Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File:                     TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier:          DJrfa3RWUz5xHiShuEbCMrXuikUHWPNFKSUMA/dEXRs=
Subject key identifier:   D5:29:AD:B2:7C:54:09:BD:44:DA:1D:35:3C:6F:D9:9C:09:42:4F:EA
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer:       /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial:       01962E98D93B527FA756DEE74B83F197CFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: +/VtPU1lgb/1VLQlkvF8x8P2JKiWwgj03RY85vZE1b8=)
                          2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
                          3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
                          4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:3b:52:7f:a7:56:de:e7:4b:83:f1:97:cf:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=d529adb27c5409bd44da1d353c6fd99c09424fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:15:98:47:19:91:41:10:49:c5:c5:f8:58:
                    ff:b4:51:75:04:c1:ef:d9:d4:28:98:d1:7d:41:5a:
                    a5:c0:05:a2:0a:19:8d:fc:6f:70:b0:c3:4f:b5:89:
                    77:e4:a6:e9:bd:07:43:d8:bb:a1:77:cd:69:54:e8:
                    32:d2:24:60:39:ba:bd:af:d7:9d:2d:51:bf:73:ec:
                    03:b3:4b:e5:58:47:14:b7:89:7e:6a:3a:44:9e:33:
                    6e:54:30:b4:0c:1c:ef:3b:98:9a:f0:22:30:31:7e:
                    ec:ac:19:0d:10:e9:c4:4e:d2:27:f3:bd:f7:fc:31:
                    86:1f:7f:42:55:cd:9f:51:34:df:78:7e:0c:d2:3f:
                    aa:b9:ea:eb:8f:cf:2f:c3:5d:be:2b:a1:55:28:28:
                    eb:04:e1:af:05:63:d2:82:87:cb:3f:ee:47:bd:29:
                    4c:fe:6c:d9:81:1f:57:1a:0b:b9:38:49:0e:17:34:
                    97:34:16:5a:81:fc:4c:76:7b:d9:35:0c:2b:96:aa:
                    f7:92:3f:4f:11:ee:ed:db:7b:2f:83:81:ae:0b:d7:
                    c6:76:2b:7c:2a:5f:ff:9e:50:75:49:11:36:29:c0:
                    00:6e:32:94:ca:0f:df:78:3d:b2:08:36:37:92:f4:
                    25:9c:13:e0:50:00:8a:c1:a8:10:73:84:d6:8e:75:
                    6b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:29:AD:B2:7C:54:09:BD:44:DA:1D:35:3C:6F:D9:9C:09:42:4F:EA
            X509v3 Authority Key Identifier:
                keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ef:a7:23:9e:a9:97:5e:69:23:c7:d6:2d:7a:24:3f:65:0e:
         92:e0:ee:23:a0:44:71:86:64:7c:1c:45:36:a8:80:08:a3:64:
         0d:5b:fc:70:f8:c5:f3:24:b6:ee:5c:9c:3f:b0:8f:30:aa:99:
         cc:76:6e:41:e5:f5:94:00:5a:cd:15:e2:4e:92:f2:ea:6a:d7:
         01:2a:2d:d5:f7:8e:dc:65:e3:e7:f7:c2:19:7a:58:de:41:35:
         b8:09:bd:b7:5b:97:55:78:b2:cb:ba:97:86:66:45:1f:33:cf:
         dd:ff:55:b8:50:a5:e3:e2:25:81:94:61:5c:80:1b:ca:76:25:
         fd:e4:53:67:4b:02:35:40:9b:92:ed:22:82:62:35:83:ff:2b:
         91:c6:df:b9:4b:b0:f5:29:e4:8f:a1:83:9b:21:4a:e4:c2:4a:
         ed:81:ea:29:13:73:53:f4:8a:6f:b3:6a:00:b4:75:6a:d1:8c:
         87:cd:7e:e1:f9:78:b7:5f:91:ab:a1:4a:b1:34:cd:4b:fc:13:
         9f:86:c5:e9:f4:87:70:24:d5:6b:ba:5a:45:ed:17:88:ae:0e:
         d3:be:e6:69:eb:54:00:09:7d:d5:36:19:a6:2c:95:e6:60:64:
         db:7b:90:30:c3:26:84:26:03:80:88:33:58:96:f2:19:43:d2:
         23:68:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----