Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File:                     TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier:          sDEQeKY0TLfKjW1MQSjTcQL2u0Ju2gGDlkwlFF+bUlw=
Subject key identifier:   71:0A:C5:2A:1D:27:42:40:4E:3C:DF:9B:F7:B1:ED:CD:23:15:85:E4
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer:       /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial:       01962E99315B6077625F16C80E6D91AB43BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
                          2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: VuR2fSxeZWDBuy9+CItMoB6XU+8Nz7TO+u128Tu6F1k=)
                          3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:31:5b:60:77:62:5f:16:c8:0e:6d:91:ab:43:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=710ac52a1d2742404e3cdf9bf7b1edcd231585e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:42:16:37:23:dd:55:c1:61:33:5d:ab:95:
                    80:4b:87:07:e4:85:5d:71:c8:00:08:ce:30:19:04:
                    bc:3f:10:2d:3a:f8:c3:e3:64:0b:43:dc:c1:ce:dc:
                    e9:41:1f:01:99:52:14:e9:e7:f9:64:a6:e6:13:b7:
                    88:1c:09:9d:b8:0e:9a:19:27:93:80:c9:76:e0:55:
                    cd:f1:71:38:ae:ad:48:4b:e9:42:c1:e3:63:49:c1:
                    f8:75:60:47:f1:db:49:89:8a:20:7a:f1:fd:9f:e5:
                    a1:0e:91:75:33:34:86:01:4f:99:d4:35:3e:fe:be:
                    d1:9e:2e:77:3c:9e:b7:be:5f:06:19:0c:04:81:ff:
                    63:76:87:6c:5f:58:da:73:89:c2:45:db:92:7c:bb:
                    6d:d8:ef:f5:df:d5:0c:6a:8a:e6:9d:99:61:b6:75:
                    ce:90:80:fc:74:8e:c9:8e:36:33:5a:fc:05:8b:8c:
                    21:0b:9d:74:34:bc:ae:b1:86:f1:bd:12:da:bc:ac:
                    2b:6e:b4:92:65:19:5e:94:37:41:f4:e5:23:59:0b:
                    26:26:45:ad:45:58:60:39:69:6b:9d:24:bd:b2:95:
                    30:1a:61:8e:b2:82:a8:b9:c9:6d:79:93:22:08:05:
                    ca:e7:0c:03:c8:93:ac:ab:6d:8d:91:cb:cf:26:1e:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0A:C5:2A:1D:27:42:40:4E:3C:DF:9B:F7:B1:ED:CD:23:15:85:E4
            X509v3 Authority Key Identifier:
                keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:9e:c3:af:5a:95:ad:98:b5:79:e9:bb:86:15:64:49:ad:
         9d:24:14:f2:8f:7f:d2:b2:af:79:ed:c7:41:eb:8a:8b:15:33:
         6c:bd:ca:42:96:52:df:a5:26:15:bb:fa:ce:5b:54:8e:e6:d6:
         f4:55:72:32:01:ff:fb:a3:ed:a4:bb:3d:a6:24:0b:cd:4c:af:
         6c:7a:b5:01:4e:93:3f:2f:af:c7:d7:e6:83:c0:6c:0a:18:5c:
         7d:1a:54:69:de:eb:78:07:4c:78:87:3d:d1:fa:b2:c1:22:8c:
         c0:cc:7f:e8:33:a0:e9:12:b8:c2:53:18:4c:36:2b:17:11:5b:
         0c:9c:27:a8:96:6a:f9:25:9a:a2:0c:51:c5:bc:7b:95:73:a3:
         30:19:6a:37:8a:54:28:2c:51:5f:9c:82:8d:7a:19:c2:bc:b3:
         a1:88:93:8b:fd:a8:31:43:85:92:cc:19:9a:8a:b6:5a:54:aa:
         8e:ff:32:98:97:61:da:16:ed:83:ec:5d:85:5c:71:bd:67:fa:
         ae:1b:48:1b:56:b2:99:30:b0:69:03:ee:54:0f:b9:8e:d4:bf:
         7d:58:ec:15:f7:f9:d7:47:4d:61:88:f8:e6:5b:4f:b8:ab:0e:
         ee:7f:a3:61:4e:8e:20:7e:a0:64:04:87:3b:2b:bf:e6:7d:7b:
         e7:0a:61:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----