Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
File:                     TStBlpVqQxU0D4J9mSoPeikoTD4.mft (raw, json)
Hash identifier:          lyPdn8oID7o0D8aBG0N7vgL1WCnTX83XNO38d41s08M=
Subject key identifier:   10:70:08:64:62:C1:BB:5F:CC:C0:2C:5D:71:96:F6:5F:91:4D:6C:58
Authority key identifier: 4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E
Certificate issuer:       /CN=4d2b4196956a4315340f827d992a0f7a29284c3e
Certificate serial:       01962DF3F577FC1C3F950849521A6591670D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft
Manifest number:          1179
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: TStBlpVqQxU0D4J9mSoPeikoTD4.crl (hash: J5xIMLuG7nXvaEBUZmu4zmDC7LJQFXlRZvxN/YYVVNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:77:fc:1c:3f:95:08:49:52:1a:65:91:67:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2b4196956a4315340f827d992a0f7a29284c3e
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=1070086462c1bb5fccc02c5d7196f65f914d6c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:0c:d9:22:6e:02:86:e1:b6:7b:55:a8:b0:
                    69:26:34:01:d9:9c:8c:7e:cb:d4:bc:ac:07:4d:49:
                    76:51:12:e1:06:80:c8:bd:81:d3:90:bb:3d:c5:73:
                    04:e4:89:e5:7c:ea:b2:ad:d0:e6:20:3a:57:51:a7:
                    b2:70:03:a2:b6:80:a7:51:d4:a6:dc:4c:96:1d:06:
                    6f:d3:4c:74:3a:9d:83:e1:12:89:36:f9:95:e0:f4:
                    94:23:ec:69:fc:49:8f:f7:e7:fd:d1:a5:52:c5:84:
                    29:2d:20:e9:84:bc:39:60:0e:67:51:e3:dd:a2:2a:
                    6a:df:87:63:19:c6:49:68:22:80:3b:33:81:15:46:
                    61:84:a5:d9:bb:42:39:cd:ee:4c:5f:8c:e0:2a:81:
                    ef:29:9b:33:9c:27:91:76:87:31:66:6f:85:ba:89:
                    94:0f:c5:0a:a4:93:27:cb:37:7e:e5:1c:7c:07:8f:
                    3e:26:d0:83:f0:4e:8c:13:6d:30:21:8d:0c:db:ef:
                    35:21:1c:6a:2d:b2:5d:fb:85:82:69:dd:ce:ab:8c:
                    d6:6b:25:c3:67:76:6d:6f:c3:4a:1f:e6:ac:b7:87:
                    cd:ad:3a:9f:ee:8a:cc:c3:85:75:39:3f:7d:5a:c6:
                    ac:9d:fe:0f:8f:74:e0:45:a0:e6:7e:c9:de:99:a4:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:08:64:62:C1:BB:5F:CC:C0:2C:5D:71:96:F6:5F:91:4D:6C:58
            X509v3 Authority Key Identifier:
                keyid:4D:2B:41:96:95:6A:43:15:34:0F:82:7D:99:2A:0F:7A:29:28:4C:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TStBlpVqQxU0D4J9mSoPeikoTD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3c02b9-25c4-488f-a975-455a0a61f1ea/1/TStBlpVqQxU0D4J9mSoPeikoTD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:07:7c:a4:5f:cf:d5:f8:b4:6d:1f:67:03:64:65:e1:7b:33:
         3c:c7:a7:64:4d:eb:6f:47:38:cc:08:d7:06:8e:de:53:17:bb:
         4f:97:48:7c:14:ed:e8:98:63:e0:44:9d:d3:b1:69:e8:6e:ea:
         ec:50:28:4b:94:64:fd:55:ef:e9:9c:7f:7b:70:de:7e:1f:37:
         fd:d7:e9:b2:6c:00:5e:d6:ed:20:b9:a0:47:db:06:5c:b5:0f:
         84:e8:12:0f:2a:68:12:09:72:fd:72:ed:d1:99:e8:97:e8:0b:
         bb:ad:99:df:b1:50:e3:21:8f:13:7c:d6:10:c2:7d:8c:8e:d1:
         8c:ac:61:b6:63:09:4a:49:77:19:b5:55:83:21:0d:0a:55:d4:
         06:6f:84:5c:83:ab:d2:3c:e5:7e:de:05:08:0a:7b:da:d0:1a:
         f9:6b:e9:4f:ed:77:a9:0d:87:ba:33:57:74:88:51:a7:5a:cd:
         12:e5:70:65:2e:ee:61:1f:73:bc:f0:e3:95:3f:bb:74:ca:46:
         f1:77:21:e4:59:59:32:bc:04:38:9b:b0:7d:d1:89:ae:3b:c1:
         58:1c:cb:c0:0c:a0:16:1b:f6:c8:b0:29:d2:5e:aa:91:77:ba:
         a9:77:87:a7:32:14:ab:fd:52:e9:b4:bb:3c:a1:d9:39:e4:0d:
         04:a0:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----