Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
File:                     TKha1Dt7R-dSh4MHGEeU1woCdmw.mft (raw, json)
Hash identifier:          OChnjiW9X/TNXlSjG3Iljg51to19++KQXUy7ZCfajPw=
Subject key identifier:   4C:F6:1A:41:D2:11:F3:BF:F2:52:F7:9A:F6:2E:48:50:2B:B8:B5:68
Authority key identifier: 4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
Certificate issuer:       /CN=4ca85ad43b7b47e752878307184794d70a02766c
Certificate serial:       01962E2B3720F31423F8860489984A8B0032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
Manifest number:          6F
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: TKha1Dt7R-dSh4MHGEeU1woCdmw.crl (hash: U1/9ZcPdBN/LkD2opnDwWKfTWs7NF0eNpC84ps2PVN8=)
                          2: cpRFayTuWEzodEO-QznXVMR-alE.roa (hash: wcJbOFjwwy8ZnD5yiXe5CzeprbHM7YA3HHhv8zEs++s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:37:20:f3:14:23:f8:86:04:89:98:4a:8b:00:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca85ad43b7b47e752878307184794d70a02766c
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=4cf61a41d211f3bff252f79af62e48502bb8b568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:c9:60:ad:46:a4:11:d6:35:f0:8a:84:7b:
                    04:0e:6d:3c:1e:ab:c1:37:f5:62:39:0d:93:df:b0:
                    b0:08:01:c6:b7:69:87:be:3c:9b:30:b5:a0:44:20:
                    52:23:49:45:f2:fd:d9:15:5e:6e:e0:e4:07:7b:b7:
                    d6:7f:ae:72:ac:bd:d4:f5:28:9d:7b:78:4f:5d:cd:
                    50:c1:17:32:ee:9e:f2:70:ee:e4:ad:0f:32:91:d0:
                    a2:98:0b:e3:31:d5:09:13:96:8c:89:6a:54:9e:a1:
                    d3:29:49:f7:f2:20:0f:ac:3d:c9:92:ad:10:9b:23:
                    5c:13:1e:f7:3e:74:ce:5e:c5:bd:1f:a6:ac:5a:5e:
                    42:66:46:c1:4f:a4:9c:e1:3d:b5:ba:80:33:86:f0:
                    b6:67:f5:84:36:37:71:c2:94:0e:ec:7b:48:17:c5:
                    db:f4:45:6c:26:49:d3:9c:a3:cf:be:91:d5:b5:17:
                    05:ae:9c:ce:fd:4f:38:25:79:be:42:b7:60:ce:65:
                    28:08:79:da:ef:37:a5:bc:cd:8f:8f:2c:49:e2:82:
                    03:48:3b:cd:cf:d3:ed:be:fe:9e:16:5b:f9:95:f5:
                    65:d4:a1:6e:3a:16:86:65:ce:b9:36:5d:00:d7:31:
                    a7:e6:1b:1c:fa:3d:4b:e1:3b:0f:d3:a5:07:44:b8:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F6:1A:41:D2:11:F3:BF:F2:52:F7:9A:F6:2E:48:50:2B:B8:B5:68
            X509v3 Authority Key Identifier:
                keyid:4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:db:52:93:55:69:94:90:1b:f8:75:5e:f2:45:bc:cb:9c:6e:
