Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
File:                     tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json)
Hash identifier:          5MjNXLGfLbCZKDKc0rj2R3yCnI3yjaIXje3Cdg+bm70=
Subject key identifier:   6C:05:F2:12:1C:BC:F8:E0:17:15:0A:11:EF:C6:EA:CD:3B:CC:D8:8E
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Certificate issuer:       /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial:       01962F06AD207C24DA53DFF2776D677FE765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
Manifest number:          0C11
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=)
                          2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=)
                          3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=)
                          4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: EU7yrsjFkjYn/QezWoIZ5jjrAXYg/GinwmjIf4oBm/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ad:20:7c:24:da:53:df:f2:77:6d:67:7f:e7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=6c05f2121cbcf8e017150a11efc6eacd3bccd88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:7a:88:dd:64:03:6d:ef:59:b9:7d:ea:46:
                    97:e3:5b:78:9b:fd:65:ff:88:75:d5:72:5a:32:68:
                    00:db:e3:57:69:da:0c:a7:9a:1d:90:56:c9:91:e5:
                    ee:c4:89:22:0f:76:0e:45:00:59:99:a1:0c:a2:17:
                    72:dd:cd:82:fc:e1:cd:f4:3b:3d:58:c4:0d:19:b3:
                    81:d0:61:e5:aa:57:8f:ec:d1:4e:ad:3b:39:74:1a:
                    42:3e:0b:fb:6f:a6:a3:dd:87:69:88:0a:1d:67:4e:
                    4a:6f:75:db:82:f2:c0:ba:6f:d3:ff:68:67:e1:45:
                    4e:b6:0c:e2:0b:6a:3d:a5:e2:b5:cc:b7:29:e9:5f:
                    b2:44:c9:54:97:d7:d3:e4:d2:17:77:4f:ef:dd:71:
                    d5:49:c4:26:e7:84:ad:5b:ad:7d:aa:de:2a:64:9b:
                    4a:ed:c6:34:e2:49:e6:2e:f9:46:0d:90:ee:fa:a6:
                    84:7e:40:24:6e:bf:b9:cc:48:55:e8:4f:d9:ae:73:
                    35:24:72:7d:ba:6e:00:0b:10:2f:b7:bc:55:fb:a2:
                    23:71:85:55:2f:31:35:c1:fb:94:2e:a4:c8:e6:48:
                    ca:07:64:39:63:2e:c8:8f:22:59:0b:51:90:7e:4a:
                    90:24:b7:b8:1e:7f:0c:94:20:7c:2d:38:5b:85:8c:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:F2:12:1C:BC:F8:E0:17:15:0A:11:EF:C6:EA:CD:3B:CC:D8:8E
            X509v3 Authority Key Identifier:
                keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:69:6a:1e:2b:f8:a4:57:ec:89:5b:a3:7a:e1:19:15:a1:d2:
         e1:cf:f2:9a:87:0c:c0:a0:2f:9e:cf:5b:32:db:cc:a1:a2:37:
         f0:cb:22:36:d7:ca:35:91:20:d0:f0:03:38:19:5f:94:83:e7:
         a9:fe:56:27:56:35:33:fa:bf:1f:15:59:1d:49:d9:6f:69:76:
         d9:cb:eb:93:a0:df:1f:3b:52:a5:cc:da:43:69:ca:d2:34:2e:
         a3:11:eb:e5:8b:37:cc:a2:32:c9:e1:b5:c6:aa:f4:61:df:45:
         1b:4c:89:1a:b5:c5:a7:f9:bc:d8:a1:98:b1:26:06:f1:00:21:
         8e:8f:52:96:e1:cb:3a:9a:3e:00:0f:17:a6:b9:49:11:36:29:
         41:c1:2a:76:4c:d8:20:b8:f6:6e:2d:66:fa:83:79:a0:51:21:
         ce:a2:57:a3:39:d9:9a:f1:85:45:2d:6b:37:10:46:e7:06:44:
         bc:56:1c:2d:21:ea:ed:75:e3:c9:ee:a1:8b:79:ae:90:65:32:
         f0:57:ef:b8:2f:8a:3d:79:b3:85:97:d3:35:f1:43:79:42:21:
         53:49:76:c9:41:42:cd:d0:a5:48:41:44:13:a9:74:86:4b:16:
         18:e9:60:38:cd:98:80:61:39:f1:de:10:d4:7d:31:83:75:ec:
         d7:69:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----