Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File:                     TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier:          7leL5DjXnrVAVpvVbuoANT3gqzAxM0qMp76PDuRXI+w=
Subject key identifier:   7E:F6:05:34:29:26:53:A2:62:B9:58:3C:03:06:00:C1:4B:BB:37:D5
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer:       /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial:       01962F06E9B0FD61B96C973A7B3609629675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number:          0816
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=)
                          2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: sxdGP8x8e1eZqPgAeJhiTXjzpXXwTKJ41hTDem4Dnvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e9:b0:fd:61:b9:6c:97:3a:7b:36:09:62:96:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=7ef60534292653a262b9583c030600c14bbb37d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:21:eb:72:71:d6:18:51:ba:db:a9:d5:b1:
                    ae:ca:5c:96:72:94:89:a9:8d:67:3a:ef:8a:f9:25:
                    90:ea:b0:57:af:ff:6d:fb:b3:e9:2b:7c:3d:37:5c:
                    b1:6c:29:4a:5e:bc:80:3e:b8:c2:a1:3e:04:a4:a6:
                    4f:c3:a7:c6:5f:b8:9d:a0:12:4c:ef:98:23:e8:5a:
                    e0:a3:02:05:de:8f:be:3d:07:90:77:0c:e1:c3:ed:
                    97:d3:f4:c4:4f:de:f5:64:dd:ba:df:52:8d:a7:de:
                    a8:d8:33:fd:18:88:b6:6b:ec:19:83:40:38:97:95:
                    2a:56:81:6e:54:bb:d3:fa:9d:29:82:42:bc:5d:a2:
                    8c:10:60:d1:c2:8e:94:50:6e:98:83:c2:a1:1c:ba:
                    6a:44:27:d8:7b:c9:7c:e9:f1:7c:05:27:9c:f3:b2:
                    19:bd:45:f7:05:16:54:a6:a7:3c:22:83:9a:9b:1c:
                    c4:10:56:ca:6f:52:8e:20:ad:f0:84:57:7f:85:f3:
                    e9:69:ea:af:a1:7c:f0:7d:40:4c:4a:2b:4b:b5:db:
                    b6:a0:93:8c:cc:fc:20:66:e6:ab:7e:8d:88:b6:85:
                    0d:22:98:61:b1:3a:a2:da:27:b3:2a:50:ad:6e:9f:
                    ff:d4:c4:9d:d2:ab:d3:f6:52:6b:c3:d9:25:af:c7:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F6:05:34:29:26:53:A2:62:B9:58:3C:03:06:00:C1:4B:BB:37:D5
            X509v3 Authority Key Identifier:
                keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:78:44:e5:f2:6b:12:91:89:80:6d:84:63:99:67:e4:73:c4:
         0b:56:2a:1c:b9:74:5f:93:98:9c:b1:8d:94:5c:ea:e4:82:98:
         71:11:08:f0:c6:c1:16:6a:52:47:a5:7e:17:4a:47:4a:ae:39:
         26:96:1a:48:64:43:bc:b7:79:42:8f:16:96:04:63:84:2a:98:
         bb:99:96:c6:6a:02:35:88:f9:e2:5b:1d:c9:99:43:74:2f:8d:
         ea:2f:29:ff:69:6e:8b:34:bb:e3:6d:5e:01:c5:98:83:2e:60:
         9d:eb:96:bc:45:2b:e3:d8:a6:fd:a9:60:f5:79:3c:db:c6:1c:
         c6:50:e1:24:9e:62:ab:9f:60:70:2d:35:0e:b3:6a:30:a5:bd:
         e6:1b:8c:a5:13:f9:38:3d:c9:40:46:c9:fb:ea:3a:06:85:3b:
         a7:14:e9:a0:b5:7d:f7:a6:8b:1e:98:da:52:51:2e:5b:66:05:
         4c:57:81:3b:94:a7:d2:d0:90:e1:ca:69:72:61:ab:20:a3:b9:
         31:72:30:d4:1e:1a:55:09:e1:5f:36:c0:92:e0:8a:f8:ec:da:
         2a:a1:7b:04:7b:91:ea:90:86:b7:78:78:55:11:0d:32:6a:80:
         a3:1c:66:fa:aa:c7:40:9a:18:4b:77:02:47:87:e5:c1:da:d3:
         71:1f:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----