Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File:                     tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier:          6Mn7A8BVPH32mxeWz1/YPqJHoboATllM3acooCLXtpw=
Subject key identifier:   25:94:41:21:E4:1C:35:E3:D0:31:0E:9C:C4:62:02:6A:88:06:91:23
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer:       /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial:       01962E2B099138BA3230ECC54E8383213FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number:          0F35
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: XSeQzzLzaRiIssAEaH8bFHtmW3c.roa (hash: 5lhi1fFGQ5t288ymZ18SpahB86WMGs7YGo9rolcKH9c=)
                          2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: 74f+xahSLioyfVesLAy5AVEbV7hMFt+6WNwg++15JAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:91:38:ba:32:30:ec:c5:4e:83:83:21:3f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=25944121e41c35e3d0310e9cc462026a88069123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:40:32:54:c6:48:db:66:5b:5d:3b:95:42:
                    69:54:96:ec:59:62:57:76:a7:8a:e8:19:a5:34:e4:
                    f3:b0:61:bd:34:4d:05:c9:1e:2a:c4:68:75:2b:b8:
                    21:a6:dc:24:30:e4:ad:08:2b:14:9e:c6:96:2b:3c:
                    1b:5d:99:ed:ba:e9:b6:92:80:d6:97:f6:55:02:fd:
                    69:05:8d:7e:73:94:f3:96:05:bb:10:a5:d2:81:b7:
                    20:12:d7:e1:c1:6e:55:ed:30:20:f0:0f:3e:3a:1f:
                    e4:0e:d7:77:95:c3:28:6d:f7:07:f4:c9:e3:03:e6:
                    37:cf:cd:bd:b0:f0:af:fc:44:d1:b6:84:20:db:60:
                    b4:dc:be:a9:27:ae:00:37:b3:7a:a8:f1:c8:be:cf:
                    99:4e:4d:47:47:7a:ad:d4:26:81:78:05:f9:24:33:
                    88:eb:b8:9a:3f:1f:5e:0e:15:12:ba:0c:5c:2d:6b:
                    1e:75:c6:ef:bc:fb:a6:8e:a8:e6:e0:5a:73:66:ed:
                    e5:ec:97:33:b5:8a:c6:15:8c:96:5e:44:90:b6:e4:
                    06:24:b4:61:86:d9:b7:e3:fc:75:01:6d:1d:6c:25:
                    e3:1e:30:4a:17:34:f4:c3:79:cf:c3:33:f2:0c:49:
                    d2:e9:c6:2c:71:f7:ca:d7:3a:2a:1e:87:42:51:4d:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:94:41:21:E4:1C:35:E3:D0:31:0E:9C:C4:62:02:6A:88:06:91:23
            X509v3 Authority Key Identifier:
                keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:5f:68:35:74:6f:70:67:e3:0b:42:45:31:60:13:eb:6c:
         da:a4:09:cd:55:fa:17:41:b6:d5:fa:ac:8c:12:cd:74:c3:1b:
         4a:5b:df:40:97:12:aa:c2:4d:10:fa:e2:f4:2a:b3:99:81:c1:
         66:46:8a:1b:af:a4:de:2a:08:d8:d6:7c:97:a5:fe:19:f6:8e:
         26:df:6c:36:e2:c0:39:ea:43:b2:46:c6:93:ed:c9:bd:ce:33:
         4b:69:35:ed:e4:a2:83:10:7e:3e:0a:24:ad:23:c7:c0:59:c4:
         9a:aa:85:77:bd:10:ae:75:41:90:22:ae:0e:f5:0f:2a:ba:10:
         b9:1c:03:ce:2f:69:b7:c0:9c:73:59:e8:15:27:59:74:df:4d:
         37:6e:8e:c5:1e:cd:08:a0:d0:fc:c6:e3:b1:e4:47:f0:59:c3:
         d7:e3:6c:a5:d0:dc:86:41:25:b3:44:cc:ef:57:d8:73:49:40:
         87:4f:3b:d8:24:c4:04:0a:02:ef:f7:eb:f5:da:99:98:d3:41:
         dd:c1:2b:e0:bf:2d:8f:ec:15:c0:13:09:68:ea:01:a3:0a:a8:
         42:5f:de:f9:cc:4d:36:02:51:14:c9:e9:15:f5:63:80:9d:fe:
         72:0d:e3:32:74:47:60:da:cd:81:5c:c3:89:70:3f:51:24:a4:
         cc:4a:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----