Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File:                     Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier:          kYk+cwqcTfnqMHlVSdjhS68AQRpitgBRoFPcDnfhm8I=
Subject key identifier:   73:E7:92:66:2E:86:88:0A:88:6D:AD:40:26:ED:AA:63:FC:29:BD:F0
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer:       /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial:       01962FAB08AC33BF0780EE6EA64B76F0B0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number:          CC
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
                          2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
                          3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: 2LNy4/U+dWRbx9S1tqDMB59v/pFiiimV2ec77qUFdXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:08:ac:33:bf:07:80:ee:6e:a6:4b:76:f0:b0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=73e792662e86880a886dad4026edaa63fc29bdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:15:94:10:32:66:6a:1c:da:fb:3a:82:d5:
                    f1:76:fe:92:f5:55:06:7b:7f:d6:5b:9f:bd:cb:34:
                    57:e6:6b:be:be:6d:77:3a:c8:99:5a:d0:c2:ce:81:
                    99:0c:e0:22:6e:8c:26:5b:60:7f:e4:7c:0c:c8:4d:
                    b1:cc:eb:ec:bf:64:93:b0:ae:a8:97:43:59:ea:96:
                    44:66:f7:65:ed:fe:bd:c4:87:43:61:24:fe:f6:99:
                    04:10:93:5a:3f:4d:dc:89:88:cc:3f:e1:97:99:f1:
                    25:f9:c9:e1:6d:e5:8f:4e:48:57:65:9d:ab:e8:2c:
                    ed:65:69:86:d2:6d:df:62:14:8b:b4:2f:be:27:c9:
                    98:bf:4a:dd:db:c6:39:a9:1c:9c:96:78:da:e0:b7:
                    1f:a3:06:71:6a:bb:c4:3f:23:e0:de:36:cd:4d:53:
                    6d:41:f5:aa:ac:e6:99:2c:c4:d2:8f:80:54:4b:d1:
                    3a:1b:d6:a8:a4:25:75:33:09:2a:b6:8c:e0:3a:0f:
                    02:f1:73:e5:a4:c7:e7:62:b2:98:29:b9:65:ce:21:
                    5d:7b:6d:71:e0:f6:97:89:30:aa:13:6e:7d:64:38:
                    5c:52:18:c4:e0:e3:e4:37:13:04:18:0e:79:3d:e7:
                    3f:e8:6a:5f:fa:0a:9d:d0:70:b0:93:92:4c:93:a1:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E7:92:66:2E:86:88:0A:88:6D:AD:40:26:ED:AA:63:FC:29:BD:F0
            X509v3 Authority Key Identifier:
                keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5c:8b:e2:a7:da:b3:a8:f3:6b:14:a2:7f:e4:43:04:aa:68:
         ea:24:43:11:0c:3d:73:dd:b0:9f:44:4e:82:81:c1:48:f0:d5:
         dd:03:db:e8:4e:e3:a4:45:14:9e:f2:fe:67:75:4e:6a:06:67:
         27:a5:cc:ca:f3:f0:b7:30:bd:04:1d:e3:a0:7b:c9:3c:f1:2e:
         65:8e:36:8f:e9:98:1e:4c:a3:4c:d6:54:4e:18:83:7d:41:43:
         e1:34:4b:e7:8f:9f:d6:e2:6e:e2:58:6b:4e:c0:f6:96:18:7c:
         21:c8:85:97:1d:83:db:0a:78:3b:56:c8:a7:08:dd:6b:81:82:
         5b:42:c9:01:35:4f:90:aa:23:94:3f:e9:84:35:fd:0f:85:73:
         b1:68:2a:86:dc:55:63:13:ce:73:36:d7:51:87:57:c3:bb:87:
         a5:30:2d:63:6a:6c:09:1e:3d:56:d5:06:0a:dc:44:ca:62:bd:
         01:2a:31:99:5b:bb:f3:bb:69:9a:83:2e:90:7f:5d:db:6f:29:
         7b:f7:26:de:4f:e6:7c:f5:9f:f8:5c:c7:fe:d8:34:d6:70:fa:
         a8:d5:ae:75:bb:34:bc:6b:1e:b1:66:0e:74:7d:cf:b0:88:0a:
         cf:68:ed:55:eb:96:6d:57:c4:28:88:df:9f:da:12:84:27:cc:
         0c:39:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----