Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
File:                     TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json)
Hash identifier:          07etH7DL8jfXaAKOvMEbQkEFo0SBtw23FPq+CG+k7i0=
Subject key identifier:   C9:44:88:61:EE:DB:1E:DE:7F:B4:6F:49:5F:BE:03:50:10:C5:D0:B1
Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B
Certificate issuer:       /CN=4f123e248e6ec0368e0712345f726d71f60f826b
Certificate serial:       01962F74F503654841514485742056137FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: AcOY5dYhShKdKbedgN7xrPynMComm7oHFzea85Wpssk=)
                          2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f5:03:65:48:41:51:44:85:74:20:56:13:7f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=c9448861eedb1ede7fb46f495fbe035010c5d0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:a6:55:c8:4b:36:13:9b:a3:e1:80:63:08:
                    31:7f:99:60:b7:ed:24:98:62:d3:eb:7f:3a:94:15:
                    e7:d8:70:e0:75:8c:10:d4:fa:65:5f:7c:22:fe:6d:
                    50:71:cb:76:12:57:fa:2d:a9:4e:e3:79:be:82:88:
                    29:08:c6:7e:d8:b9:f9:2e:c2:3e:13:03:8e:35:69:
                    7e:c3:55:e6:3f:cc:e5:a7:fb:64:23:a5:dd:4c:84:
                    68:91:d7:21:19:fe:d2:0b:ff:f5:2d:97:a0:42:c0:
                    93:e8:e9:b8:cc:94:5b:55:a0:ef:07:8a:3a:00:28:
                    bb:66:04:19:62:e7:71:4d:7d:ea:07:af:f3:b9:19:
                    7a:ae:da:21:ca:19:07:96:34:69:ca:47:b2:e1:fe:
                    dc:7c:17:9b:76:07:e7:d1:cf:02:a4:0f:00:d6:6c:
                    56:9b:1c:13:f8:95:51:31:7e:56:05:72:01:28:d4:
                    e6:56:a0:42:1b:17:8f:ba:ae:ae:5d:f8:b1:06:e8:
                    e3:87:5c:27:13:56:7f:ac:c2:62:01:0f:73:26:ba:
                    48:61:65:1b:1f:7f:5a:bf:54:77:3b:d9:72:39:67:
                    83:ce:dc:02:54:de:93:78:4d:59:24:e6:12:15:1a:
                    08:ec:98:1a:41:9a:2a:0e:d0:ad:fe:0a:00:3d:d8:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:44:88:61:EE:DB:1E:DE:7F:B4:6F:49:5F:BE:03:50:10:C5:D0:B1
            X509v3 Authority Key Identifier:
                keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ed:9e:1c:c1:98:57:d2:12:93:98:5c:50:10:0e:8d:de:41:
         bd:84:34:2b:69:6d:fb:d8:1e:78:08:17:e6:de:bf:82:52:81:
         93:a8:c8:e2:e3:da:8f:70:53:15:2c:0e:15:f3:a1:7e:ed:bf:
         28:4f:c0:53:b4:a1:10:9f:7a:7d:68:04:2c:f1:cb:b4:5b:71:
         e5:d0:0b:30:2f:2c:05:b4:83:f1:09:84:f0:27:f3:b2:04:a7:
         8f:78:24:43:48:e0:98:f2:0f:a6:65:65:46:0a:92:f1:fd:88:
         e7:94:7d:2d:58:7c:f7:5e:96:70:64:44:60:75:5e:61:90:1d:
         71:13:f0:f5:ce:d1:75:82:5d:8d:02:5b:8a:47:71:5f:f4:24:
         37:9e:b2:f7:80:5e:21:27:65:8b:04:fa:37:a7:b7:a5:d8:a4:
         cf:f1:7a:21:76:f4:59:13:8c:0d:ff:ea:6d:81:cd:ce:84:86:
         48:59:c3:37:ec:19:36:02:4c:06:b5:0e:de:cb:c7:36:30:d0:
         41:be:4e:2f:34:56:78:8a:17:76:4a:e6:f9:58:67:db:f2:18:
         f1:d9:a7:60:9d:42:73:3c:a3:a0:bb:dd:38:a6:97:2f:88:18:
         6d:24:16:cb:51:b7:36:f9:fe:ae:0c:82:8d:be:92:9b:f8:e2:
         68:57:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----