Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File:                     tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier:          HtxVkKoLFtT+DkZG9wFxqE1RCyUK0AVaQYy6Bm7hNBY=
Subject key identifier:   D5:EF:8F:14:A2:9E:5D:33:DD:71:2C:2D:B4:15:9B:6B:B6:D5:68:FF
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer:       /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial:       01962F74898E1AA3834AB5AAF30BAE349A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number:          107E
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
                          2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
                          3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
                          4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: LKHnOa9yaObFf1s5Dg85+hdrcZYhSj5t7y2rYJUI8LM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:89:8e:1a:a3:83:4a:b5:aa:f3:0b:ae:34:9a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=d5ef8f14a29e5d33dd712c2db4159b6bb6d568ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:3f:cd:3e:60:d4:b8:22:f2:ce:9f:22:df:
                    4f:5a:ab:dd:15:36:13:98:f5:c6:b8:fa:2b:89:b4:
                    9d:24:ee:8e:a3:42:a0:ef:b8:7f:5b:ba:86:cf:7e:
                    7b:7f:33:bc:16:e2:08:9c:65:9b:1b:50:a8:ea:1c:
                    b6:fc:1e:79:86:43:b5:3a:0b:69:78:9a:0e:5e:75:
                    49:c3:2d:f1:94:ef:f2:1e:42:ef:d1:f4:86:67:46:
                    0c:ec:fc:47:7c:69:0a:b1:73:fe:cd:87:33:44:09:
                    d9:26:31:31:88:85:5d:fd:05:7a:f1:3b:1c:d2:22:
                    46:c8:87:94:8f:3b:c9:28:20:6e:1a:8d:0f:83:64:
                    ed:f7:00:19:06:e9:e9:3c:10:dd:3f:37:ed:6e:52:
                    d1:a1:1b:11:91:20:7e:12:6d:29:8c:3f:0a:fd:79:
                    f5:a0:db:77:64:07:6d:ae:f4:03:1b:5a:46:15:fc:
                    38:23:74:d6:57:21:a9:05:02:2e:2d:69:90:59:1e:
                    10:62:f9:a5:15:42:c5:b7:2b:ef:22:35:eb:98:1e:
                    2f:ad:0f:6a:9f:5b:e9:8d:9f:44:91:a7:5d:f2:d4:
                    cd:01:53:db:0b:8d:72:2a:32:a3:03:f4:be:65:2a:
                    7f:ad:91:be:1d:af:10:ec:d0:35:79:c6:63:2d:ef:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:8F:14:A2:9E:5D:33:DD:71:2C:2D:B4:15:9B:6B:B6:D5:68:FF
            X509v3 Authority Key Identifier:
                keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c5:dd:e7:3a:ab:83:16:ad:da:3d:ce:25:c3:11:a4:f7:a2:
         7e:91:52:09:85:af:a3:47:9f:2f:3e:c1:fe:ff:86:79:70:01:
         c6:aa:e0:19:b7:df:4b:13:26:de:b4:19:46:03:ab:6e:79:2d:
         ba:87:2e:8c:e8:7c:59:6b:01:6d:0c:02:15:40:a2:1c:0f:19:
         9a:bd:21:46:8c:9e:df:75:11:7f:a8:b7:f5:68:1e:df:62:da:
         03:79:00:28:2b:cd:9f:df:d2:f0:0b:79:66:47:4f:e4:84:01:
         50:22:5c:d0:f8:90:dc:0c:9d:55:b1:af:79:af:5a:ac:e6:f2:
         a7:40:d8:20:1a:94:7e:11:b2:c4:11:7d:1a:87:67:ff:64:87:
         91:4e:40:2c:1e:c4:7e:b5:1c:7d:cf:5b:76:5f:c9:1c:8b:61:
         e0:f5:c6:34:bf:46:e8:f2:40:55:7e:0f:f5:b1:45:da:c0:30:
         78:67:4a:8b:4e:63:cc:b8:26:82:3b:4d:5b:7c:28:c6:8f:3e:
         07:d1:f9:02:64:6b:97:39:58:e9:85:9a:3f:0a:dc:77:74:f2:
         19:d1:31:06:52:56:77:19:24:67:24:5f:8b:27:a6:6e:bc:2c:
         2d:44:c2:81:99:aa:37:54:68:f4:32:c5:69:83:a8:e6:98:e4:
         da:52:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----