Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File:                     trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier:          5FSlsFn7mGvyGgIG4/u9D5iZmBOsxKzJUC+v6A0dito=
Subject key identifier:   6E:DC:95:DD:DD:8F:7D:47:E4:30:1D:58:2C:B1:3C:51:3E:AC:0D:5F
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer:       /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial:       01962FAB5B62174CB1DF1D48850BECAE646E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=)
                          2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: qcgfbbqPTHXgjYKyTv1ddXqgjxVjeZjvoVFpRF1AFmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5b:62:17:4c:b1:df:1d:48:85:0b:ec:ae:64:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=6edc95dddd8f7d47e4301d582cb13c513eac0d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:42:b2:67:44:59:c4:8b:cd:27:25:d2:fa:
                    69:fd:12:d5:0f:90:83:0f:4f:c1:b6:ff:b1:1d:34:
                    b6:12:ee:f8:4c:47:6f:a3:aa:6e:41:d6:eb:42:af:
                    7c:1c:5d:9b:a2:02:e2:c2:77:96:b5:01:e7:f8:f0:
                    46:2a:f7:73:93:a5:e9:29:1a:f8:be:22:e9:ca:a7:
                    a5:27:2c:ff:b9:ee:d2:6a:94:8e:58:e6:26:8c:fd:
                    aa:64:ca:05:d5:9b:24:6a:1c:1d:1f:f8:23:3a:eb:
                    67:a1:57:eb:0f:26:8e:fa:dc:36:07:90:8d:95:9e:
                    19:98:78:8c:ed:db:3a:44:93:1a:4b:fe:b8:d9:ae:
                    10:0c:58:13:13:91:4c:3a:94:b2:79:87:4c:ba:0e:
                    d6:9f:d4:15:90:79:29:d4:e3:4a:e0:da:4e:b6:82:
                    7e:ed:25:ed:ba:dc:aa:56:b2:a3:9e:55:2e:62:7a:
                    25:73:f4:e2:bb:0c:32:7d:51:25:42:db:f3:77:07:
                    3b:4b:b5:0f:6a:af:9d:f6:32:99:c8:05:d8:48:a4:
                    7d:87:6d:b1:3d:5b:56:3b:8d:ac:8b:8e:7c:63:fd:
                    64:79:61:6f:98:75:03:d7:8e:62:a2:58:4b:c1:79:
                    e4:16:d0:6f:5e:ef:a3:8c:dd:f6:fd:46:08:69:3b:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DC:95:DD:DD:8F:7D:47:E4:30:1D:58:2C:B1:3C:51:3E:AC:0D:5F
            X509v3 Authority Key Identifier:
                keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:01:56:5d:c4:ab:0d:83:41:46:73:47:1f:13:a3:b8:1f:
         3b:e7:10:d8:10:b0:d8:44:6a:f2:3a:29:2a:74:59:6c:2e:b3:
         be:90:63:12:bb:6c:6f:7d:99:ba:73:35:6c:40:ad:a8:74:09:
         f2:e5:a6:b4:7a:1f:e3:ed:9e:fb:f8:05:51:36:dd:ae:fa:1e:
         45:59:38:15:c2:e6:c1:fe:1f:5c:72:9c:b1:ad:9d:ef:1b:55:
         8e:e2:ee:5e:81:98:89:f4:78:0f:9c:5b:ee:98:91:d9:71:25:
         2f:14:c6:35:3b:8d:6c:76:60:5e:a5:2c:90:e5:ca:fe:a0:08:
         81:f1:3e:a1:cd:30:b6:88:f5:43:1b:8a:f8:29:cd:d9:19:48:
         9f:68:5b:d5:30:df:1d:54:af:c8:06:29:1e:81:18:24:5e:0d:
         fa:d2:5f:f6:c5:f5:47:da:4c:d4:3e:fb:2a:36:b1:34:c7:d4:
         57:50:b2:1c:c4:f8:1e:39:b0:75:5a:99:5c:f6:cd:27:9f:0f:
         08:54:d1:6a:05:a8:57:30:9a:bc:8d:c8:f9:f5:d3:8c:34:08:
         8c:b0:e3:8f:6b:ed:00:69:23:c4:17:c7:07:d8:8a:dd:e9:a4:
         9c:2e:83:e6:e2:25:de:1a:2f:0d:8c:67:7c:bd:ec:38:5a:2c:
         38:88:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----