Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File:                     TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier:          oZDKJnNynUTfoxMxEwYdiyPKuToZCfUZ7AaURshCY6I=
Subject key identifier:   43:94:2A:79:B9:52:2B:A6:A7:26:41:6E:B7:AA:46:2F:58:68:9E:09
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer:       /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial:       01962ECFB0355EC9F1CA591CBFDEFE8DE2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number:          0292
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: y9sJqdzFBGj5UUlLa8dLo9gQT+S561iUWTDUc05Quy8=)
                          2: wqDhS7gdeGbdKyK4P2B2xid5RCk.roa (hash: pzt+fKb4dYAAFu+QRte1CXzAs8gCt6ejAy8RnTWXAJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b0:35:5e:c9:f1:ca:59:1c:bf:de:fe:8d:e2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=43942a79b9522ba6a726416eb7aa462f58689e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:1c:36:85:45:27:7e:8c:ef:65:aa:5b:95:
                    a2:09:1f:71:73:56:2d:eb:de:d7:ed:19:0f:07:b7:
                    10:d5:35:70:4f:7d:08:e6:d3:04:28:f8:8b:a6:71:
                    79:56:98:62:48:e5:aa:5e:2b:b1:1d:80:b2:0c:52:
                    b0:31:0f:52:67:9a:15:67:62:4b:9f:da:a2:49:c2:
                    20:f2:09:38:0c:64:ad:5f:45:dd:08:14:59:f7:87:
                    ba:dc:f2:1a:3a:79:84:f8:07:2f:b9:ae:4b:7f:26:
                    03:77:19:e6:19:da:19:c4:81:bd:55:3d:99:29:75:
                    d1:1b:a4:97:1a:4e:9c:39:50:f4:40:27:0d:30:83:
                    68:85:86:1c:22:ec:a7:cf:46:fb:2e:be:34:31:d3:
                    57:d1:72:48:cc:da:66:0f:d0:61:71:c8:17:c5:a9:
                    9f:10:12:45:70:18:9b:8f:a2:e5:f5:d5:57:d6:09:
                    51:82:df:c9:b1:54:be:5a:86:51:4e:5e:f1:40:6c:
                    31:3a:4b:30:e5:d4:c2:bc:48:0d:dd:06:86:86:1d:
                    5f:86:58:0b:dc:64:5b:fb:68:06:42:e1:6b:68:5e:
                    68:e2:2f:d5:51:11:ad:a1:17:64:79:5f:11:de:bc:
                    20:33:fa:49:d3:3d:47:e9:14:d1:64:91:eb:25:8c:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:94:2A:79:B9:52:2B:A6:A7:26:41:6E:B7:AA:46:2F:58:68:9E:09
            X509v3 Authority Key Identifier:
                keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:e8:f4:17:d9:6b:aa:0a:5e:28:94:ba:fc:b6:6e:25:f3:
         69:de:e8:cc:ee:6f:14:7f:ad:4f:0c:82:89:90:30:6b:d6:31:
         91:de:ac:41:ce:b5:a6:b0:51:b9:54:a1:93:b7:11:dd:7d:e1:
         8e:0b:f5:c2:f5:b1:ca:1c:8d:f1:62:91:bc:c0:b3:ee:e7:7b:
         d3:b9:16:e2:33:02:18:6c:84:ad:67:ee:c7:ef:21:ee:be:e3:
         e6:e1:cb:e8:f9:0a:d3:b6:72:65:87:f7:21:32:8a:74:81:e6:
         6a:99:ef:94:cb:83:17:b3:ce:73:6a:98:e2:58:a3:f3:de:1e:
         f8:04:c8:07:3f:dc:af:c4:0d:97:b6:c4:93:f9:7a:18:8f:1b:
         49:a2:23:f3:f3:1b:5b:12:d1:3f:80:36:cc:85:ba:eb:57:cb:
         77:52:67:70:44:5b:0d:a9:1e:e1:f2:ce:21:07:38:ca:fd:b3:
         9f:41:e1:46:19:31:3c:16:8e:57:b4:c6:08:2c:ec:20:a2:b9:
         b0:b9:f6:a6:c0:2f:0e:de:3c:e8:26:ef:1e:49:a7:d6:e1:e2:
         bb:4b:b5:7b:42:73:d9:d4:90:0b:ef:6f:07:fb:7d:84:83:73:
         4b:51:a0:be:ea:a9:f0:4f:36:fb:12:92:17:6a:fc:f9:6c:76:
         ce:c9:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----