Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File:                     TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier:          YqQro/oKE0SYKd3VsGzdJqYmjWmr95GfbRuAnBhzuAM=
Subject key identifier:   1E:F6:63:B5:DD:35:28:64:C0:A8:72:E4:37:AA:B6:5D:91:B8:88:16
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer:       /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial:       01962DF45FBAC2DE9F11F87D2492EB7EE44C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:52 +0000
Files and hashes:         1: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (hash: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=)
                          2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: ALybckFkmKXfe/3/ZSAeBYj2n1qtecaXZEiH8UBPdbU=)
                          3: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:5f:ba:c2:de:9f:11:f8:7d:24:92:eb:7e:e4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
        Validity
            Not Before: Apr 13 07:01:52 2025 GMT
            Not After : Apr 14 07:01:52 2025 GMT
        Subject: CN=1ef663b5dd352864c0a872e437aab65d91b88816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:54:4b:30:f9:c5:ba:78:40:7e:09:29:42:
                    80:52:c8:79:7b:1f:7f:96:75:38:ac:48:42:36:3b:
                    31:24:e3:7c:15:17:3c:6e:07:f8:5c:17:8b:7d:a6:
                    67:5c:a3:57:75:ef:6d:88:cd:06:78:75:71:5e:2a:
                    39:94:3a:b5:59:1c:e3:9f:c5:b9:01:8e:4d:6f:34:
                    71:73:d1:d4:f8:07:ce:56:5f:0f:e2:f2:f2:3b:dc:
                    5d:71:c7:b3:f5:77:0c:94:6d:52:1a:dc:07:e8:e0:
                    28:03:63:86:38:d2:16:4d:33:ae:ed:7c:53:0a:21:
                    f2:18:a3:2a:a3:6a:b6:b5:2e:c7:bf:49:59:ab:83:
                    21:54:bc:2b:b3:34:c1:da:e1:4f:26:71:54:8f:77:
                    5c:fb:60:d3:67:22:74:dc:79:f5:78:68:48:be:15:
                    8f:82:d8:7c:25:ff:fe:c0:7e:28:2d:88:c7:04:27:
                    b1:8f:55:02:33:fa:84:7b:1c:0d:67:b9:34:d1:2b:
                    93:8f:bc:0c:b3:47:8e:a3:4e:b4:5b:14:0f:1e:85:
                    b0:41:a3:17:03:e2:70:c4:72:2d:82:4b:8c:d1:7c:
                    0f:c3:e3:fe:10:dd:b8:df:45:e3:83:a9:f5:30:87:
                    41:09:b6:ec:25:fd:02:0d:85:de:d1:b7:eb:68:6f:
                    c3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F6:63:B5:DD:35:28:64:C0:A8:72:E4:37:AA:B6:5D:91:B8:88:16
            X509v3 Authority Key Identifier:
                keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:87:38:9d:89:27:2f:f6:a4:01:d3:0f:93:42:31:a7:21:2d:
         2a:80:dd:97:e7:5f:7a:24:49:e7:32:2f:e1:d9:75:a1:0d:35:
         87:b3:a8:db:f3:fe:53:3a:5b:ec:e6:f0:18:49:6c:b0:3a:ce:
         c5:60:4d:61:54:71:3a:79:29:f3:00:23:ba:ca:31:59:33:22:
         30:59:b0:9c:1d:40:0c:31:57:42:93:c8:24:2c:5a:78:fc:e1:
         4b:55:c1:a2:bb:31:37:f7:b1:81:06:c0:a5:4e:06:94:4b:ab:
         25:72:b9:d2:db:b6:70:27:0f:7e:ea:cd:5a:2a:39:db:95:ab:
         32:4d:b5:55:c3:10:10:36:89:2d:32:61:5a:24:17:15:1f:e3:
         bc:86:ae:04:ce:aa:ee:88:7a:10:57:e2:9e:77:03:c8:a9:03:
         03:3d:1c:42:3f:e9:41:26:18:35:71:d4:b8:5e:b3:fd:79:75:
         03:7e:70:86:8e:8a:6f:a6:b7:e9:14:81:5e:0b:98:1a:42:69:
         c2:e3:db:05:e7:b3:01:dc:81:f3:f5:9f:ac:01:71:74:95:72:
         67:67:93:96:7c:91:aa:59:6f:ef:2b:2c:36:d9:9e:c4:90:9e:
         82:dc:4e:61:07:61:0f:23:e7:f4:5f:d1:ce:d7:68:04:4a:e5:
         de:5c:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----