Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File:                     TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier:          Lu1nFRdogHngKRbptTmsVT6/clzqGBLSj3YU3xtMshs=
Subject key identifier:   90:5B:67:41:C0:C9:41:74:DE:03:CE:10:F9:FC:B9:4A:55:6E:53:F6
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer:       /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial:       01962F3D54E616E627726652639DC6EA34BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: lqnMNsdSMVxVx29nue71UAFKF56DBSHmz2Z2I3nRq+k=)
                          2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:54:e6:16:e6:27:72:66:52:63:9d:c6:ea:34:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=905b6741c0c94174de03ce10f9fcb94a556e53f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:eb:1c:83:36:65:d2:6c:9b:77:89:be:18:
                    a8:4f:93:98:78:cd:ea:2d:a3:35:61:08:c1:03:b7:
                    1f:d1:9a:1c:f0:b1:31:f4:a4:bc:82:bb:c5:a7:3a:
                    74:2e:29:c8:3c:aa:05:4b:55:86:0a:43:ce:be:32:
                    b1:b5:e7:97:28:9f:d6:68:63:38:2b:d3:5e:ab:b2:
                    81:67:e3:6c:d1:77:38:3e:54:f1:2a:4b:80:53:5e:
                    b1:29:11:41:49:cb:9c:ec:fc:eb:be:89:8c:db:51:
                    cf:ee:ce:6d:68:db:34:72:6c:41:5b:eb:7f:35:b9:
                    eb:fd:5c:a2:aa:de:95:58:9d:7f:18:2c:18:1a:aa:
                    dc:87:24:2c:73:9c:00:c1:a0:b7:12:14:2f:a7:8a:
                    35:81:3d:a2:5e:b1:41:9a:98:30:46:8a:47:cb:91:
                    5a:b8:1e:5a:82:1b:28:b8:a6:ee:dc:5a:26:e2:d4:
                    9c:d3:99:d7:1d:2a:3c:df:44:d9:2f:57:d0:c0:71:
                    ff:9b:84:71:a4:d8:a3:78:91:57:37:24:39:06:4c:
                    cd:1e:4f:17:62:8f:9b:3b:12:e5:33:1e:c7:85:0e:
                    b2:a5:24:ba:87:bc:9b:4e:8e:1e:48:ce:04:da:bb:
                    7f:c3:32:87:cb:3a:75:57:b2:9a:65:70:c6:3e:ef:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5B:67:41:C0:C9:41:74:DE:03:CE:10:F9:FC:B9:4A:55:6E:53:F6
            X509v3 Authority Key Identifier:
                keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:9c:d5:63:ca:ed:0e:aa:4a:0b:19:7f:35:3a:d9:5b:5b:
         ad:2f:74:4d:c1:94:a8:9e:e6:46:dd:60:60:07:fe:aa:74:47:
         91:2b:17:67:ad:ea:9c:8c:bd:33:c0:c5:cb:b8:e2:9f:42:5f:
         74:12:02:25:9c:8d:0b:d8:1b:8a:b2:60:c3:c4:74:27:90:46:
         13:db:d6:f7:1a:29:0b:86:4f:08:f3:bc:a3:95:d7:d5:cf:05:
         c0:82:9f:60:b2:7b:33:c6:cb:72:8a:d5:d9:43:dc:37:72:2d:
         a3:86:34:9a:9a:a3:7e:d7:b5:e3:e7:c9:79:13:c4:55:19:56:
         5c:8f:a5:2c:0e:68:b1:ba:a1:81:fc:95:7e:c7:ff:16:65:dc:
         62:a3:c6:89:2f:11:b9:df:97:0d:d4:c0:a1:f8:ec:74:7e:30:
         c3:c2:1f:09:fa:e2:ec:c9:5d:cf:e5:5f:9f:e2:8b:3a:2e:36:
         64:b9:75:27:d2:bc:5c:8f:21:24:19:02:cb:e1:80:fa:1e:4b:
         86:fa:cc:d0:f4:af:fb:25:30:8e:19:8b:6c:f6:0a:45:82:22:
         43:e8:29:9a:c4:a0:e7:d6:ed:c6:42:44:2b:fd:a5:cf:90:f2:
         b9:a0:39:e0:01:c9:77:b6:27:4f:87:4c:a5:af:e7:17:d2:ba:
         94:f7:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----