         f9:ad:51:a0:75:53:93:00:e3:15:93:9f:0f:54:75:94:e8:8f:
         4c:04:b1:0b:5b:26:76:f6:cb:86:7f:e3:35:37:ff:10:bc:80:
         41:30:12:0e:e6:ca:92:22:df:54:21:63:4c:0b:ba:49:9c:ae:
         5e:ed:06:73:a1:58:ca:79:71:a8:f3:80:0d:91:4c:06:b1:1c:
         e7:e2:82:4f:e4:7e:97:42:be:ba:73:4d:f0:16:4a:d9:b1:30:
         cf:41:b6:d4:e0:44:f8:56:df:63:5b:f9:08:96:fe:c2:51:1a:
         47:00:e3:31:6c:a7:cc:06:b8:c1:10:88:2e:d0:35:17:fa:b3:
         b1:98:ff:dd:2d:68:29:b9:74:57:71:a2:cb:c0:ca:c7:70:33:
         a8:05:ed:c6:c7:e4:b1:77:82:7a:0f:ee:2d:d3:ec:d4:d7:3b:
         65:18:e6:90:f8:6f:65:c7:4f:03:b4:43:70:44:b3:21:02:7c:
         c8:7e:cd:9e:d7:7e:44:0a:a4:64:5d:a2:6a:f7:f5:22:bc:56:
         f5:b4:3f:63:d9:52:0e:c4:2f:ca:ea:44:7d:c6:dc:e8:23:73:
         09:4f:5a:36:f3:2a:ef:56:b7:33:65:31:8b:1e:a9:0a:a2:f3:
         25:6a:01:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzcg8xQj+IYEiZhKiwAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTg1YWQ0M2I3YjQ3ZTc1Mjg3ODMwNzE4NDc5NGQ3MGEw
Mjc2NmMwHhcNMjUwNDEzMDgwMTQ2WhcNMjUwNDE0MDgwMTQ2WjAzMTEwLwYDVQQD
Eyg0Y2Y2MWE0MWQyMTFmM2JmZjI1MmY3OWFmNjJlNDg1MDJiYjhiNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+TJYK1GpBHWNfCKhHsEDm08HqvB
N/ViOQ2T37CwCAHGt2mHvjybMLWgRCBSI0lF8v3ZFV5u4OQHe7fWf65yrL3U9Sid
e3hPXc1QwRcy7p7ycO7krQ8ykdCimAvjMdUJE5aMiWpUnqHTKUn38iAPrD3Jkq0Q
myNcEx73PnTOXsW9H6asWl5CZkbBT6Sc4T21uoAzhvC2Z/WENjdxwpQO7HtIF8Xb
9EVsJknTnKPPvpHVtRcFrpzO/U84JXm+QrdgzmUoCHna7zelvM2PjyxJ4oIDSDvN
z9Ptvv6eFlv5lfVl1KFuOhaGZc65Nl0A1zGn5hsc+j1L4TsP06UHRLhZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz2GkHSEfO/8lL3mvYuSFAruLVoMB8GA1UdIwQY
MBaAFEyoWtQ7e0fnUoeDBxhHlNcKAnZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtoYTFEdDdSLWRTaDRNSEdFZVUxd29DZG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYmVhOGYtOWZiYy00NzY1LTkzYmMt
MjIyMjUyOTI5ODczLzEvVEtoYTFEdDdSLWRTaDRNSEdFZVUxd29DZG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yYmVhOGYtOWZiYy00NzY1LTkzYmMtMjIyMjUyOTI5ODcz
LzEvVEtoYTFEdDdSLWRTaDRNSEdFZVUxd29DZG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9tSk1Vp
lJAb+HVe8kW8y5xu+a1RoHVTkwDjFZOfD1R1lOiPTASxC1smdvbLhn/jNTf/ELyA
QTASDubKkiLfVCFjTAu6SZyuXu0Gc6FYynlxqPOADZFMBrEc5+KCT+R+l0K+unNN
8BZK2bEwz0G21OBE+FbfY1v5CJb+wlEaRwDjMWynzAa4wRCILtA1F/qzsZj/3S1o
Kbl0V3Giy8DKx3AzqAXtxsfksXeCeg/uLdPs1Nc7ZRjmkPhvZcdPA7RDcESzIQJ8
yH7Nntd+RAqkZF2iavf1IrxW9bQ/Y9lSDsQvyupEfcbc6CNzCU9aNvMq71a3M2Ux
ix6pCqLzJWoBLg==
-----END CERTIFICATE-----