Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File:                     tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier:          s4hCRSKVxeHeymjkPxlXppe9NqUvnDSs5OoIxFFgLZg=
Subject key identifier:   41:CD:D5:0E:AD:BC:03:9B:F0:FB:DC:67:95:17:95:B9:DF:AB:25:4F
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer:       /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial:       01962F06AAA292B45D4B5B339544CDFBF53D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number:          0B1B
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: 6mSAzptlMtavroiRBEbzErufO08.roa (hash: lJ5Bp/WretmXqwZLM24/DP1Oy5iyysz4o7F+olg5yZQ=)
                          2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: 7hca9bi2+Inywuh2NCbl1aaSWTlFCquasTQxA0VRlX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:aa:a2:92:b4:5d:4b:5b:33:95:44:cd:fb:f5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=41cdd50eadbc039bf0fbdc67951795b9dfab254f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:cc:d0:5c:20:df:71:16:30:59:5e:36:0a:
                    43:a5:0e:92:d2:99:d2:82:a8:79:b9:e2:5d:8e:c7:
                    db:1a:85:50:de:8e:96:12:8e:a5:b7:2a:65:77:36:
                    11:8c:55:3b:d8:28:ec:74:08:0f:91:b9:e3:93:c6:
                    76:53:10:7a:38:b9:38:9b:a1:b5:ff:c6:7e:c8:c5:
                    d4:47:81:b8:62:24:a6:aa:c1:29:b6:f3:62:07:a7:
                    70:4c:bb:19:ca:48:e3:4c:9b:10:fa:d5:ab:c5:9e:
                    12:61:35:fd:5b:db:72:0e:13:0b:e8:cb:04:f7:91:
                    fa:b2:f5:fe:54:9d:07:6d:44:b9:5c:92:43:97:c6:
                    8b:76:4c:9c:a2:be:67:81:53:c6:59:33:7b:b5:6b:
                    74:69:54:69:58:17:0e:21:77:8e:db:92:15:76:20:
                    06:00:31:b4:4e:ab:63:f2:25:80:4b:ee:f2:7e:40:
                    7e:71:d8:45:a1:fe:92:c4:8f:b2:aa:78:05:73:48:
                    35:f2:30:91:80:97:de:a8:92:27:0d:bc:31:9d:7c:
                    ab:c9:9d:30:dc:26:52:c8:26:f3:61:0f:9b:55:1b:
                    80:50:6d:6a:30:e0:50:ae:a6:b9:e6:0f:9d:fa:a8:
                    ba:3b:69:92:5e:ea:ae:3f:63:4f:c7:bc:5a:2a:71:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CD:D5:0E:AD:BC:03:9B:F0:FB:DC:67:95:17:95:B9:DF:AB:25:4F
            X509v3 Authority Key Identifier:
                keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:aa:98:7f:52:4e:07:da:68:9a:c8:3e:33:84:78:c6:2d:64:
         13:f3:00:f5:3f:65:78:79:c5:ca:85:c8:32:bb:be:2a:01:4a:
         44:64:fd:47:54:62:b5:c6:0e:50:6a:00:e8:43:c5:53:f5:93:
         dc:38:47:97:2a:30:59:f2:c6:d7:08:4b:cc:c6:bc:17:19:f9:
         4c:4a:72:a9:d3:03:1c:9b:f3:33:f2:7e:bd:7c:25:69:4a:2e:
         0b:48:8f:06:55:89:cc:1e:c7:d2:aa:cb:d3:10:ec:b2:a5:c2:
         56:21:f5:3f:2e:34:13:d5:70:d9:4d:0d:25:dd:12:5f:bf:00:
         b0:8d:4a:16:ee:c1:eb:59:7d:1c:8a:64:69:c3:27:32:83:9d:
         3c:35:a3:2f:2c:75:7b:ae:66:4f:29:49:ff:64:93:93:3e:54:
         11:92:45:0c:7c:46:4d:ab:75:4b:99:ea:50:a9:16:f1:d7:91:
         25:74:8c:fe:f1:ed:81:4e:b3:9f:2f:b2:e3:63:9e:0b:9f:cf:
         25:35:f8:3b:8c:8a:f8:2e:6f:d4:7d:3f:20:98:e6:55:a6:b0:
         50:23:d7:47:47:55:c6:e4:43:aa:3c:a3:6f:90:f0:56:93:e6:
         0f:be:46:9a:20:16:62:00:b1:c4:54:ef:9d:ef:af:b3:1f:0f:
         5a:d1:50:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----