Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File:                     TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier:          f+FMUGyCL81RgLxH7HPDnaAspoTf8/lA7KTHFphE4KQ=
Subject key identifier:   FC:ED:ED:FD:47:6A:22:27:E1:0E:50:C9:E5:46:FD:8A:5A:64:7B:6A
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer:       /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial:       01962E61958AA8DF87982EB5B77AEE96FB26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number:          02E3
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: X7c/EGNnNWtrXoCJMfcNY73vy3T0w7u2MsMoo2Xd9ps=)
                          2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:95:8a:a8:df:87:98:2e:b5:b7:7a:ee:96:fb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=fcededfd476a2227e10e50c9e546fd8a5a647b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:6c:86:98:1a:5e:97:de:a4:07:af:68:8a:
                    4a:5e:53:a2:d1:d5:22:0e:95:56:7e:3f:2d:bd:b9:
                    5b:f0:68:ce:c5:5c:43:43:17:2e:5e:38:26:53:f2:
                    82:e5:c8:79:d8:c9:a2:58:a0:e4:9f:a5:3c:cc:f1:
                    80:3b:7b:44:3d:b9:15:35:0e:b2:c8:b1:bc:f6:d2:
                    f6:b3:b4:81:0c:5d:16:a7:e8:2b:38:90:d3:82:e6:
                    77:04:34:04:5e:31:3b:a0:1b:72:c4:79:40:65:a1:
                    08:0b:6c:e5:bc:7e:ab:78:d4:b7:d1:95:58:94:ad:
                    76:80:85:7c:86:28:d1:f5:52:57:5f:c4:99:ab:b1:
                    11:f5:69:c6:5c:60:b0:9a:3e:39:62:1e:f5:2d:cf:
                    0e:b8:67:84:72:dd:33:66:f8:9f:7a:8a:a4:4f:85:
                    a5:15:d2:47:99:32:8c:e8:3d:af:6d:cb:dc:be:0d:
                    54:1e:98:b5:2a:64:0b:ca:ab:ea:a8:50:16:b4:c4:
                    c7:bb:8f:b0:ce:d2:8f:3e:4b:35:b2:17:7a:02:fb:
                    ee:6f:7a:d1:7f:b5:ad:93:a4:77:7d:3c:59:57:3e:
                    c0:43:06:c8:65:f9:f9:5d:3c:47:6d:6f:4c:c2:24:
                    67:7e:18:33:fd:7e:7f:8e:d9:9e:85:25:a5:41:86:
                    de:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:ED:ED:FD:47:6A:22:27:E1:0E:50:C9:E5:46:FD:8A:5A:64:7B:6A
            X509v3 Authority Key Identifier:
                keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:45:c7:a6:0c:b8:f3:f3:46:64:e5:42:26:b7:30:73:2b:
         3d:2b:7b:a1:f2:e3:8a:5d:d5:c3:47:b7:a7:ef:05:27:f5:b7:
         15:3e:8e:e3:dd:7c:c4:5a:47:fa:1c:67:e6:ca:bb:6a:1d:27:
         6f:e8:35:f2:05:f4:c3:63:07:2a:69:1a:a4:f6:bc:bc:f7:92:
         9e:57:6b:a8:61:70:82:2b:a1:28:18:ff:a5:37:0f:6f:f4:d0:
         18:9e:ec:c4:ca:ed:83:08:2e:64:1b:dc:54:ca:7b:55:bd:90:
         9c:9e:76:1d:a0:12:9b:63:28:35:76:67:3c:00:7c:47:fe:60:
         ba:57:42:6f:00:78:26:ad:db:4a:be:a7:ec:14:4f:5e:06:31:
         3e:6e:b6:03:5e:bd:93:58:8b:cf:a3:07:43:9b:91:2d:41:e0:
         d1:f6:1d:a5:53:45:0f:47:12:0f:1c:b4:c4:b1:02:db:2f:10:
         f2:a0:aa:d3:cd:ab:f2:8b:f0:3a:90:dc:ec:84:be:b4:24:a4:
         97:7e:fb:3a:33:a9:3d:d1:01:4e:71:e8:b9:cc:b6:53:e6:cd:
         05:6e:30:a0:ae:81:fa:31:8d:4d:a4:ef:4f:e9:23:a5:d5:a5:
         c1:c9:b9:3e:42:33:60:f9:f0:8c:8b:33:57:21:cc:7a:f6:45:
         e5:69:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----