Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File:                     TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier:          sRCnr05o7MTtPXRZ6tG7iOu//zA/1fxzNcpn5GCTLCA=
Subject key identifier:   38:1A:8E:C2:07:9C:45:96:D9:8D:28:32:F6:F1:67:86:A8:15:7C:33
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer:       /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial:       01962FAB2966089223C0166D28023C7AB098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
                          2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
                          3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: rLF5aHip/Xb5lCcmA5ov9ECWIOwuqjMZnVW709qNkVQ=)
                          4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
                          5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:29:66:08:92:23:c0:16:6d:28:02:3c:7a:b0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=381a8ec2079c4596d98d2832f6f16786a8157c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:09:54:bd:bd:7e:7c:fe:cb:ce:13:2e:94:90:
                    fe:22:5e:21:83:c7:dd:9a:0d:2c:e7:b3:c2:6b:83:
                    e8:01:ba:b2:3a:f5:04:36:5a:f9:8a:fb:87:a7:98:
                    87:06:8b:d1:8e:9b:a7:07:6c:84:50:a0:02:b3:20:
                    0e:ff:c5:ab:4c:c0:69:c3:15:db:72:87:0b:71:86:
                    c4:ab:b3:81:ac:33:52:b7:ba:ca:2a:30:51:bb:10:
                    bf:33:59:a8:04:92:90:50:7a:ba:e3:0e:92:46:ed:
                    ca:fb:38:94:14:f3:b6:ae:d8:49:90:c1:96:ac:0f:
                    81:6a:bb:70:5c:30:5d:12:86:75:38:ad:d8:9a:f4:
                    7c:8c:bc:45:ba:30:14:79:eb:15:cb:8e:86:cd:a4:
                    e7:04:dc:80:58:5e:18:a6:b1:97:1c:84:14:ab:7b:
                    f4:e9:4a:af:f7:75:79:36:83:ff:4b:45:5a:b2:96:
                    90:d8:b2:3e:77:a3:dc:0d:30:28:31:45:a1:b9:dd:
                    4b:7d:d8:b0:1b:9d:a2:eb:71:b9:9f:19:29:56:cc:
                    85:0f:fa:0d:fc:79:86:6f:de:e1:b7:c4:e0:a3:cb:
                    91:57:ce:6f:f9:94:d2:58:09:8e:37:b2:af:eb:9f:
                    7a:e1:62:cc:cc:8e:1e:45:1e:e7:a4:9e:60:b7:8f:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:8E:C2:07:9C:45:96:D9:8D:28:32:F6:F1:67:86:A8:15:7C:33
            X509v3 Authority Key Identifier:
                keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:13:8d:2d:07:4d:86:97:9c:f9:de:93:ee:1a:30:46:4b:bf:
         a9:20:24:d7:e5:d2:28:68:d4:9d:10:f8:30:bd:18:88:55:c7:
         1c:42:5d:5d:6d:37:00:bb:b3:d3:10:3c:8c:6f:15:28:9e:35:
         d4:35:74:85:b9:2d:8d:31:2f:8e:a2:11:c9:bd:c2:0b:ce:13:
         ec:47:60:8c:8c:56:83:59:fa:ca:a8:7a:05:d6:89:59:d6:a5:
         6c:4f:25:00:63:45:1d:6d:eb:d7:c8:b0:fb:aa:d8:5c:b0:d4:
         69:32:a6:af:fc:5b:e9:61:2e:99:94:64:a2:70:e7:f5:4c:b5:
         19:31:40:c0:87:21:5d:9f:42:2d:ef:55:39:01:87:d9:d6:39:
         2f:a0:c2:f4:8b:d4:14:3d:d5:68:57:2f:9c:01:5d:4b:86:df:
         be:5a:09:9e:9a:6a:66:f8:1a:88:8d:3c:06:dd:00:3b:e1:a3:
         6b:3a:3a:dd:56:02:85:d2:77:d0:96:a0:0d:ed:ba:39:10:01:
         58:57:54:b8:69:27:1a:73:a5:54:8d:ce:b3:ef:ef:08:d3:2f:
         61:2c:10:d8:e5:9b:83:a2:76:16:6e:68:d2:a6:c7:78:f7:d0:
         01:80:9d:f8:87:2d:29:b3:59:a6:77:61:ba:15:7d:9f:bf:ed:
         95:77:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----