Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
File:                     TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft (raw, json)
Hash identifier:          J8mlL0YY2/5TLSU4WczFxyQoo2ccgDW3wZb0Ta68lQU=
Subject key identifier:   6F:05:93:64:DE:66:2A:80:49:C9:11:BA:46:7F:7D:AF:B1:6C:19:C0
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Certificate issuer:       /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial:       01962E98BEF99EF6648D3699EA37A0DF1C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl (hash: NW29R1n9D3d4L/oxv6PVTdiLSZX6g7VJfPdkq+4qPx8=)
                          2: Vn0PoWq91day6d--kuy39s7CP5U.roa (hash: daOIdL4b5N4GukWwie8JBBD3OBe/sdcGSiKd1pWKhtI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:be:f9:9e:f6:64:8d:36:99:ea:37:a0:df:1c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=6f059364de662a8049c911ba467f7dafb16c19c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:21:23:83:37:01:3d:34:76:86:a9:1e:b5:
                    c7:ef:48:ce:cf:d6:5e:b9:83:f0:ad:e0:01:66:0e:
                    35:4b:fc:9d:cc:3c:81:80:fb:b0:6c:cb:04:ea:81:
                    cb:c7:cd:d3:fd:52:ce:f4:92:92:6f:3e:59:f3:ba:
                    f1:98:08:51:ce:72:44:ed:d9:2c:2e:42:32:4b:65:
                    3f:24:b8:8f:35:d1:1c:b3:a5:c8:1b:8d:ff:18:aa:
                    b5:78:51:cf:ae:20:9a:08:92:2b:00:af:b4:27:65:
                    dc:17:05:8b:e5:b4:ab:2e:e0:a8:2c:98:6d:47:ee:
                    d2:f1:e9:8e:cc:f3:70:70:50:4b:f2:80:a6:62:84:
                    f9:a0:aa:82:ba:3f:e2:92:df:fe:77:c9:70:af:40:
                    bf:bf:17:c7:c1:e7:82:f1:00:a3:ae:75:48:a5:92:
                    8a:b0:e5:88:3a:04:c0:bb:62:5c:07:96:4c:e6:5e:
                    5e:6a:3a:b7:7e:f5:b6:8b:3b:eb:97:8c:c9:9b:b5:
                    05:cf:06:c8:3d:d2:72:22:87:85:f4:3e:17:3d:62:
                    5a:d5:b5:d4:63:41:7f:d9:b4:55:c6:67:62:44:b8:
                    a2:39:3a:b5:b4:2c:8c:ba:cf:7a:56:96:60:20:07:
                    e6:38:c7:90:1f:c4:b9:09:51:e9:46:18:97:f6:98:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:05:93:64:DE:66:2A:80:49:C9:11:BA:46:7F:7D:AF:B1:6C:19:C0
            X509v3 Authority Key Identifier:
                keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:d8:aa:cd:1f:fc:f3:69:00:18:bc:9a:00:02:cc:05:48:
         96:56:8e:95:ef:b8:05:d4:23:3f:8b:39:30:16:cb:e0:63:a6:
         2d:07:33:7b:56:93:f1:c0:7d:6a:3a:a4:55:96:f6:41:14:2b:
         94:6e:2b:48:ff:4f:61:f6:26:90:06:bc:06:54:55:96:ed:51:
         b5:20:37:dd:12:f6:78:a1:33:46:69:32:02:eb:fa:ba:1d:e4:
         0c:e7:90:19:c0:69:3b:54:35:2e:a6:d5:ed:84:88:1f:fd:73:
         b3:56:b0:40:8a:30:55:87:c8:2d:f2:df:74:ca:34:3e:75:df:
         7a:19:2f:f3:d3:7e:75:ec:c1:43:fd:47:a3:0d:56:a8:84:7a:
         04:90:d9:d2:8e:e9:9a:1e:19:f9:3d:86:53:53:07:ef:f5:84:
         01:e5:d5:66:e8:05:ba:5f:63:b5:1c:71:c3:00:cb:d9:d0:58:
         b7:33:6c:cd:0e:59:1b:88:49:55:77:09:17:bc:fd:6c:2f:30:
         af:01:f5:e2:f9:e6:a8:5b:41:7e:dd:73:10:70:b6:11:a5:c1:
         0f:41:65:d6:87:d7:3f:f2:08:0c:31:65:00:8c:3a:de:12:4b:
         5e:2a:71:9d:b9:af:b7:2d:37:60:03:ac:64:47:62:5a:1f:8a:
         0e:98:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----