Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File:                     TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier:          vEHW9oM7NSh8ngZm5kiNoewuEYCbWlicIb8u+DB5ymo=
Subject key identifier:   39:4B:EC:50:0B:6C:F9:AC:48:93:63:7D:EE:3E:05:C9:6B:A3:22:0E
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer:       /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial:       01962ECF8BD53AD95E2C110F049655CFAF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=)
                          2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: 9bPnrDNrbNz6OvAnHG1WsWVbfRneWD1uTarjCVy7h7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8b:d5:3a:d9:5e:2c:11:0f:04:96:55:cf:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=394bec500b6cf9ac4893637dee3e05c96ba3220e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:0c:2d:90:5e:7f:dc:60:e1:9a:a4:33:82:
                    14:ea:6f:87:57:84:ad:bd:2d:0a:d2:ec:04:00:23:
                    0d:80:45:49:b6:e1:ab:17:55:71:09:c9:79:20:f3:
                    db:03:92:e8:40:c8:f3:6d:7c:70:fb:eb:42:a5:79:
                    d0:ce:ac:bd:95:96:bf:f1:fd:97:21:e2:82:c1:18:
                    93:fa:25:48:49:55:6d:61:8c:90:5e:0b:d5:5f:66:
                    5a:69:80:c3:98:0a:c3:82:78:10:e4:cc:27:03:bf:
                    54:60:fc:fe:cb:08:3f:ca:75:d7:16:07:03:e4:27:
                    c1:a3:17:4a:91:c2:7b:11:79:08:7a:cb:3b:fa:d6:
                    ce:65:24:4e:53:04:f1:d3:a7:5d:ab:06:48:cd:16:
                    a3:f7:af:4e:38:16:c9:94:46:35:6b:68:2a:d5:7c:
                    c4:44:ba:dc:bd:e6:47:16:0e:d9:4d:34:f5:a0:e5:
                    88:40:ad:0d:0f:56:61:d1:95:f9:b9:9d:d6:ff:38:
                    1d:2c:af:41:2d:ec:d5:86:e3:5c:bc:da:3d:fe:06:
                    04:a9:c1:d0:3c:97:bc:ed:00:45:c6:6d:75:be:b6:
                    55:56:4d:43:37:59:78:2e:e6:07:6f:36:01:bd:ea:
                    3e:12:9f:44:d5:db:6f:75:41:39:c8:9b:57:a2:4b:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4B:EC:50:0B:6C:F9:AC:48:93:63:7D:EE:3E:05:C9:6B:A3:22:0E
            X509v3 Authority Key Identifier:
                keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2b:39:e2:35:c3:e8:a6:f7:55:fe:c3:d3:d6:d1:37:3b:c7:
         0c:9d:e1:91:55:4f:8f:13:45:6f:3d:4c:0c:8f:99:ba:11:86:
         21:cf:79:90:ce:4c:74:a1:78:24:60:b9:2f:29:f8:a2:96:cd:
         ec:d4:e5:04:f1:79:45:f0:d0:b9:0f:52:b4:7a:d5:9e:3f:8d:
         c4:19:b2:29:c2:c0:51:5e:c9:86:82:9b:76:2b:b6:bd:d8:26:
         95:12:af:0c:f6:f9:96:dc:d4:b6:58:fd:37:04:f9:96:df:25:
         44:e0:6e:91:b0:cf:34:b4:a2:cb:3b:40:f5:20:71:e7:79:d1:
         b0:67:98:16:da:aa:d5:15:78:df:d9:99:22:c1:d7:43:8a:fb:
         7f:8a:7a:05:5b:e6:57:da:85:5a:34:97:b8:b0:c7:d6:0d:11:
         98:ca:a5:8b:dc:fa:de:23:20:0b:90:40:2f:18:18:4f:6a:c3:
         30:d4:f3:9d:37:a4:c3:85:97:93:99:3d:54:68:c6:4c:b5:2c:
         81:e6:39:55:f8:15:10:9d:24:0a:81:8e:61:26:6c:d0:cd:20:
         23:cf:12:1a:6b:ef:ce:a5:40:fb:f8:db:4e:9a:b9:a4:7e:d3:
         9f:8c:f7:ac:4d:4f:ec:7a:b9:8a:c9:e0:58:44:44:2e:7e:8f:
         c6:86:99:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----