Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File:                     TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier:          wshGgYEiHayx9LPwERWoRCf7Zh0aVPD4uY/hIDHZBco=
Subject key identifier:   3C:1C:79:3A:17:93:6F:D9:57:1F:BF:8D:FA:84:D7:61:F1:D7:40:C0
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer:       /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial:       01962E98EE2FCB6E24A7DC79A3CE0C53F00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: 3Oz6OaLyp3EOLAG4H8K5gchktO10GLmvC0BsoVrl4K0=)
                          2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ee:2f:cb:6e:24:a7:dc:79:a3:ce:0c:53:f0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=3c1c793a17936fd9571fbf8dfa84d761f1d740c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:0b:23:d1:03:a5:93:56:82:d7:e6:cb:c6:
                    fc:f3:0b:85:ea:8d:f1:6c:19:c7:86:99:52:33:27:
                    ec:ea:b1:82:03:0a:88:a9:ed:d4:a6:b9:62:94:4b:
                    cd:4b:30:19:c6:f8:f6:e7:a6:40:74:18:01:c7:04:
                    f7:71:57:80:54:1d:5e:39:95:9d:ec:ae:83:ac:6d:
                    fc:31:f2:03:5c:38:65:ad:39:05:9d:5d:9e:7f:68:
                    aa:92:59:03:8f:41:30:a8:e8:2b:cf:27:24:0f:fc:
                    c0:b2:da:2d:9f:11:8c:1a:4c:55:b7:cf:27:aa:a6:
                    da:ec:0a:1b:e6:1d:d7:e7:7d:f9:01:69:2e:3c:4b:
                    07:cf:c7:bf:f8:7c:c0:3d:b9:65:48:b4:d0:37:31:
                    fd:17:1f:62:cb:40:fe:29:32:cc:4a:bf:86:a5:08:
                    be:76:9a:a3:d7:6c:66:8b:4a:00:9b:f0:23:5b:a0:
                    e2:76:f8:75:66:84:0e:3f:29:2c:8d:8f:3b:d7:20:
                    5a:39:c3:5f:b3:5c:3e:c3:7a:9d:88:07:ff:48:a1:
                    c3:1c:02:f3:0e:c5:0a:ed:ef:6f:12:f7:11:13:51:
                    ae:e3:43:1c:07:df:d7:0e:06:26:e4:fe:6d:ad:8b:
                    83:29:9f:dc:25:d3:76:31:89:8f:c1:c2:f5:7e:a7:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1C:79:3A:17:93:6F:D9:57:1F:BF:8D:FA:84:D7:61:F1:D7:40:C0
            X509v3 Authority Key Identifier:
                keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b6:34:1e:fd:26:85:91:ec:73:e8:e5:2c:81:fb:4d:01:b7:
         93:ff:fd:50:83:fc:60:85:cc:3e:05:0b:ef:be:c4:e2:e7:36:
         48:ff:a2:79:81:73:18:b5:3e:94:48:3c:3c:89:9c:48:ce:31:
         e1:cf:a9:76:44:16:c3:2c:d0:42:df:20:05:20:46:fe:6b:d9:
         36:f7:bc:65:08:4b:83:49:dc:d2:c0:26:de:c3:b1:7f:ee:07:
         18:75:69:63:e8:14:ef:bb:e4:25:7d:95:22:4b:bd:2e:82:6b:
         53:0c:22:a1:0a:21:e5:06:07:da:26:13:a5:cf:d9:bb:09:c7:
         02:f2:5f:c3:ea:9d:34:28:fa:5a:ab:b4:5a:e8:d6:4a:77:d8:
         f7:ae:33:cb:0f:4b:7e:ea:6b:ec:c1:b3:3d:c4:8a:f0:8c:69:
         54:e5:77:45:95:a8:72:35:80:5c:20:f9:6c:3f:5c:07:92:09:
         4a:01:dd:24:00:d6:a1:b3:7f:1f:ce:e1:34:bf:28:1e:78:dd:
         95:5e:dc:a9:39:26:88:72:8f:1d:80:92:1a:13:26:8f:4d:3e:
         68:d6:55:7c:af:da:2a:28:d6:d1:f4:91:a2:e5:21:fe:b3:5d:
         d6:9a:1c:f1:96:41:df:c2:eb:8d:a1:91:e5:50:22:dd:1e:2a:
         e0:25:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----