Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File:                     TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier:          rYQ6InyGAXSKml3W9ISyXWq4xwPieo+FiuxIWxHJHRY=
Subject key identifier:   A4:D9:59:A9:FB:0B:47:35:19:8A:8D:33:E2:F5:6C:5E:04:FD:4B:31
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer:       /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial:       01962E9877C9F0E1C391A89249683A9D91EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number:          12B1
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: U2PTAtx+X2VkxEZXc2R3OXQUstUWtG2rPiuc01/eQIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:77:c9:f0:e1:c3:91:a8:92:49:68:3a:9d:91:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=a4d959a9fb0b4735198a8d33e2f56c5e04fd4b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:32:5c:f7:6e:81:b3:e9:84:fb:42:4a:f9:
                    e0:58:e4:2f:be:75:02:35:3e:8a:77:bc:e7:9d:50:
                    60:a5:04:cc:47:0b:e8:51:db:63:a3:35:c6:ca:93:
                    04:30:28:48:4f:c9:59:b4:f3:ed:f3:04:65:b1:10:
                    e1:3e:5f:c9:ba:a6:61:ab:49:f9:3f:ed:48:7e:c7:
                    33:a4:53:45:d4:60:74:80:7c:25:69:91:0c:9e:bf:
                    79:96:c2:92:5a:30:79:6a:50:27:c3:7e:d9:bc:fb:
                    a2:93:44:da:06:e2:cd:47:b0:03:44:fe:1b:f8:d7:
                    78:43:68:de:f9:2c:8c:4c:d0:95:69:61:0f:55:af:
                    42:cc:01:e9:7b:f3:c6:60:06:6f:37:5a:52:db:3b:
                    4f:f5:87:d4:bc:7e:4a:66:65:86:3d:fd:03:e1:36:
                    ed:7a:38:16:2e:e9:12:07:3f:fa:f7:8a:58:2e:67:
                    a1:8b:c3:ac:01:c4:b9:2c:1a:56:f4:5b:46:1e:36:
                    97:a5:c8:49:45:d7:93:ec:bd:70:65:7b:1e:22:32:
                    ae:4d:fa:14:1a:63:a9:4d:61:3a:e4:e5:fc:ef:17:
                    5d:2e:49:a4:e0:b0:d1:7e:36:26:9a:6b:6b:76:0f:
                    ab:66:9b:af:2d:8b:87:92:e5:41:61:e5:26:ee:bd:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D9:59:A9:FB:0B:47:35:19:8A:8D:33:E2:F5:6C:5E:04:FD:4B:31
            X509v3 Authority Key Identifier:
                keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:55:f0:2e:51:49:20:9c:8e:5a:3d:92:50:a3:69:4b:e3:1f:
         c5:98:18:4d:0b:49:d6:49:1e:f4:d1:95:2d:58:e4:eb:47:98:
         4c:9e:1a:eb:ac:35:c9:d6:7a:ad:86:e0:11:8e:a3:b4:b5:e8:
         fe:cd:13:34:f2:1f:b5:7a:d3:8f:90:b7:92:84:c2:68:43:67:
         1c:d4:4c:db:16:98:f2:af:5b:c5:c3:78:7a:0f:fb:18:62:0b:
         67:23:c3:7d:55:7f:e6:db:e5:9d:4f:80:12:a7:db:e9:17:83:
         49:9e:59:f5:bf:17:0b:4c:e7:4e:2c:a0:97:2c:ce:8a:3d:43:
         7c:63:cb:1d:e8:c4:51:a5:4e:d2:9c:7a:cd:07:ec:ca:58:c7:
         f1:cb:7c:10:b8:80:62:30:16:3f:07:b8:4d:36:a7:5f:67:ef:
         34:7f:be:14:75:c6:c1:c8:03:50:ed:ed:3b:c7:ae:c9:7c:bd:
         8c:7a:27:79:d5:7d:4a:e5:01:74:76:ac:44:f9:98:e6:93:7e:
         b9:c1:f4:74:b0:00:8a:96:0c:55:76:88:e0:4a:20:2b:7d:c2:
         7b:9a:9d:e6:ec:5d:93:cb:56:fa:ce:98:33:b7:d4:f1:cf:f9:
         cf:86:94:f4:2b:be:e7:b1:3e:a9:1c:bb:30:1e:2b:d0:36:e5:
         32:4b:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----