Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File:                     fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier:          lLv1mHmO38jidpyucLU5CsMeIstzOupvBfJlT1YPGms=
Subject key identifier:   9F:E4:83:55:3E:5B:3B:A6:EE:59:33:83:C9:5E:B7:C7:3C:9E:67:8A
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer:       /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial:       01962DF3FA9547E10F548DE8315F06B4F5F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
                          2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
                          3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: oAyiaD2em7xVcPQtyplpAD3QuSpca9ZDX1yciThhlPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fa:95:47:e1:0f:54:8d:e8:31:5f:06:b4:f5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=9fe483553e5b3ba6ee593383c95eb7c73c9e678a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:12:02:d6:40:79:65:51:ab:56:30:07:cd:
                    57:75:c5:36:91:a3:9c:d3:2a:0b:ee:0b:1a:03:e8:
                    0b:d5:43:c9:94:9a:c1:bb:c7:0d:34:ee:fa:a5:e5:
                    16:f8:6a:9a:dc:ee:17:0a:da:50:5b:0a:b4:6d:51:
                    54:f0:91:c5:cb:13:fa:57:d9:cd:88:3d:59:ec:36:
                    78:7e:84:d6:18:b4:5e:a0:b8:18:24:a4:7a:de:3e:
                    9a:2d:05:2e:8f:e2:ca:b7:22:b4:35:c6:a9:8d:98:
                    b3:46:3d:2a:27:70:09:f2:1a:89:1c:07:49:14:0e:
                    1a:0e:32:ad:81:9e:f4:de:22:ed:3e:ba:3e:b6:eb:
                    5c:7e:5a:d4:87:d8:a0:6f:92:be:d3:1a:80:dd:6c:
                    14:66:29:d6:ec:c6:57:a0:6e:ba:7b:cf:49:52:ba:
                    8f:02:00:04:95:3f:ed:0d:2d:9d:37:d5:c9:0b:54:
                    49:93:5d:e4:4c:c7:e0:07:4b:ed:8d:07:16:7a:fc:
                    81:e9:57:06:67:61:33:01:3c:09:14:70:0f:0d:3a:
                    4a:0b:69:cf:b5:63:e6:cf:ba:3d:c8:e7:56:77:1f:
                    6f:73:cf:56:92:62:f5:35:b9:9c:52:94:84:af:2a:
                    88:36:62:e6:e1:91:50:e5:19:0f:e6:d1:63:a2:79:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E4:83:55:3E:5B:3B:A6:EE:59:33:83:C9:5E:B7:C7:3C:9E:67:8A
            X509v3 Authority Key Identifier:
                keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:33:a7:f5:8b:79:13:6c:4e:b5:79:e4:41:e7:6b:14:ff:1e:
         da:33:e6:b9:ed:b5:b2:89:81:ec:6e:e3:19:1b:e7:ec:10:59:
         bb:0a:45:74:ab:6b:b0:90:b5:d4:0f:71:c7:3a:b8:ff:c1:0c:
         fe:ea:d6:df:d7:c9:f0:52:e9:4b:84:42:bd:b1:e2:3d:2e:ab:
         ff:19:ef:ec:9e:b1:97:ef:39:f5:9b:a3:3c:2c:bb:1e:31:80:
         15:df:e3:c1:b2:3e:97:0d:2c:c2:eb:56:1c:14:7f:b6:75:4d:
         3a:40:1d:31:d8:b1:8e:2c:1c:26:fb:1f:09:a0:5d:81:79:1b:
         69:44:a1:e7:c5:d2:a3:8a:86:dc:80:8c:9c:e9:bb:90:8a:d6:
         11:c5:1c:a3:16:b8:94:c9:0a:56:e1:08:44:9d:4d:f8:f4:e6:
         77:41:a6:05:dd:d3:e6:d2:7e:34:c5:a3:a3:46:1a:c9:ca:99:
         91:8a:87:c2:37:d5:5d:17:1e:42:b6:f0:d4:7b:ca:2e:a1:38:
         35:b2:57:26:44:0b:cd:50:f2:42:d9:e6:c5:c8:f4:f1:0c:6a:
         27:c7:bf:73:f6:17:4f:44:9c:e5:fa:83:67:41:96:61:58:b8:
         2e:78:5a:49:77:52:a4:03:3d:10:fc:7b:16:94:a4:69:76:f3:
         ba:72:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----