Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          KXczQ/dlzROI7JX7lYrUgbVp/bmCsGcXSY5wrfMZAa0=
Subject key identifier:   2B:6C:49:6F:B1:B1:CB:D4:E4:4D:E3:97:D3:03:F5:2B:7E:5D:49:E0
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       01962ECFA439AEEA27092784358136BD308E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (hash: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=)
                          2: S1Ts1tmRBXYi-ijSPHwLnC2EFiI.roa (hash: RZYdWEyp7eB0JTzdxGKYT9kYsY0nvo8GSZ1zPOj2n8s=)
                          3: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: CsktiomE0KT03/0ynEAwAmwEOr8ima1wYFCA/580bwE=)
                          4: Wn6BmhQ3hHGpcUGcQYHufQoB9CY.roa (hash: 1bAtfl0eVf3wk/89WZI+rKZJtpHN1fJgLK/5hDxXP2c=)
                          5: zLqZByVIYZNIOabo6CqeO7mf32s.roa (hash: AeNmHam8UAG7xmWhKqSgZZxihx4CuxlxzvkEgAgfsmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a4:39:ae:ea:27:09:27:84:35:81:36:bd:30:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=2b6c496fb1b1cbd4e44de397d303f52b7e5d49e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:34:c1:77:ca:a9:ce:10:cf:38:71:7c:e6:
                    70:bd:68:27:20:2a:29:23:8a:01:26:76:bc:59:f8:
                    13:7f:0a:39:57:38:bd:e2:ec:28:d7:c8:f2:27:75:
                    9c:56:ff:7c:8c:5f:fd:22:0a:55:02:85:f4:94:07:
                    cd:cf:13:3f:1e:21:ef:41:83:d0:47:57:a0:71:46:
                    36:64:a2:49:16:d0:40:65:a5:57:71:32:e2:c5:f6:
                    55:9e:77:31:68:89:40:07:78:b5:84:51:e6:04:04:
                    b6:12:bf:66:25:51:08:e6:9c:8f:14:09:84:c0:b5:
                    fc:6b:ff:d2:15:4c:65:0b:5d:c1:ec:76:61:29:6d:
                    f1:d1:ac:0d:3a:8a:c8:77:41:1c:70:8f:98:81:d5:
                    33:98:12:de:49:8c:b5:23:37:bf:79:58:4f:c2:c4:
                    e6:ef:05:24:46:5c:af:2d:c7:00:7e:3f:92:31:1d:
                    a7:51:68:8c:62:6c:2d:dd:63:fe:5d:de:97:43:81:
                    04:2e:4c:40:8f:02:b1:d6:c6:36:77:b9:b9:58:fe:
                    3b:99:e6:23:cf:13:68:d9:d7:71:dd:4f:fe:f3:20:
                    45:f5:78:e5:b1:39:79:0b:83:19:98:99:38:76:12:
                    85:e9:80:cb:b3:8a:0f:50:5b:01:ee:50:86:0a:2f:
                    de:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:49:6F:B1:B1:CB:D4:E4:4D:E3:97:D3:03:F5:2B:7E:5D:49:E0
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:3e:bc:f4:60:dd:00:04:e1:0b:36:77:66:fd:84:4e:50:12:
         09:c0:6e:52:b8:02:21:0a:fa:a0:37:3e:83:ec:4e:7a:94:46:
         6d:2a:80:7a:4e:0d:6e:9a:af:3d:81:64:73:98:de:3b:b1:ae:
         31:f4:f8:40:c2:2e:a6:ab:14:08:c7:f2:e2:22:4d:8f:f0:73:
         77:62:5f:18:2c:4f:59:e3:86:2f:b9:6d:2a:52:e0:47:38:b2:
         07:d4:63:32:ac:3d:6c:19:67:2e:16:01:51:6b:76:55:b1:ac:
         ce:94:e7:4e:7d:63:db:7b:5f:71:30:44:c3:94:0e:e2:48:c2:
         87:9d:85:ae:7c:3a:65:aa:ee:2a:56:bf:54:cf:b7:cf:e0:14:
         5e:93:f8:13:22:17:ba:eb:b4:fd:51:e6:86:64:7e:79:99:b0:
         fe:3f:34:dd:c5:ac:6e:7c:a8:43:21:9d:59:e8:17:21:f9:8b:
         44:69:c7:dc:c2:e0:8c:73:cf:36:74:ed:ed:06:b6:5e:84:27:
         1d:0d:5f:ab:85:e1:92:b0:4c:ae:fb:01:82:41:f4:40:d7:76:
         fb:76:a7:5c:f9:eb:e3:15:e9:a7:49:fe:5f:02:e3:9d:ea:bb:
         e0:70:dd:db:32:57:94:85:cb:b1:e5:27:22:8d:cf:e0:c3:fc:
         97:9a:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----