Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File:                     tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier:          g2C3CylrVAIqJDerCQ8bj1U42dyyKD/XBDByk0LQdkM=
Subject key identifier:   23:25:C7:A5:2D:80:FA:7D:4E:83:61:C8:EE:F4:C0:88:95:A1:23:A5
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer:       /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial:       01962F3D996C899BE54DE62AC46273CD05DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
                          2: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: SoI7x2F6kH+plapJHac4zdFtYIzJuaiOwmGEYOY0CPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:99:6c:89:9b:e5:4d:e6:2a:c4:62:73:cd:05:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=2325c7a52d80fa7d4e8361c8eef4c08895a123a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:92:33:ea:d4:b0:f4:8d:55:d3:e9:af:cf:
                    cf:19:50:a7:ad:76:df:1e:e0:13:73:a9:11:7f:7d:
                    61:51:a9:98:5d:65:a8:33:83:8d:50:40:4c:08:bb:
                    f1:e2:d6:15:25:bd:d5:4b:bc:35:af:4e:82:21:e2:
                    5a:1b:df:88:32:9a:b4:e8:d4:1d:fc:2e:d3:b7:68:
                    e6:cc:a9:ad:85:b9:17:5f:c2:c6:74:3e:da:fc:24:
                    17:bb:5c:41:17:fc:8b:74:e5:eb:b3:ad:80:2f:cd:
                    81:a6:5d:89:c1:40:2c:3d:5f:91:02:f3:4a:aa:37:
                    a8:60:73:88:ad:b4:21:0c:48:81:11:e1:4b:e9:05:
                    9e:a9:1d:b3:f8:4e:e6:15:1d:62:8f:ce:9f:9a:82:
                    f7:27:06:61:11:58:c4:67:d9:33:31:dc:d4:41:00:
                    09:f3:d8:a3:1e:51:6a:f5:fd:96:6d:0a:e0:f4:dc:
                    00:3f:db:f3:c2:5b:12:0d:59:c5:4d:2d:34:bc:b2:
                    9b:72:06:f2:bd:83:84:e5:5b:bf:9e:90:52:95:f5:
                    62:39:cd:e6:8d:6f:e0:90:b4:e4:f9:83:8c:00:16:
                    04:f9:bf:6f:68:60:1a:82:fb:00:ec:59:61:55:e5:
                    98:4d:6f:b8:38:1c:8d:aa:27:2a:69:75:6f:7e:38:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:25:C7:A5:2D:80:FA:7D:4E:83:61:C8:EE:F4:C0:88:95:A1:23:A5
            X509v3 Authority Key Identifier:
                keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f3:37:bc:b2:6d:e1:86:9e:6e:b8:13:00:83:7a:e8:01:ab:
         77:d5:76:63:2d:92:38:f1:54:8f:ef:68:3a:23:05:59:8d:2d:
         3e:9e:1d:f2:e4:37:a5:c0:e7:d6:e6:18:8a:07:e4:bd:12:be:
         5f:48:06:f7:e4:f8:6b:71:21:f1:e9:72:81:4a:2f:70:81:00:
         53:7a:55:54:6d:2d:4a:64:77:23:82:e0:51:05:89:fb:f8:d6:
         a0:b6:a3:82:00:12:70:d6:4d:56:59:8f:e5:56:4e:43:a3:c2:
         de:53:c1:c5:3a:ea:ef:5a:06:50:e1:ae:39:b4:6b:d6:65:4a:
         6b:34:c8:c9:f0:30:ea:f4:d6:24:e0:94:70:8d:c7:3b:a1:16:
         24:ba:67:dd:6a:be:09:8c:e9:9f:2e:7c:98:6f:ed:c6:29:72:
         aa:4f:33:5b:5d:f0:f8:25:15:43:bd:5f:39:c3:f6:ea:82:24:
         87:03:98:f6:05:1a:35:69:09:12:40:1e:cd:d1:1b:55:bb:c9:
         2a:41:d4:4a:a1:c0:06:bb:12:c7:6a:d9:54:27:70:5c:1b:64:
         52:12:36:9d:5c:ce:61:b6:a0:4f:d6:32:eb:02:ce:11:70:c0:
         73:06:aa:91:6f:00:81:d0:4d:fe:24:0c:57:e8:39:9c:ca:d2:
         d9:7c:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----