Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File:                     tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier:          Oqo4v8SSRy4leK2VxlzXH1Hgpv7NKETWhk+ozD1AKmU=
Subject key identifier:   D5:15:CF:E1:48:07:AF:A1:9C:AD:A7:57:EA:32:49:38:62:09:24:DA
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer:       /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial:       01962F3D6F5DDA3F758D44CE361E420C45C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: dXne2K4GAtM9Y/6sjDFr8s09HMNggHxMd8aYHzMJX8g=)
                          2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6f:5d:da:3f:75:8d:44:ce:36:1e:42:0c:45:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=d515cfe14807afa19cada757ea324938620924da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8e:1b:8c:5f:cb:83:04:97:04:48:cb:af:94:
                    ab:71:94:e6:13:3a:2f:58:9e:9c:6c:34:20:f8:40:
                    5d:f6:d1:ac:54:2b:c7:71:46:29:d0:69:2c:6f:a3:
                    df:25:44:b4:1a:29:12:fd:4a:3a:cf:36:2b:60:78:
                    5d:da:a7:52:48:2a:de:41:cd:f2:f1:e6:5a:ff:19:
                    15:94:ca:65:49:16:eb:f0:cf:f1:5e:ac:92:b9:b5:
                    5d:bd:42:6c:e1:14:43:12:19:ff:0d:7d:a9:80:be:
                    77:21:12:cc:6b:15:3e:04:4b:a8:55:16:47:ea:fc:
                    d5:fb:1b:c4:fa:cb:06:46:aa:13:be:76:07:41:24:
                    f9:71:cd:99:13:8a:bb:dc:b8:e1:5b:54:b4:23:4a:
                    cd:da:51:f9:1f:df:f3:86:52:f9:6f:dc:0f:72:a6:
                    4a:38:a6:59:bc:7d:7c:39:64:90:e9:48:2c:de:78:
                    3a:b9:1d:0c:4e:db:8a:18:97:82:29:70:9b:ea:2e:
                    c6:65:0a:45:94:b2:8f:66:84:73:ad:e2:e8:6f:cb:
                    9f:e1:38:81:68:ff:db:7a:04:5c:63:2f:c2:db:f3:
                    7b:f0:cb:ca:b3:ad:ba:46:44:ed:3f:18:cf:a1:d8:
                    4c:61:05:e3:0e:55:17:96:fc:5b:5b:c3:8f:b2:31:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:CF:E1:48:07:AF:A1:9C:AD:A7:57:EA:32:49:38:62:09:24:DA
            X509v3 Authority Key Identifier:
                keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a8:45:a8:ca:20:54:fa:9f:69:b0:01:c5:42:2e:41:dd:8f:
         6d:f7:21:eb:5b:b9:f7:03:30:9e:bc:4b:2a:0a:d8:b6:9e:79:
         ee:0e:44:8f:2e:ff:e9:e0:23:bb:8d:db:85:83:1b:2b:b1:d5:
         85:15:08:38:28:97:02:6b:cc:94:17:35:b7:9e:28:dd:85:cb:
         94:8d:81:49:f6:18:ab:d8:91:78:40:b2:cd:7f:f0:9a:5d:c3:
         4e:1b:f5:26:ac:7f:9b:38:9c:0d:e2:06:1a:87:3c:a5:7a:a0:
         2e:95:d4:e3:d3:b1:b8:90:bd:25:b1:fa:6d:f8:53:59:ae:45:
         d9:e2:5c:e8:3c:b7:07:6e:ee:d1:68:c0:c2:b1:90:aa:d9:3b:
         d8:31:c9:11:5f:d0:dc:c2:3d:35:21:03:96:eb:d5:82:fa:21:
         d6:42:c6:b3:b6:e7:17:83:6e:59:ba:ab:ba:a3:64:13:7c:5f:
         0e:b8:a0:15:70:07:d8:52:d9:83:47:64:85:46:74:3b:0d:d9:
         94:66:2e:ae:48:28:57:43:0c:ba:0d:72:28:40:6f:03:4d:d3:
         00:cf:da:bf:53:ad:09:05:dd:9f:48:b4:e8:76:37:4e:a4:44:
         db:e8:b0:fa:0e:ef:a5:b2:e8:a8:b8:96:ca:ae:56:d1:0f:17:
         c0:39:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----