa:
                    e6:69:07:a7:de:11:ee:ec:fe:60:76:38:b3:e7:81:
                    e7:a7:13:08:66:31:43:8f:ec:7f:b3:24:13:48:fb:
                    b2:c4:18:f4:ea:7c:eb:3f:b0:49:57:0d:b6:a3:70:
                    05:d0:c6:c7:4f:3f:fe:26:82:f8:8b:c5:5a:1c:4b:
                    ff:62:ca:88:0e:7c:e0:10:82:ed:ad:e8:9d:4e:d9:
                    40:71:78:a3:04:54:6d:e5:64:11:e0:73:98:cc:0e:
                    60:e8:c5:ad:65:59:1a:52:a2:fb:cf:a7:a9:e6:a1:
                    00:1a:b8:eb:ab:0d:ae:cc:7b:f2:f6:32:b2:34:0c:
                    99:2c:c9:5a:58:74:fc:06:4d:6a:4c:9f:ef:0e:b7:
                    6f:4a:82:40:95:64:71:1b:d3:03:09:b9:37:bf:eb:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:9A:24:54:50:65:42:1F:88:6E:39:19:EF:FE:83:B4:65:5F:83
            X509v3 Authority Key Identifier:
                keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:ce:47:7b:7b:6e:87:73:ba:ab:a1:d1:5b:8a:38:2a:34:
         79:7a:83:79:64:93:b5:84:02:f8:a5:82:83:24:05:d5:72:80:
         be:1d:e0:ff:62:e2:ed:c8:cf:5b:a6:af:ba:8f:b4:5b:e4:af:
         19:04:90:eb:01:4c:ee:ae:08:2d:aa:d7:4b:ce:d1:2f:a0:9f:
         b2:c3:63:f6:2f:3d:3f:8a:8d:a3:da:d7:34:58:1d:91:bc:57:
         a3:7a:21:0c:fa:33:fd:08:29:e5:1d:39:85:8f:94:9b:3d:00:
         66:54:d7:bf:b1:59:83:8f:2c:d2:d2:bf:6f:f1:db:99:4c:33:
         c7:86:cd:c4:a2:92:2b:a0:53:d0:e2:03:e3:c0:c4:74:ad:f2:
         aa:d1:01:ba:0f:52:ec:cd:67:95:44:fa:61:3d:a2:c5:f1:ea:
         8a:48:5c:cd:a7:a0:5b:c3:e2:3c:53:83:8c:00:3d:43:e9:d6:
         26:4d:a5:e3:63:6c:f9:cc:f2:74:a8:37:69:67:39:37:cc:7d:
         37:76:42:34:1c:be:4c:d3:d8:64:4a:9b:30:fd:0f:8f:b6:02:
         c6:df:cb:99:71:36:e0:18:2a:47:dc:59:95:4a:af:07:d2:f9:
         93:70:a3:4c:74:85:65:32:21:11:c9:9e:32:f9:67:91:3c:3d:
         e8:57:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----