Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File:                     TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier:          3jvc+TiYdhPjy94T2Ts/n1aKyN3cfbiKwmHOGOHF+7w=
Subject key identifier:   82:64:50:42:BC:1E:3C:72:D2:6B:15:4B:4D:1C:1F:72:0E:5C:2B:5B
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer:       /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial:       01962F06687DBDAFCF73E233E7CF577E5B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number:          073A
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: LpPtPiQ5kuql2n7K/HMxPMUVHeCixxyJiD96aaN7xTQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:68:7d:bd:af:cf:73:e2:33:e7:cf:57:7e:5b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=82645042bc1e3c72d26b154b4d1c1f720e5c2b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:cf:39:07:48:d0:b7:d9:dc:75:ae:d3:4c:
                    df:1c:9f:5c:9f:a6:bb:c0:38:6a:64:c9:f1:58:e4:
                    a4:34:30:b4:3e:7d:a5:5e:8b:42:3e:d9:0c:cd:ed:
                    81:10:bd:35:dc:9d:c7:90:6d:15:83:41:9a:ce:60:
                    63:94:25:99:24:01:ad:1e:57:84:76:d2:55:a8:e8:
                    20:79:e7:74:66:4f:4d:1c:b3:84:58:4d:19:73:36:
                    1f:cc:e2:b3:ed:d9:2c:41:a9:13:b4:12:0f:48:a9:
                    c6:da:5f:19:74:e8:90:a3:22:d2:0e:2c:e7:3d:1f:
                    d8:68:1f:9f:06:bd:76:ff:da:c6:5f:bf:9e:16:b2:
                    62:36:87:82:4e:84:66:19:42:d1:54:fc:d5:78:d6:
                    56:ae:b8:93:e2:06:22:0e:00:8d:76:7a:b5:ea:31:
                    a5:33:98:36:2b:83:7e:5b:76:79:f4:2c:f9:87:58:
                    75:a5:67:d2:5d:63:c9:2f:d4:1a:24:71:d6:90:77:
                    85:37:e5:39:28:2c:cc:9c:32:2b:6a:71:0f:05:06:
                    be:84:2b:2d:46:bb:49:0a:c3:3c:89:e0:61:a9:76:
                    7f:3c:a5:e0:1c:02:0f:7d:95:8e:62:20:75:e9:f9:
                    d2:ee:0b:54:ce:f4:f3:cf:fe:91:b3:06:56:7f:5c:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:64:50:42:BC:1E:3C:72:D2:6B:15:4B:4D:1C:1F:72:0E:5C:2B:5B
            X509v3 Authority Key Identifier:
                keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:42:27:d1:16:94:bc:f1:9c:ad:92:01:ae:82:1a:f9:67:e8:
         c8:0c:67:85:03:6a:bc:2a:f0:94:02:e0:8c:04:15:94:e8:f9:
         a3:12:77:85:7a:aa:6c:e5:ca:8d:e1:7b:22:bb:b7:f0:23:4a:
         80:d8:5b:45:53:27:af:eb:8f:5e:9a:59:9f:ae:32:29:88:8f:
         4d:7f:ac:64:25:e9:8a:3f:5b:58:f1:6a:a0:87:e1:bd:61:a2:
         90:30:e0:fd:2a:a3:72:11:82:b4:60:b2:b2:8d:f7:51:0e:f9:
         c9:02:a6:69:e5:15:96:a6:e9:95:b2:a7:ef:3f:e4:72:1e:5d:
         d0:8f:f4:e3:db:95:1f:08:95:4f:09:8b:aa:a5:ba:9e:67:84:
         a6:43:1d:0f:95:7c:ec:5c:31:8c:06:ef:5b:65:2a:27:52:af:
         50:65:ce:73:20:f4:ad:34:a7:be:50:24:68:c9:84:af:69:8b:
         0e:bf:44:42:19:b0:d2:9b:a4:6f:bd:07:60:7a:82:10:fa:47:
         2a:f0:2d:10:e9:9a:d2:f2:ec:c3:93:38:76:21:08:a0:92:c5:
         3a:9e:3a:f6:16:72:6c:7a:b9:66:a0:d0:6b:37:3f:a7:9d:e1:
         45:0a:bb:26:10:09:b8:30:12:91:75:44:73:4e:94:31:5e:e0:
         ad:27:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----