Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File:                     TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier:          Rc+BTuBQcwZ/rG7DZ2zgORKa4ptxqILE6BVUNbz8KbU=
Subject key identifier:   75:BA:B7:10:21:86:A8:3C:9C:83:12:0F:85:4B:B3:37:F7:94:CB:C4
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer:       /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial:       01962E2B0E12A12DE06CC8D588E46C6567A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number:          0438
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: UDLlURqetLUg/LNNc58DBCdp5BQcXkKP/lGIwr6aDrw=)
                          2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0e:12:a1:2d:e0:6c:c8:d5:88:e4:6c:65:67:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=75bab7102186a83c9c83120f854bb337f794cbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:a7:3a:11:b1:c0:9a:37:6f:ae:8e:4f:d2:
                    9d:e3:a5:94:61:09:b9:be:67:79:8a:31:be:37:5c:
                    b1:c3:a8:53:1a:97:e9:68:ab:5b:61:0e:e2:b6:ee:
                    c5:d4:54:c9:44:18:99:19:58:2c:19:83:ad:5a:c8:
                    a1:b2:54:b1:a0:c8:0e:96:9c:2d:a5:02:31:22:3a:
                    7e:83:eb:9d:ce:6d:f7:c2:76:c3:ff:28:34:85:00:
                    37:c9:5d:32:e2:fc:fc:14:d1:94:2d:88:ca:dc:d9:
                    85:48:65:67:23:11:0c:85:e6:6d:4d:0b:64:fb:4a:
                    6e:56:8e:0d:91:7d:27:08:dc:53:be:63:7f:ee:0c:
                    6b:05:d2:51:02:14:af:62:44:64:8f:b1:7b:63:b6:
                    cc:d3:7b:8a:55:16:e6:8e:93:69:4a:54:c5:a7:02:
                    6c:85:be:dc:cd:98:0a:60:74:26:18:3d:30:f8:4d:
                    4f:81:4d:9c:7f:1b:52:78:c2:ac:be:43:e2:ec:76:
                    8d:d4:d4:9f:be:62:5a:65:05:cd:a4:76:c7:f0:20:
                    5a:75:d9:2a:9b:7a:88:c9:5b:89:9f:c9:46:6b:64:
                    94:ef:1b:af:64:fa:05:d6:c0:2f:9a:d5:71:6d:72:
                    7e:9f:15:78:44:f6:28:14:65:10:33:6a:bd:b6:36:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:B7:10:21:86:A8:3C:9C:83:12:0F:85:4B:B3:37:F7:94:CB:C4
            X509v3 Authority Key Identifier:
                keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5d:6c:ff:33:79:2b:86:9d:c7:60:70:2d:fe:62:f8:8d:76:
         a7:4d:a9:6a:63:fd:de:33:d9:17:dd:0d:0b:30:e1:96:77:c2:
         d7:a8:25:a7:b3:11:e4:33:24:08:f9:90:fe:5e:b7:fe:9b:01:
         35:2d:0e:f4:50:f5:39:b5:1b:87:f6:7e:0a:0b:b7:28:bc:d6:
         2c:e9:ad:f2:b6:c0:e3:0e:b0:a8:84:91:ce:b6:f9:df:75:fb:
         25:99:5d:7e:ec:48:fe:1f:50:d0:d0:fa:be:21:06:a4:ee:e5:
         45:64:e2:b8:62:c6:48:5e:af:1d:ae:7c:de:3e:3d:bc:ce:f3:
         89:21:45:ed:53:dc:e3:dc:01:0a:31:0e:3d:e6:e8:91:09:b8:
         c3:23:f0:ea:e8:af:d5:60:8d:b7:b4:f6:3d:b4:f4:8c:c4:13:
         0f:77:26:f4:d1:ac:26:b7:7f:48:59:fa:11:74:12:04:0e:10:
         b4:d1:ea:2d:27:fd:13:05:d6:10:51:11:71:9c:0a:91:44:d0:
         27:4a:69:37:9b:ec:eb:3b:1e:11:9f:38:33:f8:8d:66:fc:ed:
         12:22:7c:0e:fe:0c:1c:4c:2b:68:6a:32:85:5c:2b:13:86:a3:
         6d:7a:05:9d:10:6c:90:98:67:02:cb:46:87:27:47:cf:70:da:
         fc:85:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----