Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
File:                     TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft (raw, json)
Hash identifier:          ThQwzn4uDtkBhrbNF4iTs4hU+IZZPVQ2TozMVdURN2M=
Subject key identifier:   EB:51:D4:AB:AF:52:BF:84:BC:86:97:AF:D6:D1:A0:0B:F5:B5:3F:85
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Certificate issuer:       /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial:       01962FAB27A69D2830A52EEA10C5F899611D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
Manifest number:          0B15
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (hash: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=)
                          2: TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl (hash: vnhiJM+Jc9D3e0xeNiZ5S46I3lqkc+aOM0Pr1KHNXq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:27:a6:9d:28:30:a5:2e:ea:10:c5:f8:99:61:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=eb51d4abaf52bf84bc8697afd6d1a00bf5b53f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:d7:d5:f9:82:50:c5:9c:7c:77:c2:53:54:
                    2b:cc:c3:d8:09:9f:a7:da:a2:ed:83:31:8e:85:35:
                    35:12:21:92:24:4d:70:c7:9d:f6:8c:25:29:7d:71:
                    e7:93:c1:c4:88:af:3c:89:63:31:81:2e:e2:86:fd:
                    b0:18:10:f5:1c:89:ac:1f:7a:3c:74:f8:08:17:8e:
                    2c:2c:68:5d:23:1b:97:54:42:96:33:9f:96:32:a5:
                    88:ad:56:56:82:7c:c3:e0:0a:eb:72:ab:65:06:30:
                    92:67:c4:09:1f:3e:2a:dc:cd:10:bc:2d:03:ca:a5:
                    9a:df:ea:92:d5:56:ec:42:38:10:53:3f:b8:51:36:
                    27:d3:cd:d3:ec:43:ab:7d:02:ec:c4:60:2f:f8:65:
                    70:ba:45:93:6a:e9:90:1c:94:1d:df:e2:dd:12:f0:
                    ce:65:16:49:74:df:6d:df:18:2a:44:98:04:61:6f:
                    ae:36:a9:2f:aa:03:38:ef:4d:6e:8d:db:78:f5:92:
                    56:6d:bc:71:ff:bc:ca:d4:94:5d:5f:85:33:10:2d:
                    d7:85:af:7c:81:e4:18:d7:42:cc:61:02:be:a9:88:
                    63:92:ab:6c:39:55:86:74:36:88:3f:30:28:64:0d:
                    a2:29:bc:6b:54:88:ec:a1:7d:c8:fd:a3:17:56:e8:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:D4:AB:AF:52:BF:84:BC:86:97:AF:D6:D1:A0:0B:F5:B5:3F:85
            X509v3 Authority Key Identifier:
                keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:63:56:87:1d:09:63:f4:aa:6e:67:19:22:9f:4d:c7:0a:0b:
         5e:57:ad:69:a1:d0:82:62:16:b2:d9:a0:21:5e:41:28:0e:6b:
         2d:ef:22:0c:1e:b9:6f:cb:cc:76:08:c0:46:a0:44:1c:1d:2b:
         90:42:30:61:34:d8:66:7e:93:92:0d:85:3b:22:f1:82:89:ec:
         3b:12:4f:ef:32:03:22:ce:57:b1:a0:0d:2d:4b:7f:a9:00:5f:
         ee:91:8e:59:88:b4:8c:76:ef:1e:2a:3d:92:e6:eb:81:a4:7a:
         c3:0e:b3:61:b6:61:a9:78:86:5d:cd:21:6d:6e:12:7f:65:1a:
         41:e6:26:e8:49:15:f3:11:49:e1:4a:8b:e7:fc:58:1b:bb:d9:
         a4:63:70:e2:ce:38:db:90:32:71:9f:1b:e1:3f:77:96:ec:d9:
         96:15:83:7f:17:dd:e6:08:2f:e4:99:fd:9c:26:9e:d8:70:26:
         b8:14:e9:08:c5:16:2f:03:8b:74:cc:8a:cf:5e:73:6d:e7:87:
         2a:ba:7b:5c:72:dd:44:be:3a:c7:87:9e:b0:a6:7b:81:df:eb:
         93:66:26:d3:a4:8a:d2:4b:78:b3:fb:c1:de:10:b4:47:e0:2b:
         22:45:0f:a9:f6:b4:70:3a:b8:df:7a:3e:37:72:5f:36:e9:34:
         a2:f8:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----