Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File:                     tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier:          urpEi+CbcA7e6Mci7YterB396N8z+pcPEofUBw/amEw=
Subject key identifier:   C6:1D:33:3A:14:5D:62:53:6D:12:58:7A:E5:FD:A4:ED:7C:2B:84:F2
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer:       /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial:       01962ECF9F514964F8ED24118C38C8010E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number:          0C67
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: 2o-thtsUmdvMYHtv9qjNUTl4ar8.roa (hash: lFf88qPAFyfJ0i5OxU8GOvf0pF7V0Wi7poD5MDkBh2U=)
                          2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: yrqTyXzhwmsFRMyfn7wWYgYGicTnBFgF6+r+uyeElmU=)
                          3: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9f:51:49:64:f8:ed:24:11:8c:38:c8:01:0e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=c61d333a145d62536d12587ae5fda4ed7c2b84f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:13:be:74:fe:41:7e:e7:dc:ab:b4:a5:f6:
                    76:37:da:83:f5:6b:51:65:b4:dd:01:0a:08:c4:b8:
                    4f:4d:d1:99:1c:ab:6b:e5:a5:1d:8e:d1:5d:7a:ce:
                    37:d7:53:cf:af:b3:aa:af:55:5e:51:c8:ac:b8:cd:
                    61:79:b9:f9:4c:91:e1:85:5c:a0:bd:ee:c0:53:d0:
                    2b:2b:f1:53:ea:bf:4e:63:01:d0:51:59:76:42:ef:
                    16:85:33:d1:ed:93:c7:bd:4d:6d:70:56:ef:1f:34:
                    88:f6:15:3f:51:3b:5a:de:52:93:d7:34:11:43:d5:
                    ff:f4:ea:d6:c3:7f:30:81:1b:f7:ea:af:74:72:e6:
                    6f:7e:b3:7d:5c:3d:4b:29:ed:8b:1b:fb:b2:0a:15:
                    c4:1f:6d:f9:3d:ce:ab:4a:30:4f:74:87:d2:62:4f:
                    46:36:3e:b9:bc:cb:a4:b5:b7:d9:7a:ce:48:61:1f:
                    08:4c:32:e9:b6:c7:bf:31:0a:c5:06:36:fb:fe:2d:
                    ee:bc:f4:e1:c6:9d:2a:62:94:32:4a:1c:22:4f:6b:
                    00:bf:c4:a9:a1:26:76:c0:00:1c:f1:9e:a0:f1:d3:
                    5d:6d:99:e3:ea:e6:d3:ec:c8:54:d3:a7:f4:93:2e:
                    a3:5e:c0:9b:fd:23:2b:0e:d7:1a:f7:27:87:95:12:
                    61:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1D:33:3A:14:5D:62:53:6D:12:58:7A:E5:FD:A4:ED:7C:2B:84:F2
            X509v3 Authority Key Identifier:
                keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:99:d5:ba:dd:47:18:4a:56:18:5a:a5:2b:1f:89:88:8f:
         c0:28:b2:ee:e1:29:95:47:17:a4:c0:56:e0:21:00:9b:3f:ef:
         2a:0e:23:1d:c0:2a:f7:2a:10:1e:16:80:00:07:a0:21:e8:71:
         f6:0d:25:7f:4a:12:10:f7:50:7f:08:3d:c8:86:fd:37:cc:ff:
         cd:74:a3:d0:e1:98:a9:62:00:a5:78:a8:7f:4d:8c:f2:74:19:
         b4:52:0b:52:57:90:af:c7:e0:d5:f8:6a:8f:74:99:b6:22:61:
         94:12:0d:eb:73:23:1e:28:96:c0:c7:c1:d1:05:73:9b:aa:14:
         cd:a3:d4:48:06:65:5a:a9:7f:08:88:bc:c1:a6:c1:31:85:b9:
         a6:53:89:5f:35:b3:e8:35:8f:4e:18:66:d4:b9:82:94:0a:0b:
         71:1c:69:5a:f9:44:67:a7:85:b6:29:56:0f:4f:19:47:eb:53:
         29:5e:a2:e8:71:a4:52:78:14:cd:53:ce:98:f5:7c:b9:2b:11:
         ee:f5:a6:86:fe:01:7b:2c:06:7f:19:8f:82:00:5b:3e:72:a9:
         b1:2e:ed:c7:5b:58:cd:1c:fe:f1:84:45:8c:f1:e9:fe:35:7e:
         a9:6e:a0:68:b7:9d:fa:50:78:33:5c:0e:6b:27:c6:2e:e9:c6:
         30:33:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----