Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File:                     CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier:          eGMnicOAi3t86jkQjvrC1rQpsbURzLoj3DKpobzXCLQ=
Subject key identifier:   D7:75:24:A6:99:4A:61:94:E9:4F:79:37:90:FF:12:C7:53:63:7F:F8
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer:       /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial:       01962E98C8EEA8BEA9C68B40F5616A93D6B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number:          1223
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: nphlWsdeGLHHkSvYd5w5V/ahCk77OlPhzEBU0cZcuN4=)
                          2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
                          3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c8:ee:a8:be:a9:c6:8b:40:f5:61:6a:93:d6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=d77524a6994a6194e94f793790ff12c753637ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:10:d3:d8:fa:e8:f7:25:69:12:9f:10:02:96:
                    fa:a9:38:11:f7:4c:6c:13:d5:69:c5:a2:d3:b1:f2:
                    54:94:22:5e:7a:56:18:12:80:22:32:61:85:9b:b2:
                    33:54:75:04:c0:af:72:fd:f5:61:63:3d:0c:42:e9:
                    68:77:0f:45:ea:2f:95:20:11:68:cc:eb:15:b9:b3:
                    ce:5b:76:dd:11:5b:76:0e:7b:07:a1:1c:22:23:ab:
                    8f:e7:fa:85:45:3c:dd:a8:b1:0e:cc:4e:f3:39:7e:
                    58:03:30:0b:80:fc:7c:d2:b9:59:b5:6d:75:f5:5a:
                    91:8c:76:c7:03:eb:f7:08:61:95:ba:31:a7:b6:4e:
                    0e:d4:cc:0e:84:9b:92:33:eb:06:d6:ff:4c:cb:5d:
                    98:f8:a5:0d:09:ae:e1:28:19:1f:70:59:ca:4c:90:
                    fb:18:54:a4:a4:bc:ee:0e:3e:00:d3:63:85:fe:8c:
                    dd:71:e8:bc:0a:f1:22:06:47:fa:58:22:98:e0:c6:
                    59:1a:0e:94:18:19:05:19:d8:d4:91:02:30:4b:1b:
                    ee:97:9b:df:2a:0e:77:64:f4:db:08:31:87:03:1b:
                    10:a0:14:bd:90:06:b5:77:13:60:7b:8c:68:53:64:
                    4d:a9:5b:56:ae:fe:2a:85:a5:88:2c:12:5d:a0:c2:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:75:24:A6:99:4A:61:94:E9:4F:79:37:90:FF:12:C7:53:63:7F:F8
            X509v3 Authority Key Identifier:
                keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f7:c6:49:7e:84:dd:31:8e:d8:50:4f:02:02:56:a5:f4:1d:
         91:c3:23:5d:ef:1a:8a:7c:ab:e1:9a:c9:c7:00:9c:31:ca:c4:
         2d:c3:75:50:05:ce:0f:4c:10:74:50:5a:77:d9:4d:e6:ed:67:
         f6:d8:77:3f:88:c7:38:52:26:ad:1e:50:f0:f8:ea:90:ff:cf:
         dc:12:36:3d:44:e3:ac:a0:18:ab:eb:e6:1f:e1:b8:12:1c:8c:
         d0:6f:d2:fa:45:9f:25:4e:77:7d:f8:37:5a:30:13:e8:12:57:
         21:2c:a5:68:bc:9c:46:0a:6e:2b:f7:d2:68:47:87:03:04:98:
         95:ea:b5:66:59:db:ec:e4:ff:94:ff:42:0b:07:a0:a9:a6:e1:
         59:9f:a6:31:d1:e1:35:85:2a:15:36:e4:9a:61:a6:b5:1c:a1:
         57:4d:6d:46:98:ab:88:b8:e3:aa:d3:6f:af:17:8f:d9:41:35:
         32:d6:35:e3:51:3d:1e:78:0b:40:b5:66:b6:3c:63:2b:93:cb:
         cf:ac:88:a4:dd:1a:82:2f:80:23:63:0d:7b:59:6e:95:88:98:
         35:05:c6:9b:70:4f:2c:50:b3:86:bc:87:f1:97:06:75:6a:d3:
         c2:d7:9e:ac:68:ae:e9:28:3a:48:69:6a:85:1e:7c:e4:52:b9:
         92:e2:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----