Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File:                     TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier:          LhSQ8ydvXyq9HUYed5xF/hmovXeQ6capXMz/AJ8Y2b8=
Subject key identifier:   F0:7B:5F:F4:E6:76:9D:6D:B5:AA:F0:E0:77:3B:5E:5F:C7:A0:A2:5D
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer:       /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial:       01962F069768DB0567E68A48849AAC211A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number:          097E
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: ts7zFBVvCvt3QEo6svE4WlKUkcs5hyJcNLWRFeYPLsI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:68:db:05:67:e6:8a:48:84:9a:ac:21:1a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=f07b5ff4e6769d6db5aaf0e0773b5e5fc7a0a25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:a3:1d:a2:0f:cf:46:e2:a9:04:90:ed:f1:
                    a8:09:af:60:27:4a:9f:fb:6d:38:4b:02:ab:86:3e:
                    aa:ec:22:b9:fc:a8:e4:a2:8b:58:84:da:04:a1:93:
                    8e:48:2f:a8:39:4a:50:2a:a6:20:ed:bd:95:f9:52:
                    32:6c:18:4f:a7:51:e8:1d:b8:0c:27:28:39:21:ae:
                    e4:6f:55:d6:9d:49:33:cf:b5:51:38:e2:3e:08:b4:
                    d8:11:80:c5:ba:b6:db:12:b6:ad:b6:97:b0:aa:41:
                    10:ba:55:35:53:65:ad:f7:4b:cc:8d:57:2d:f5:a5:
                    84:5e:fd:04:37:85:d7:f3:71:02:48:56:b9:25:c1:
                    69:64:78:52:ff:49:f6:de:7a:6c:a4:77:c7:cc:57:
                    31:67:9e:93:ae:94:8a:d7:5f:28:89:7b:37:fb:e2:
                    ac:1d:72:7a:c8:b3:e2:74:19:33:3e:56:26:4f:16:
                    c1:ec:d0:9b:4f:c5:4e:9b:b1:27:d1:80:f1:6a:08:
                    fc:8d:fd:0a:4e:f6:bb:aa:b6:e4:7b:08:e1:3e:b1:
                    89:62:a5:2a:83:ec:e0:1d:1d:88:da:31:bb:60:53:
                    51:79:8d:8c:bd:14:ef:5f:e1:27:28:82:d7:a4:1f:
                    a9:ec:f4:e2:72:3b:fb:c3:ec:42:d4:a4:f7:ab:8c:
                    4d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7B:5F:F4:E6:76:9D:6D:B5:AA:F0:E0:77:3B:5E:5F:C7:A0:A2:5D
            X509v3 Authority Key Identifier:
                keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bf:d8:0c:27:cf:38:d5:46:03:da:b2:17:cf:12:d3:7a:a3:
         9b:45:f6:bb:61:0a:e2:94:cb:ab:dd:5a:2f:4f:68:0e:f8:2d:
         e7:c2:33:e9:40:6d:8e:57:25:cd:1d:b4:12:e3:89:f7:44:e7:
         fe:5d:17:9b:08:91:55:00:dc:06:93:28:4b:dc:58:24:f8:50:
         a3:a5:85:8a:04:78:cd:56:7c:21:2e:64:47:ba:8d:ee:ec:12:
         4b:39:e7:a9:d5:48:66:b0:0a:35:b9:53:68:97:08:65:3f:4f:
         08:4e:04:2a:57:6b:d4:f5:c5:63:71:7d:d4:83:63:8b:22:77:
         18:1d:16:61:d8:9c:9d:b4:b6:38:06:e7:e2:c7:f2:45:a0:5d:
         b6:68:02:f8:e1:ad:21:29:58:64:32:ec:6a:46:9e:ca:9b:9b:
         f7:3a:ee:e1:38:da:c9:16:6e:70:4e:31:52:d0:2f:04:6a:4e:
         71:db:39:a4:86:f0:95:5b:93:df:8d:54:42:d3:39:16:f4:4f:
         9a:bd:c7:e3:b8:79:c6:f3:b6:03:db:d8:b3:a0:84:1b:26:35:
         e0:47:c2:63:0d:d2:be:51:c9:7f:06:42:3e:21:87:97:3d:56:
         88:e9:71:69:ce:81:95:77:8c:03:cb:41:a8:36:33:88:85:54:
         56:ef:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----