Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File:                     TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier:          /hVLWc607A3Rc7LvHwiH49mPRmdwY7G4ApErGTBzJtc=
Subject key identifier:   E3:C8:93:B2:AE:6D:83:C1:EE:94:67:82:4A:28:11:23:29:5F:16:DB
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer:       /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial:       01962FAB263522464A33E2BE4F7D58F958D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number:          0E69
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
                          2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: B7b2RfTbJTY1bU5VlPg4/oKh4EX5o90Zv6+E+os8SKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:26:35:22:46:4a:33:e2:be:4f:7d:58:f9:58:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=e3c893b2ae6d83c1ee9467824a281123295f16db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:02:e9:26:26:57:f1:73:c5:c7:ba:52:37:
                    ea:17:1a:7d:30:5b:d5:f8:d2:2f:ba:ab:ea:00:05:
                    72:a5:aa:bf:56:9c:01:81:84:09:0e:21:4c:a1:18:
                    c3:50:6d:67:34:24:f3:4e:91:52:66:e8:e0:6d:c4:
                    ef:f1:4e:5c:8f:b2:4c:52:e3:2e:c9:0e:48:56:1b:
                    db:84:d6:52:c0:c6:8d:f0:a0:27:ea:fe:0b:90:8c:
                    23:c4:bf:97:57:eb:68:e3:38:89:4f:bf:cc:2a:d3:
                    e7:74:2d:71:d6:74:e2:29:fd:e3:26:f9:62:d5:06:
                    c8:fa:29:5f:61:bc:cd:be:78:17:8e:d8:75:48:f6:
                    a2:4a:c2:20:4d:a2:8e:4c:05:ae:a6:70:1c:d0:08:
                    31:2c:c1:77:b6:99:7d:ed:15:e2:b6:18:28:ca:11:
                    5a:ff:cd:8e:ad:ef:c2:ea:df:4b:3e:58:3d:ec:ea:
                    7b:68:01:7c:68:8b:60:dd:8f:9f:d9:ca:52:11:c9:
                    cb:d2:5a:1d:2f:98:c8:34:09:2e:66:e2:27:21:49:
                    b2:b3:e7:df:e3:bf:74:b9:09:1c:15:b8:bb:e1:e0:
                    38:94:6e:be:7b:8d:77:1a:2a:ae:e7:5e:68:70:97:
                    45:84:8c:53:84:c0:4f:b0:c8:bc:16:15:eb:ab:91:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:93:B2:AE:6D:83:C1:EE:94:67:82:4A:28:11:23:29:5F:16:DB
            X509v3 Authority Key Identifier:
                keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:af:6e:3a:ed:79:88:f5:7b:f8:4f:00:f4:f7:a4:c6:79:12:
         24:63:67:ad:d3:6e:3f:67:de:65:f6:ae:6a:31:d1:59:4f:b4:
         a3:e0:3a:35:a9:0c:48:f1:67:dc:c9:55:b4:ce:54:c4:78:a6:
         bb:7c:fc:00:75:ba:8e:46:f8:b8:35:85:f8:ab:6d:fb:71:3a:
         2d:1a:b4:53:da:01:62:81:ae:90:d9:19:bb:3a:b8:ca:e3:22:
         a0:6d:a7:1a:14:7d:ac:45:2a:76:fe:8b:ff:e3:5c:b9:3e:27:
         f7:62:15:8f:2c:35:c5:71:da:3a:50:3d:39:68:dc:f0:34:fe:
         e5:b0:ce:8b:cd:50:d7:ba:12:27:b7:a7:4a:3c:c5:02:3f:02:
         b0:e2:22:d7:80:a0:80:fd:8d:07:d3:53:9f:54:91:e4:73:01:
         3d:34:a3:05:21:9f:ce:63:ba:0c:be:db:21:64:34:82:d2:d1:
         90:c2:e9:99:8a:52:c5:4f:e3:f8:9e:b7:75:5f:99:e2:fc:70:
         86:81:66:cf:7f:69:98:88:66:1d:bb:35:0b:52:4a:76:dc:97:
         5c:6b:6e:45:7b:13:53:7f:ce:1b:cf:87:0d:d2:60:7b:7e:0b:
         f2:ae:f3:e3:12:72:c4:ce:49:43:9f:0e:2b:8a:56:e8:a2:bb:
         0a:4b:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----