Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File:                     TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier:          jVRDbn+pQ9b26mBfNsDgcW7PQhUFWJdmoLEgl+zTQIk=
Subject key identifier:   9B:8A:98:CB:D9:AE:6A:14:68:4C:82:2E:59:14:0F:13:4E:FF:07:4B
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer:       /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial:       01962E619F2DB7BCC945B74F40A25BAC399F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number:          05CC
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: o7BwWuGYsYFR64TUmXrUYvmF28X0i+o7SojUDxixUNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9f:2d:b7:bc:c9:45:b7:4f:40:a2:5b:ac:39:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=9b8a98cbd9ae6a14684c822e59140f134eff074b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:8e:f0:aa:7f:f8:2e:fa:e0:ad:25:1a:ef:
                    e6:b2:31:6c:f3:9b:b6:ea:88:c7:0d:4b:41:6a:00:
                    6c:16:73:89:b0:54:ed:d4:a1:d0:25:99:b5:a5:60:
                    94:52:a7:34:3f:04:87:fb:9b:b0:39:f5:28:4e:09:
                    ba:71:4b:3d:86:25:0f:f6:0b:ab:70:55:d3:b1:3f:
                    10:71:cf:4a:a6:97:4f:4c:88:10:73:7c:8c:5e:b1:
                    27:be:6b:5c:37:1e:fb:8c:67:76:2e:ac:95:03:9a:
                    d2:d8:66:65:ea:0c:b6:4d:0c:4a:8b:a0:82:df:ef:
                    bd:a5:0c:27:b9:9d:2c:98:11:69:de:e6:28:33:c6:
                    e9:06:ba:89:a9:5c:14:e9:53:27:09:fd:01:90:74:
                    58:84:62:ca:a6:09:95:93:29:33:d6:aa:83:3f:46:
                    cf:99:a6:f1:71:e6:78:3e:e0:54:1f:14:ff:9d:34:
                    a8:ca:f9:f0:4e:d4:f9:55:90:5d:31:16:ce:1a:4d:
                    be:4c:cf:34:f4:1c:c2:ed:52:a6:fd:f0:ad:c0:71:
                    3d:92:c4:02:c2:a4:05:24:5d:48:20:ec:5d:d2:cc:
                    02:5b:2d:72:8b:79:79:cb:75:62:bb:9f:88:83:5c:
                    11:19:bd:5e:cd:0d:17:91:53:b0:3a:d0:ee:e8:02:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8A:98:CB:D9:AE:6A:14:68:4C:82:2E:59:14:0F:13:4E:FF:07:4B
            X509v3 Authority Key Identifier:
                keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:25:87:3b:a0:07:a2:8b:f6:26:0d:6b:6a:ae:ac:ff:fe:be:
         5e:d7:ce:8a:95:b2:4c:7a:d7:d8:85:52:f8:e0:ca:5a:1a:ec:
         85:69:04:c5:81:ad:a0:b6:bc:15:41:d1:65:b9:88:f3:6e:b2:
         1c:7d:66:f1:91:b9:53:b8:dc:33:55:e5:92:8f:bc:96:47:bb:
         46:90:b3:51:f7:e1:98:c5:7b:4d:7c:d3:34:90:72:89:25:b9:
         4e:83:ea:75:93:5c:b9:90:81:38:6c:72:0f:d0:f3:5f:0c:a1:
         7e:5d:31:c8:c2:3c:41:cb:64:ec:6b:55:3b:be:66:1b:54:af:
         93:a5:d3:17:7f:28:82:02:9e:fb:68:d5:0b:71:6a:a8:ef:e5:
         0a:e9:2e:2c:d1:22:db:30:17:55:50:d0:49:58:72:ab:88:e3:
         d5:56:30:69:fb:96:0e:4f:62:13:c2:b0:cc:d9:6e:04:c0:96:
         7c:b2:9c:d5:9a:41:18:01:4c:e6:21:59:f3:98:15:cf:96:39:
         af:4b:55:26:b4:ce:e7:cf:3d:d0:7b:61:d8:ce:ca:a2:82:e1:
         16:00:98:ec:68:22:94:5e:43:21:e0:48:71:b3:6a:1d:df:f6:
         89:25:dc:dd:0a:d9:e9:1d:2e:6a:49:ea:43:b9:e5:ae:f7:cc:
         1c:49:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----