Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File:                     TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier:          MehufMhR+JvDJsky/mIQYOslw2JA6YCrU+d868Bcdd8=
Subject key identifier:   34:7E:77:4D:B4:E2:B9:B3:04:CA:46:11:4F:9F:27:AE:70:38:1C:2E
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer:       /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial:       01962ECF5588CC05A4739A6F17187231341D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: t48WyN9jWiE4LA9Y5HCAoa6HF6j9g8+2rjzDo6kvjQ8=)
                          2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:55:88:cc:05:a4:73:9a:6f:17:18:72:31:34:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=347e774db4e2b9b304ca46114f9f27ae70381c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:11:b3:1e:50:b3:c0:9c:4f:4f:75:14:d2:
                    40:3c:43:90:42:26:3d:a0:0a:c7:b0:92:a2:79:aa:
                    0d:58:54:22:f6:42:6e:f7:21:ee:d0:52:1b:03:29:
                    00:9d:fc:e5:a3:2d:01:63:e6:bb:f8:9d:b1:ae:5b:
                    95:0e:54:a1:79:33:af:e6:f9:ed:b1:95:a5:4c:ac:
                    68:e5:c0:15:bf:f3:67:80:13:37:6a:f9:4b:3c:b3:
                    b6:8f:91:19:9a:cd:7c:f4:0e:3e:b7:57:57:db:59:
                    86:eb:bb:ef:07:3d:a4:c1:aa:17:ce:f9:15:76:2f:
                    0d:e8:cd:af:be:c8:d9:74:0a:01:c8:ae:4f:13:c5:
                    ee:08:cb:79:6e:a4:db:88:a9:57:89:0d:cf:92:b7:
                    f4:c0:a3:dc:30:2a:90:94:f3:f6:ab:8d:88:6d:c2:
                    b9:5b:3a:a8:f1:e9:5c:26:46:07:9f:5a:f4:ed:87:
                    af:4e:f1:82:13:22:36:f6:7f:6f:4c:cb:f0:4b:a8:
                    55:c0:75:fa:05:b5:3b:4c:58:f4:0b:9c:d2:6c:75:
                    5c:e5:77:bb:cd:30:43:61:c3:b1:19:22:bb:fe:35:
                    15:7d:c6:bf:b4:af:b0:51:d2:2d:d2:65:eb:e2:43:
                    d1:44:d8:24:04:2c:2b:71:53:4b:7e:7d:a0:a3:47:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7E:77:4D:B4:E2:B9:B3:04:CA:46:11:4F:9F:27:AE:70:38:1C:2E
            X509v3 Authority Key Identifier:
                keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c3:86:0a:9a:eb:9c:3a:99:85:c1:12:50:a1:15:94:40:c0:
         49:6c:90:fe:2f:28:07:55:6a:43:94:8c:4c:c3:b5:b6:43:14:
         b2:4e:e3:1b:b3:bd:cb:60:13:0d:05:69:95:96:5f:1f:0c:43:
         ef:e1:bb:73:d0:bb:c8:4a:91:f8:6e:d9:20:5e:05:67:45:f0:
         f9:b5:98:b0:41:d0:bf:73:d1:07:71:0c:40:c7:ba:6f:1c:63:
         fc:74:47:3e:73:a8:80:67:1e:9a:0d:a9:dd:6b:05:2f:44:65:
         99:d0:11:a8:46:9c:ff:3a:39:6b:ed:0e:5a:46:3f:c4:b8:28:
         e1:7a:b7:f3:d3:7e:ef:14:84:05:4b:56:f2:e7:c1:9f:4c:e5:
         bd:c0:c0:c4:ab:df:98:a7:64:9b:1c:c9:9a:e7:6e:47:c2:94:
         6c:32:dd:7f:fd:fa:93:dc:8e:43:dd:7b:71:9a:36:32:2e:cf:
         fe:21:b0:54:68:eb:ad:5d:16:dc:56:27:45:b6:9c:92:5b:59:
         5f:fe:4a:ec:46:37:07:76:32:0d:4a:8b:0d:11:73:1c:c4:09:
         d4:6f:d8:58:18:d4:90:c4:03:ca:6b:ea:d9:49:ed:88:97:3c:
         8d:3d:ab:33:89:b3:01:c8:7a:24:dc:99:18:8a:d1:51:4e:ab:
         28:82:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----