Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File:                     TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier:          I3wP5na1kkEFhx8WHRg/IZO6pL4dH3DhcWd4LJc0nsY=
Subject key identifier:   61:90:EA:69:59:A2:7F:D2:9E:BD:DF:64:EA:DB:20:01:04:76:FC:BA
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer:       /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial:       01962ECF8AA164B06AC3D1F28F401F2E21CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number:          14C5
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
                          2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: lJjwywG1fVBEbf2rEHGa9I5KslIF6LiYXiWBdokxU3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8a:a1:64:b0:6a:c3:d1:f2:8f:40:1f:2e:21:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=6190ea6959a27fd29ebddf64eadb20010476fcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:22:df:f4:28:de:2a:c9:b3:82:19:eb:66:
                    8b:74:b6:de:36:e8:c3:4c:d9:5e:63:b9:24:36:6b:
                    c9:ad:77:f1:9f:bf:31:1f:c7:78:1b:ff:50:70:94:
                    00:6f:27:26:e1:1d:e9:e4:72:b2:08:13:e2:e8:e3:
                    13:76:71:8c:65:18:8d:78:40:20:ac:0d:8e:c1:8f:
                    ea:9f:4a:07:05:33:d8:1c:5b:0c:21:a3:e4:3a:3a:
                    db:33:0b:a6:1e:d4:6e:14:63:b9:ae:d4:ff:a2:88:
                    86:9f:a7:ba:d7:3a:bd:ab:24:24:58:27:97:db:32:
                    e4:24:ba:9c:fc:f3:3f:1a:c3:e8:31:6f:a4:de:39:
                    2d:27:2a:87:2c:b6:cc:ee:e5:67:b9:1d:3f:83:b2:
                    47:7e:4e:28:8f:be:f8:68:b7:f2:af:c2:f1:5e:3f:
                    70:54:54:a5:26:44:b9:44:ef:2e:be:72:e3:2b:13:
                    57:5c:33:72:e5:81:45:13:f4:16:a4:5e:70:a0:cb:
                    76:5e:14:32:53:7e:84:da:8a:e8:77:4c:ce:78:35:
                    31:b8:2a:8b:55:91:1e:3e:1c:b3:17:35:a9:20:fc:
                    bf:56:a8:08:1e:2c:60:5d:83:b7:8b:79:12:75:fe:
                    97:22:3a:99:ae:3a:e5:66:44:43:c2:cf:a5:4d:8d:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:90:EA:69:59:A2:7F:D2:9E:BD:DF:64:EA:DB:20:01:04:76:FC:BA
            X509v3 Authority Key Identifier:
                keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:b8:11:63:8c:ef:f2:8f:08:f1:aa:5e:a3:90:aa:b8:a5:
         27:26:9c:ca:d2:ee:09:7b:56:14:fc:52:b8:e9:d9:02:7f:c8:
         9f:73:da:1b:17:c6:0a:16:5c:54:8c:85:b0:cd:9b:e7:f6:78:
         06:1d:6f:17:bb:2d:d8:97:96:ad:8f:1c:fe:2e:88:32:65:44:
         41:49:dc:bd:6e:f2:b1:8b:15:db:dc:b3:00:fc:01:e1:24:7a:
         3b:41:15:c2:1e:62:71:b0:e4:42:cf:9e:75:4e:06:b1:95:13:
         e0:84:df:c4:32:54:8d:84:34:dd:43:f5:a2:43:71:5b:fc:a1:
         cc:ed:61:6a:c2:9c:b2:9b:0d:ba:91:4d:aa:b8:55:4f:20:08:
         ac:55:d5:8f:17:f7:13:c2:30:e3:34:bc:21:44:a5:bf:3e:e0:
         62:0e:6b:1a:a2:bf:1b:bf:e1:f1:26:80:ff:ad:35:a2:7b:f0:
         d8:84:1f:fd:38:c9:8f:59:2a:c2:40:25:12:03:55:8c:16:4b:
         85:5d:56:21:54:7d:3f:2d:4a:4a:51:57:49:31:8a:d2:01:6d:
         ab:7f:02:98:3c:72:11:e6:b3:02:64:5b:08:ae:5b:3b:0d:6e:
         ba:19:7b:49:da:73:86:2b:ca:cb:18:3f:b8:7b:15:29:c0:11:
         3f:ef:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----