Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File:                     tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier:          7dTJkBGPAXLPD4cAmXTs93nvcJoriEP4Dz7NmfU6eM8=
Subject key identifier:   AD:53:61:89:65:64:E1:D4:32:C4:32:A0:B6:24:06:D6:CF:C2:49:2B
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer:       /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial:       01962F3DE34758B24D5AC7378D469A6C2334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: /VTxm+g0b4Lon2SUp67mO7vlItnUQzI0jE0Z8+UYmos=)
                          2: yv-lKnLJ7FH3ebM94G5o9mRIoI0.roa (hash: NaXQYxgPfjl+IpTUFv/7Iibu/QutlXyZxHu9Cx6Aoy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e3:47:58:b2:4d:5a:c7:37:8d:46:9a:6c:23:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=ad5361896564e1d432c432a0b62406d6cfc2492b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:cb:97:e8:f9:66:c3:77:82:af:7d:b3:3a:
                    3b:2c:28:4f:95:cb:15:e8:38:96:40:5a:0c:67:1d:
                    e4:be:2c:59:9e:fe:7a:43:34:8e:7d:db:eb:43:5b:
                    34:5c:8c:ba:f6:dc:96:24:8e:df:85:fe:4b:6f:ca:
                    82:21:4c:bc:4f:96:5b:28:17:c8:14:14:7a:19:a1:
                    64:63:8b:6f:db:91:a9:02:82:72:a7:49:d8:4f:a4:
                    56:cb:3c:ce:fd:94:51:ce:db:1c:ad:8d:ea:cb:b1:
                    ee:ee:b2:a2:88:23:c9:40:88:25:5b:a7:bb:02:86:
                    66:b6:19:1c:58:d4:4f:27:85:3c:3c:c4:53:3a:74:
                    e1:45:41:f5:af:83:eb:01:0e:ff:55:18:01:48:f7:
                    0c:0c:0d:53:21:ab:09:78:5d:f6:66:42:05:cd:51:
                    dc:00:db:41:9e:8b:2f:80:9a:4e:fd:ad:a9:30:72:
                    f4:14:3c:1e:a1:11:0d:b8:48:7e:e4:bd:d1:40:0a:
                    ec:3b:01:48:86:77:7d:f5:6e:0e:64:76:f9:f1:1a:
                    42:86:9f:8b:e7:68:4e:ee:9a:8e:2c:56:fe:73:d1:
                    4e:8d:fe:dd:8c:bf:40:b0:fb:21:66:41:fa:ad:65:
                    22:a2:9a:81:36:4e:47:06:85:e7:ec:1e:84:39:4d:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:53:61:89:65:64:E1:D4:32:C4:32:A0:B6:24:06:D6:CF:C2:49:2B
            X509v3 Authority Key Identifier:
                keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:cf:e9:43:9c:be:4a:ae:9e:ea:63:cb:f4:fe:52:f6:41:
         1a:c9:ec:47:41:71:9f:df:45:20:df:e6:9f:e2:13:42:f8:7e:
         66:e2:11:60:c5:2f:de:9a:6e:73:1a:ee:83:18:33:24:ec:17:
         61:4a:05:b7:2e:d1:a8:9c:60:0c:63:3e:99:e4:4d:d6:31:31:
         84:80:f1:09:d8:d3:34:29:09:f0:e3:bb:27:7b:88:21:f3:53:
         5b:43:8a:47:0b:f2:0d:f3:68:fa:37:44:a8:f3:2e:46:3f:09:
         ab:14:d5:8e:0b:d9:63:18:b9:37:9a:51:71:ed:7b:94:20:3c:
         4a:4a:8a:37:00:de:fd:fb:1e:b0:65:35:25:2d:9e:ff:4a:8e:
         28:b2:47:31:ba:11:38:25:d8:49:b1:fe:f1:a3:74:86:11:b9:
         c4:af:8b:5b:21:a3:9d:3a:18:10:05:ef:af:b3:f7:24:bd:ec:
         50:6d:f3:4b:4f:d6:18:cb:51:11:21:91:3d:91:9e:dc:2e:6a:
         d4:6d:e3:86:3c:36:a7:f8:05:f1:a2:19:d2:95:d0:1b:fd:c1:
         af:70:88:94:eb:39:0a:c0:6a:f3:40:cb:3a:7e:62:03:c6:e7:
         e1:95:ab:f2:f0:e5:dd:89:a6:a9:85:d8:c8:46:a2:94:95:a7:
         cc:97:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----