Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File:                     Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier:          7sZ94blUzwTQrHtkOvm5ccwTUeofaM6/+0xzPNo7gSE=
Subject key identifier:   6D:54:C2:58:02:93:4D:61:A9:27:2B:C6:16:A7:0D:5C:15:F0:CB:FC
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer:       /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial:       01962F3D8116C3602349A82C1681AAC2527B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number:          039C
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: iX0a+LwDWu77jNHL9+PvuUBpBCY6q82qmtOwrNazYd0=)
                          2: h73609pmEogi1mr5yal1sNR_aIM.roa (hash: xECkne1ZTJO+2XS9UZa/R12Y+brbcjW087xGv2+aPVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:81:16:c3:60:23:49:a8:2c:16:81:aa:c2:52:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=6d54c25802934d61a9272bc616a70d5c15f0cbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e9:32:bf:63:94:2b:51:60:9f:10:77:c5:ef:
                    a5:7e:6b:45:14:d8:42:a4:e4:7c:e4:15:75:82:86:
                    0e:e6:13:31:a1:73:dd:fd:8a:9c:14:09:76:d2:ee:
                    3e:43:29:bb:46:15:e0:cb:c9:4a:e9:bf:fc:56:28:
                    ea:44:ab:8f:0f:c1:a3:34:c1:82:7d:fb:52:62:41:
                    54:48:5c:ef:32:fb:bf:7d:f7:91:8f:f6:bd:cd:24:
                    0d:20:c9:a0:27:46:a7:a4:63:3c:79:3a:d1:0e:96:
                    8f:99:a7:ee:73:af:4a:d7:d6:66:28:d6:76:c8:f8:
                    c7:ea:fc:4f:d3:8f:87:2b:af:5e:4c:96:fa:0a:9f:
                    94:7c:2a:07:df:0d:34:2f:22:92:6d:fe:ba:9f:60:
                    6e:da:65:36:64:e2:f3:57:25:25:a9:f3:eb:29:b9:
                    dc:7b:3a:9a:83:b4:56:71:aa:70:ee:5e:5d:7e:29:
                    4d:b7:07:b6:6c:2b:f3:ee:bf:25:b4:35:9a:81:c4:
                    6f:93:57:bc:f7:6a:c4:f9:90:5e:c0:4b:51:ee:40:
                    fd:0d:39:36:36:f3:91:93:72:6d:16:cd:73:0f:14:
                    45:ae:42:6d:34:9a:8b:90:f6:43:3e:03:18:b8:9e:
                    e8:9f:14:9e:bc:92:db:d6:c4:63:13:50:05:d9:46:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:54:C2:58:02:93:4D:61:A9:27:2B:C6:16:A7:0D:5C:15:F0:CB:FC
            X509v3 Authority Key Identifier:
                keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:04:4f:e2:44:78:c3:21:29:a5:e3:9d:79:ca:9f:fc:a6:5a:
         38:c2:90:03:cc:94:52:78:78:cc:cd:14:4d:ac:c1:fb:43:41:
         8e:59:d7:55:54:2b:85:48:bc:5f:53:9a:87:73:6c:7d:06:f6:
         bf:da:4f:71:ac:53:dc:67:42:19:fa:66:82:b8:81:21:b9:2a:
         56:52:a5:86:0f:21:98:a8:1c:38:13:03:d6:b2:7a:9a:2b:b3:
         28:a6:85:d3:b5:9d:f8:37:1e:20:d4:3c:b8:0b:1f:b8:bd:ef:
         1f:b7:49:a2:f6:32:d5:6e:76:c0:96:9d:26:e1:8a:1c:b7:2f:
         9b:ca:20:34:54:cc:28:b8:6b:7b:b2:59:cc:43:ec:ee:70:f8:
         84:3d:20:c2:41:f2:ab:96:98:b9:45:31:54:52:6d:d2:80:f0:
         50:b4:f5:58:af:29:6a:2a:1c:72:66:06:7b:2b:ca:c0:fe:63:
         70:6b:65:15:48:1e:da:2d:b2:c3:8b:2b:5a:a4:d9:20:fb:cb:
         3b:43:e3:f7:e1:7a:c6:14:e1:95:3f:cb:61:38:d6:50:65:d1:
         50:20:f2:4d:21:44:de:6f:31:a7:4f:91:fe:bf:ed:53:d7:10:
         c7:b6:26:e8:8a:6a:5b:0d:92:19:13:9e:fb:94:88:38:ba:46:
         83:e9:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----