Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File:                     1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier:          8Mo0hwsnu/v/OJ0X5bF2EpZE+z1KgGFu4ikZOEoPSvg=
Subject key identifier:   B8:AA:74:25:44:FF:47:2A:B1:41:D6:B3:F3:D4:9F:5A:83:71:A5:BD
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer:       /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial:       01962F7431F0FA28E70EDA17A3477EA63E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number:          0CCC
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: yhYbzYsTZOm3OJhKrfk97u/3mYAhpLOC1zjhsDfcEtY=)
                          2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
                          3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:31:f0:fa:28:e7:0e:da:17:a3:47:7e:a6:3e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=b8aa742544ff472ab141d6b3f3d49f5a8371a5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:b9:7f:01:5d:01:9c:17:52:12:a6:91:8c:
                    9f:45:f6:b8:4c:b8:12:8c:63:d5:c9:c8:23:2f:c8:
                    35:ef:8c:3b:09:e3:51:4e:95:ea:6c:84:7a:37:6c:
                    8f:c9:70:4e:d3:6b:52:e2:7c:8b:28:d2:c2:a4:67:
                    76:07:a2:b4:2d:47:1e:53:d5:f6:a5:e4:fd:d5:d9:
                    b8:7d:34:80:a2:fe:46:6a:d3:84:b4:db:46:f5:fa:
                    24:1f:69:f7:91:92:d2:92:c5:07:c5:7a:ac:46:f2:
                    a8:c6:e9:17:e6:16:fa:41:1d:20:8a:06:fd:57:88:
                    ee:92:38:09:55:ca:9a:2b:f1:4a:7b:b2:c7:b7:47:
                    80:fc:b7:63:89:75:f1:2a:2d:93:57:84:27:6e:a1:
                    5e:13:fb:2b:fb:59:ed:3c:29:95:09:44:7b:0a:0a:
                    4a:55:b6:f4:10:cf:eb:3a:fe:d1:b0:ad:ce:1b:10:
                    c1:d4:d7:aa:fd:2b:16:b7:81:ea:e2:b9:69:57:b4:
                    1c:0a:07:9f:c0:10:d2:22:fe:fb:19:51:a8:46:f8:
                    e7:8c:1d:4b:35:f9:ca:d3:7a:c2:7c:a6:c1:55:e7:
                    ab:56:c3:34:11:17:71:0d:5d:af:64:10:6a:df:b5:
                    36:94:7a:a1:39:1e:cb:ff:14:71:24:db:19:90:18:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AA:74:25:44:FF:47:2A:B1:41:D6:B3:F3:D4:9F:5A:83:71:A5:BD
            X509v3 Authority Key Identifier:
                keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:ea:b0:68:57:72:8d:a8:f7:0d:9f:43:43:d6:f9:16:af:
         a4:3f:52:5a:a9:7c:24:c6:c0:ea:49:ba:83:11:b2:9b:88:66:
         79:d0:aa:dd:26:b7:13:2b:40:33:3a:79:b0:96:c6:80:3c:32:
         36:e7:cd:56:f6:89:a9:77:60:80:ea:9b:14:99:a4:1f:ef:d1:
         12:e2:56:65:ec:7f:52:9d:4b:74:d6:3d:19:f8:18:b5:c5:60:
         95:27:a1:35:4b:ef:67:cf:fc:22:b4:80:b0:6c:e5:3d:10:d2:
         e1:71:7b:fe:1c:c1:31:e5:8f:61:ea:cb:56:ef:94:45:e3:24:
         7c:f4:17:1a:a6:86:6a:f1:4c:0e:f1:eb:8d:5f:03:00:08:f6:
         c3:db:32:9b:c3:d5:a9:be:c2:64:a5:0d:91:a2:c4:b9:47:b2:
         9d:3f:16:3b:72:4c:6a:23:40:36:f5:f3:5a:86:2f:4e:82:c4:
         5a:06:84:d4:c8:b7:89:74:51:b9:dd:47:bb:b8:a7:d3:64:45:
         fa:bb:bd:43:29:e8:a5:f8:22:69:70:4b:62:e1:08:ea:9c:96:
         dd:c7:ab:9d:e0:cf:cd:2c:bc:eb:42:1a:7a:67:04:fb:b1:b0:
         7e:61:a8:d3:58:33:3e:9a:d2:81:fe:ed:a4:15:62:68:fb:b1:
         74:5f:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----