Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
File:                     TjS6bj4mlMezjkZRr-4GGwsh3q4.mft (raw, json)
Hash identifier:          nP+8TXBLtMnyv8QjfGSrA2YEb8ksO6mE7i/+yHmwimI=
Subject key identifier:   64:A6:A6:26:DC:2B:2D:8B:58:81:25:91:F0:31:32:CE:15:81:9D:A3
Authority key identifier: 4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE
Certificate issuer:       /CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
Certificate serial:       01962E99A9CE1FE69A378CBB09E3F21D6901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft
Manifest number:          0B
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: TjS6bj4mlMezjkZRr-4GGwsh3q4.crl (hash: OGjDYH+MKE1id4JiM+1k/RzeQBOOsdX+HG0OoSiiZMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a9:ce:1f:e6:9a:37:8c:bb:09:e3:f2:1d:69:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e34ba6e3e2694c7b38e4651afee061b0b21deae
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=64a6a626dc2b2d8b58812591f03132ce15819da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:06:23:57:be:ab:7c:d0:bd:1c:e4:bd:40:42:
                    bc:89:fb:de:6f:97:c8:39:94:c6:29:78:7b:94:b1:
                    91:dc:a8:8b:dc:7b:f4:a4:dd:4a:80:c5:47:0a:96:
                    c8:37:c2:6b:1d:a7:c1:52:02:33:79:5e:29:4f:d0:
                    5d:70:a5:ec:5e:fc:42:4b:ca:f3:4c:6b:eb:88:d5:
                    b4:15:65:1d:4f:0f:db:93:4b:e6:ec:28:e2:45:49:
                    c0:16:f2:2e:41:fe:10:22:c8:79:78:d4:27:22:49:
                    43:bd:66:00:56:98:d8:42:8a:ef:ce:62:9f:8a:57:
                    b0:8c:e2:e7:3b:69:12:f2:d6:10:14:f4:6e:5c:0b:
                    87:d2:61:21:08:65:e4:98:7a:81:9b:4b:9b:5c:57:
                    90:d7:7b:16:e1:4e:a1:7c:12:2d:ac:a3:1c:fa:1c:
                    70:90:26:31:12:6c:9a:52:b5:17:c3:b1:e5:e1:84:
                    57:f2:e8:50:49:ac:fb:3a:92:1b:d7:8d:a3:df:1c:
                    9b:29:08:eb:a2:b3:7a:ee:a2:7a:77:6d:47:71:4a:
                    90:4a:81:b2:0d:a0:c4:cf:34:e0:a3:22:a2:68:78:
                    3d:57:cd:09:85:fa:27:29:f0:65:32:eb:e7:26:20:
                    1f:d0:cf:29:bd:b6:85:78:97:2e:2b:36:45:23:56:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:A6:26:DC:2B:2D:8B:58:81:25:91:F0:31:32:CE:15:81:9D:A3
            X509v3 Authority Key Identifier:
                keyid:4E:34:BA:6E:3E:26:94:C7:B3:8E:46:51:AF:EE:06:1B:0B:21:DE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjS6bj4mlMezjkZRr-4GGwsh3q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02b7d6-269b-4bb2-b455-391768573496/1/TjS6bj4mlMezjkZRr-4GGwsh3q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:88:fd:22:f0:07:79:96:06:a7:93:ac:55:0b:ad:a3:ee:09:
         7c:2e:ea:9f:ef:b9:48:bb:61:ad:30:c3:a7:18:1f:b7:39:62:
         4d:27:7b:a4:5f:5c:be:c1:59:ed:03:55:7e:1b:de:59:d8:0b:
         10:3e:b7:47:a7:7d:42:6a:2e:29:6c:b9:f4:c0:92:6a:c9:94:
         23:00:c8:e6:85:3e:e2:c4:f9:bb:d6:11:a5:07:30:73:0a:b2:
         f5:48:af:9a:77:07:03:ae:b7:10:d6:35:bf:b0:55:cd:63:00:
         a4:aa:43:d5:fc:18:20:da:5e:b8:ca:af:a6:86:4c:a6:ad:51:
         74:1a:55:3b:72:98:e2:63:2f:f6:cd:b0:46:3c:91:3b:1a:2a:
         ec:c5:9a:95:45:11:c4:40:72:8e:5a:03:bf:41:c6:67:b8:3c:
         1b:98:8a:f3:13:6d:d9:9e:a9:cb:22:c8:78:2d:44:20:35:6b:
         a1:40:5c:45:59:85:8e:e7:a1:f9:21:78:df:6a:37:02:37:23:
         f6:07:9c:8f:b8:b4:19:f6:ab:aa:64:31:0e:63:27:22:7b:58:
         f0:6f:a8:dc:4a:5e:39:b5:db:d6:cf:2d:73:51:9c:10:55:ff:
         a3:9b:35:4d:78:3d:74:1c:a9:18:0a:53:a8:6a:9e:34:56:59:
         95:2b:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----