Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File:                     tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier:          1j3L7X4dbppRhBUz/n139W0bzwOIti2o2P6EQjLMVxg=
Subject key identifier:   A1:76:B9:FC:2D:0D:FC:BC:F6:EF:18:D0:A2:15:AB:E7:DB:D9:A8:A9
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer:       /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial:       01962F06F73089BB8552797E147501C0D7D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number:          0832
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
                          2: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
                          3: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
                          4: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: Y31Ixvi+5Mltm3ENsOj1uas8I/0faDFHtHS90gurVds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f7:30:89:bb:85:52:79:7e:14:75:01:c0:d7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=a176b9fc2d0dfcbcf6ef18d0a215abe7dbd9a8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:45:9f:ef:e9:1e:d6:2c:ba:cd:9c:69:64:
                    b9:6b:ae:0f:f5:e1:d3:4e:59:1b:0a:72:db:c9:39:
                    75:77:e7:48:d0:e9:fd:b2:f7:5b:ba:c0:85:db:16:
                    fb:75:70:de:a9:da:04:04:81:39:0d:e5:96:56:99:
                    76:c4:40:b2:b5:eb:fb:c6:89:b8:51:35:42:9e:b9:
                    70:d6:9b:d7:1f:1a:55:3b:7d:b0:06:c8:9a:c7:07:
                    be:05:b2:c6:ce:31:f4:ef:b5:04:ad:a6:4a:67:a7:
                    bd:8f:4c:b2:03:18:57:d9:ef:5c:f0:42:93:e5:6e:
                    ac:4d:60:e4:47:d2:36:3b:0a:90:d7:be:bf:cd:3f:
                    e2:f6:7f:e2:f8:63:d9:80:6a:df:4e:31:0c:1a:44:
                    1b:27:66:24:29:ca:da:7f:ca:7a:5c:54:5b:c8:5b:
                    c1:39:18:73:dc:9b:b6:82:6d:f8:2e:8e:92:9a:2a:
                    77:f4:7d:68:ec:c0:7d:f0:de:b8:b3:85:e9:90:91:
                    d5:2c:12:04:0f:33:df:3b:fe:99:9e:43:c6:a8:54:
                    ef:7b:e7:8a:b9:ec:e9:cf:14:86:d6:00:77:3d:f4:
                    51:5b:11:58:9d:69:71:20:4a:7b:16:2b:e1:8f:ea:
                    ae:8a:58:25:ad:eb:a5:5f:4a:6a:5f:23:1e:10:9c:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:B9:FC:2D:0D:FC:BC:F6:EF:18:D0:A2:15:AB:E7:DB:D9:A8:A9
            X509v3 Authority Key Identifier:
                keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0d:77:84:cf:18:e0:73:af:b1:75:6c:ff:d3:d4:71:3b:30:
         a1:ff:06:00:bb:87:cf:db:47:61:ca:cd:ab:ae:0e:01:0f:44:
         cc:e0:e5:bb:58:92:9d:65:03:c1:e8:80:b9:c2:0f:d5:f8:b5:
         08:11:b8:3d:ff:3d:1c:4c:1b:24:ea:c2:ef:bd:00:f9:9f:9e:
         91:e5:09:c6:74:91:29:f1:f4:78:80:43:99:07:55:fd:e2:e6:
         c1:c3:34:e4:b3:3f:e0:04:bc:ad:0c:f3:55:5d:59:e3:20:91:
         96:3a:a0:a3:cf:eb:54:2f:94:cc:da:58:8a:66:93:a7:b2:24:
         44:55:40:54:de:f1:9a:f4:83:29:fe:29:27:13:05:6d:c8:3d:
         4a:d4:bf:44:8e:99:39:ee:04:e1:1e:07:2d:63:52:bc:2e:8f:
         c3:8e:51:8e:06:11:bc:63:8f:94:f0:46:bf:c9:84:15:5c:ad:
         5a:10:ef:57:9d:56:7b:e1:71:0a:84:1f:4f:8a:70:d4:df:22:
         c7:35:fe:55:d3:33:62:9d:b2:11:f4:b7:54:e2:d1:f8:c6:39:
         cb:24:09:8a:e6:f1:e4:71:eb:de:e8:34:78:f0:c7:ec:22:7e:
         f5:da:25:88:39:d4:2e:ed:c8:f2:e6:b7:b3:76:74:ed:7f:9b:
         e3:f2:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----