Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File:                     t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier:          QFGnpSHcSfssvZ4Tqk5YWOQypzrJkk3m72vSBJ4fFrw=
Subject key identifier:   C7:8D:3B:42:9C:BC:22:A2:15:C0:B5:8F:25:26:9B:82:92:12:E9:7C
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer:       /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial:       01962ECF9085CAE5693C57771CCC403903DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number:          0F3B
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
                          2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: uvvfShfjbjyTp2972iOhHmtT1wP0AecVkrv+S59ZLzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:85:ca:e5:69:3c:57:77:1c:cc:40:39:03:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=c78d3b429cbc22a215c0b58f25269b829212e97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:12:15:6b:b2:c9:e4:eb:34:3a:1c:6c:e2:
                    0b:9a:5e:cc:e2:c4:1f:bc:83:fd:36:1c:64:3e:aa:
                    f8:69:38:c5:84:f0:e1:9c:a8:bb:b4:ec:de:31:d7:
                    dc:ee:bc:5e:e0:2c:d2:b6:cf:19:89:43:5e:91:df:
                    b6:94:e8:79:76:57:3e:93:aa:ad:35:5c:a2:80:f0:
                    cc:4c:36:81:b2:34:46:7f:66:89:3f:7e:15:d3:27:
                    3d:be:f6:53:36:29:4c:a3:3f:85:ac:b2:13:b6:1b:
                    ac:cb:b9:a2:1c:31:94:5f:e9:97:3d:d1:99:05:f3:
                    95:fb:5c:2e:2b:2a:91:ea:c8:0e:71:a4:10:4a:2c:
                    d0:56:32:d3:99:19:98:54:49:1a:0b:41:e2:5b:63:
                    93:3f:fd:69:f2:e7:25:c6:bd:b0:b0:a1:9b:d2:bf:
                    ef:e8:bf:5f:58:43:ab:05:47:81:c2:b1:46:c4:9b:
                    e0:14:e6:d7:b8:e4:ec:63:77:63:43:b4:44:42:95:
                    2a:a0:d3:10:de:e5:93:5b:b4:d0:4c:c1:81:fd:d2:
                    34:9b:f5:30:f4:84:21:12:eb:1e:f1:b2:c3:96:4a:
                    ac:f5:5c:6c:3f:75:45:a4:61:8e:c9:58:c5:92:0f:
                    69:52:d1:0b:b5:c0:d8:85:d8:a7:8b:dd:73:ed:20:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8D:3B:42:9C:BC:22:A2:15:C0:B5:8F:25:26:9B:82:92:12:E9:7C
            X509v3 Authority Key Identifier:
                keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8b:ef:73:22:3c:ff:bf:54:6c:4c:83:76:d7:04:7b:83:f7:
         f1:26:4f:da:6b:4a:65:2b:e0:fe:38:9e:15:3f:12:5b:3b:8e:
         b7:7b:a3:27:86:0c:25:e8:51:a1:03:68:f1:eb:c5:58:d9:19:
         ca:ee:81:e4:f6:5d:bf:48:ec:81:77:af:25:a2:3c:74:82:ae:
         15:ae:40:ee:39:ee:ed:d2:13:80:71:6c:66:5b:c7:ad:2a:e0:
         5b:51:41:a5:d0:56:b4:0a:a3:21:ea:33:29:34:62:17:b1:28:
         20:f0:db:bb:cd:bf:88:8b:08:5e:be:cf:34:1d:9a:7f:a9:88:
         6b:6c:94:b7:9e:a4:55:49:12:00:9a:b5:9e:bb:99:bf:c0:c1:
         40:09:84:67:d1:de:29:50:76:e0:91:ce:4d:d2:cd:e3:50:51:
         3b:fc:6b:f4:af:49:fd:24:8d:cf:5c:a5:da:6d:4b:7a:c2:a2:
         aa:9c:6d:b4:ca:91:87:9c:fb:f8:75:0c:c2:cd:c6:9a:4d:e1:
         7b:0c:f3:b8:d1:35:71:af:2f:2d:68:cd:8e:8b:eb:c5:50:86:
         a7:1a:6f:6f:33:b5:07:54:9f:91:94:ed:ac:ce:aa:4f:a2:4f:
         b2:7a:7f:00:b3:f7:c4:24:0c:6a:1c:53:7e:b4:36:f2:a4:e0:
         fe:3a:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----