Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          ZCpR2RAQWNXfYF5RbBm4stsBjl2OCq1twvitas4Cu7E=
Subject key identifier:   3A:91:46:A2:1D:8D:CA:B6:52:42:4E:C3:4D:5F:0F:A1:FC:E8:3E:6F
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       01962F74322C74CBB7C1425F3DC60ECB3C89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 1-3XflNe0k3QXZPA5cmOmVXUVk4k.roa (hash: EOxsCadON2KcZNrQxz29cfWR8eSAuCeFKTgS66ed6p8=)
                          2: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=)
                          3: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          4: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          5: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: EK/Q73COnPYu+NNurI2AAsgMfKzZ7MZNbO4Q0K2AHwo=)
                          14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=)
                          15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:2c:74:cb:b7:c1:42:5f:3d:c6:0e:cb:3c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=3a9146a21d8dcab652424ec34d5f0fa1fce83e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:41:0e:6e:4b:52:16:eb:8c:e3:6d:ae:e4:
                    b3:0c:30:0b:61:04:5f:ca:5b:67:21:7f:a2:14:20:
                    29:b5:69:fc:7b:ce:1f:ca:3b:83:c0:63:79:f7:0b:
                    ea:8f:6f:2a:88:45:f7:0c:f4:0c:f3:95:60:03:0f:
                    9c:18:84:f2:85:77:be:b2:27:09:a5:46:df:5c:77:
                    a0:e1:a2:91:7f:77:90:48:d0:21:38:d2:cd:4e:d6:
                    f3:52:85:24:45:ec:52:22:f4:49:86:0b:98:52:33:
                    ce:1e:13:7e:69:fa:31:51:48:67:a9:de:87:76:a9:
                    df:2c:f7:63:75:08:2d:aa:4c:65:df:37:c8:93:7b:
                    9a:8c:ea:8a:14:f2:84:79:49:d7:98:cb:df:f0:eb:
                    6b:61:40:fc:2c:79:58:62:7f:64:38:49:4e:20:ce:
                    a2:34:28:8e:99:de:9b:21:82:b1:dd:e5:f7:ca:d4:
                    93:74:69:22:69:b7:99:7e:ee:9f:a6:2c:73:5b:9d:
                    e2:58:77:a4:57:76:c2:fa:f2:57:56:f1:cb:1a:ee:
                    51:47:6e:73:92:12:4c:c1:22:32:c4:c2:83:94:59:
                    72:b6:d8:1a:b0:b5:06:14:08:75:3e:cb:33:43:4a:
                    6d:ee:4a:11:fe:d2:a5:11:02:a7:80:d3:47:c1:52:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:91:46:A2:1D:8D:CA:B6:52:42:4E:C3:4D:5F:0F:A1:FC:E8:3E:6F
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:84:78:2c:90:8b:79:cb:18:b1:3b:31:35:2d:1e:79:d8:
         f9:58:ca:78:8d:9b:ad:80:dd:84:6f:33:59:ef:49:18:2b:e0:
         b2:85:ad:28:70:1d:5f:4a:c2:0f:2d:52:8d:1f:3d:a8:b6:43:
         55:68:ec:93:24:ab:68:48:aa:ca:90:09:9f:92:2f:4b:84:45:
         20:b4:33:74:62:d1:f9:7a:84:ff:11:a6:45:df:1b:1c:7e:ee:
         45:b2:0f:3a:3d:59:3c:64:bf:32:fe:9e:4e:70:6c:09:67:d8:
         2f:4b:38:1b:b9:af:c5:4f:c1:a4:20:57:ef:07:8e:bc:fb:f0:
         6a:ae:d1:f5:f4:e2:ad:b4:c2:01:c2:95:ee:9d:1c:cd:0e:fd:
         42:2b:c3:6a:0e:3c:65:9a:0a:fc:f6:48:51:01:3e:e5:84:a0:
         d0:a5:ed:9f:6c:46:b8:16:3d:64:a9:a5:0a:20:45:a6:b9:9d:
         da:5e:af:a0:0c:9f:6f:96:b3:3a:2b:7f:a7:21:35:ca:3f:e2:
         42:e1:cf:21:2c:77:d0:3a:62:6e:27:a9:b8:81:4d:c1:99:97:
         1a:12:81:9a:de:c8:99:6a:ae:94:19:55:36:fb:88:de:3b:78:
         28:cb:c6:5b:52:3e:f7:36:85:1c:06:e2:4f:4e:69:14:46:f6:
         e9:0e:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----