Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File:                     Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier:          us+vJWKWQeD9eJJg4N1c89FSkq6wDSc4HUjPPNdVtUo=
Subject key identifier:   BD:D7:3B:EB:D2:EB:79:11:D5:25:2B:63:FC:9D:C5:05:B8:52:57:C9
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer:       /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial:       01962DF39C265D03BF08428D940ED0A70FDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number:          072A
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
                          2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: waVnxmHoZrcWU7IBNi7GLN4XfQ/2p5V++eQ+DrnvvuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:26:5d:03:bf:08:42:8d:94:0e:d0:a7:0f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=bdd73bebd2eb7911d5252b63fc9dc505b85257c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2c:e3:5b:6d:5a:9d:ed:0f:bf:60:5f:0b:39:
                    1b:f8:2a:b7:53:70:a4:86:9d:88:01:77:ba:d5:22:
                    1b:be:3f:e1:73:2e:94:21:67:47:14:13:59:ab:c1:
                    21:8f:c8:58:4e:07:d6:8a:d3:9f:9f:5e:04:bb:dc:
                    3a:55:71:b5:cc:b5:4e:17:e4:3f:c0:42:46:62:b7:
                    05:51:33:80:3b:b0:cf:76:0d:e2:d1:cf:e4:13:a3:
                    e2:3b:fa:7d:95:ce:8b:94:73:d8:8b:7b:a8:ee:28:
                    fd:6a:59:93:52:1b:54:b0:a0:e8:a2:e5:65:2e:bb:
                    01:33:b8:73:d7:b4:b3:96:46:12:83:82:97:a7:a7:
                    c1:89:1a:a6:d2:40:e0:55:0b:d0:7f:63:6f:e4:55:
                    ac:9e:bf:8f:72:13:4a:16:5e:ca:0f:cd:22:c3:72:
                    5a:23:44:4f:78:c3:85:7e:c4:7d:5b:22:ea:3e:fa:
                    9f:d4:2e:7f:c3:a9:3f:d3:b2:f2:c4:4d:09:18:9c:
                    72:e4:f0:6e:63:b9:4f:2d:2e:66:91:8a:f7:26:4c:
                    d4:57:d9:a1:63:a0:20:7f:d3:f7:96:38:ae:59:2f:
                    43:f6:4a:64:92:2e:dc:ce:ce:f1:96:3e:41:dc:1b:
                    86:eb:59:d3:84:17:fe:eb:46:77:a7:e4:6f:10:9c:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D7:3B:EB:D2:EB:79:11:D5:25:2B:63:FC:9D:C5:05:B8:52:57:C9
            X509v3 Authority Key Identifier:
                keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:89:23:19:27:a6:5e:17:86:e7:d6:7f:46:2b:f0:64:25:74:
         9c:e2:93:77:43:21:4c:f5:ee:a8:4b:7f:2f:a4:e5:41:db:de:
         78:3c:4f:78:b5:70:d9:54:63:94:e8:64:da:fb:71:a1:d4:a9:
         1f:d3:6e:cd:5f:62:4b:3d:52:11:a7:7c:8a:8b:90:82:05:cb:
         b9:32:d3:9c:a9:3e:f8:5f:8d:09:93:07:72:26:76:96:d1:df:
         cd:0e:27:fb:d8:6c:43:8e:8e:c8:b4:05:0e:c0:44:a4:8d:97:
         ec:8f:e6:27:a9:a2:01:ca:69:86:6f:52:78:ec:de:48:ef:7b:
         02:17:24:52:11:1b:6c:d2:2d:e0:b9:ae:46:e7:57:4c:34:ba:
         c5:46:2c:bb:5d:4b:24:c9:5a:96:01:e1:8a:5d:e8:3d:15:e8:
         29:d4:37:53:48:a3:a7:be:5e:0f:05:c3:e1:a8:e5:2a:c8:6f:
         40:67:2a:69:e5:48:c4:cf:5a:40:59:dc:ef:7b:07:cf:0c:9f:
         e5:72:37:1a:c8:2b:0f:11:1e:d7:c7:27:67:35:be:23:1b:49:
         8d:e7:6f:45:e8:2b:1b:61:32:61:e4:82:09:21:2d:f4:7a:79:
         db:f7:67:53:1a:2c:68:15:b2:a2:43:bc:ee:c6:eb:a4:3b:1d:
         24:46:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----