Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File:                     TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier:          NVNEC7VM8Z7GljjNA/8RMYEWXa8NHTNaRsU/rDe9Ngw=
Subject key identifier:   18:53:77:1C:64:55:2D:0A:C4:03:5D:4E:20:81:80:E8:1B:A7:97:21
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer:       /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial:       01962F74CBD7A45BB4E32E2C7E72D52CDC34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number:          D9
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: Rxi4Rn2r/u5H1tZmATpkY1lSy3SDbxj53F0MOzK4nXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:d7:a4:5b:b4:e3:2e:2c:7e:72:d5:2c:dc:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=1853771c64552d0ac4035d4e208180e81ba79721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:85:aa:fa:d1:b9:62:aa:41:92:f0:e0:f9:
                    5e:db:fe:f2:5a:1b:5d:e4:b5:36:1b:d5:07:64:ef:
                    86:b8:99:1c:a3:37:95:4f:e9:99:2e:a5:22:b0:d6:
                    7b:e2:ce:13:1a:6c:f2:34:5b:40:6a:34:ec:4b:b6:
                    1e:51:11:26:75:a6:55:81:15:d7:e4:af:fa:d4:be:
                    30:87:fd:d4:b5:71:8a:f4:76:42:49:9a:24:02:bb:
                    0a:ad:a6:dc:0b:25:5d:6f:43:b1:81:f9:ea:1e:e6:
                    2b:0f:87:2b:9a:0c:1c:ef:8f:e5:25:73:a4:63:39:
                    94:83:b7:b3:15:ae:ac:87:6a:10:d1:36:17:e4:54:
                    32:c9:6a:9d:e2:ce:94:72:6f:6e:74:d2:96:99:3d:
                    70:98:62:2d:0d:3b:59:33:8e:29:80:76:d3:74:d9:
                    7f:ff:8e:67:56:8a:95:00:b5:4d:c1:d7:56:48:43:
                    2d:f5:46:81:05:2a:ae:af:f7:83:67:2c:98:cb:13:
                    2f:13:5c:b4:e1:84:60:05:7b:31:74:fa:0a:f7:a1:
                    87:42:0e:ef:f8:8a:17:6f:c3:86:2a:26:1e:65:d4:
                    aa:13:82:2e:de:82:84:4f:1d:78:b9:f3:c0:cc:fc:
                    d6:57:b7:75:60:e1:20:e2:6a:e7:96:48:87:60:bf:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:53:77:1C:64:55:2D:0A:C4:03:5D:4E:20:81:80:E8:1B:A7:97:21
            X509v3 Authority Key Identifier:
                keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b7:8a:4a:3d:8d:64:cf:9f:c9:3b:86:a8:8b:20:84:12:ec:
         a8:8f:5b:47:97:f2:0c:e3:48:8b:12:44:82:6a:d0:05:45:14:
         67:5d:88:2b:13:16:cd:eb:1e:66:33:ae:b8:61:b2:06:cf:17:
         5a:c3:16:15:c1:a5:ed:a7:2f:20:c4:63:f4:00:9a:fe:57:fe:
         cc:18:f3:8e:e5:42:3a:e4:72:de:fb:45:59:37:67:ed:f6:a1:
         34:c8:7b:af:12:62:95:47:84:db:ff:21:84:96:0e:45:91:25:
         02:78:67:63:23:25:a3:46:db:83:a3:58:db:b8:d2:48:92:a1:
         46:be:8b:c0:8e:34:fb:f9:7a:d6:fe:87:65:90:b8:28:7f:58:
         fe:ff:9f:6f:ee:e7:77:87:47:be:49:55:47:68:dd:f5:56:7b:
         d0:b1:23:f6:cc:8c:ce:e9:b1:c5:7b:12:f1:7e:2b:73:d4:67:
         05:c7:38:89:76:1d:88:f8:d2:38:fd:6a:61:fd:db:f0:bc:4a:
         39:a7:a2:67:17:3d:7d:a8:3a:39:7f:00:f3:e5:e9:9e:03:5a:
         a1:2a:72:ce:e5:68:33:63:42:0f:97:f1:4f:2f:e1:39:cc:0a:
         da:6c:e3:8c:be:03:97:46:97:c9:b8:8d:b6:c7:b4:44:2d:36:
         4a:e2:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----