Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
File:                     TTR1C-IXPLmwhqd8bepUtKhGmvM.mft (raw, json)
Hash identifier:          /wG5L72ip/boo+8kzSseLvqf9zfYyDLa9SBJPXL5JOk=
Subject key identifier:   FE:5A:F7:12:41:F8:2B:9E:0C:4E:A3:E4:EA:71:3A:86:90:7A:47:A4
Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3
Certificate issuer:       /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
Certificate serial:       01962ECF8CA69066A2A775C15D8EA1AB2C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
Manifest number:          085E
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: TTR1C-IXPLmwhqd8bepUtKhGmvM.crl (hash: yzIGGApxgFwIa/WbLr+FF7bkuQF/l3gWcLIb5Ug3Kuk=)
                          2: WYXlKPxfFrF5-delsIPB_r6FESQ.roa (hash: cI2mCSSEwOLi9AIJI3IVWlSF6M3b+jAGtzx5i3z7sFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:a6:90:66:a2:a7:75:c1:5d:8e:a1:ab:2c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=fe5af71241f82b9e0c4ea3e4ea713a86907a47a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:86:ef:44:58:20:9b:b0:61:8b:0d:f3:98:
                    e0:98:c4:40:97:cc:1f:09:ef:d8:19:a7:65:8a:6a:
                    40:c9:b9:b9:e1:cb:14:69:78:4a:67:b5:1a:b6:61:
                    a9:d7:c6:42:c8:ec:85:9c:35:4d:4a:71:ed:52:c1:
                    15:4d:b2:eb:da:0a:b4:e9:ea:b6:ad:14:75:44:c6:
                    c0:8e:67:45:cf:48:63:a4:35:27:1e:49:99:ab:53:
                    f9:20:d3:82:ea:ec:fa:ee:72:7e:f2:df:1c:fa:7d:
                    30:b4:25:71:b6:01:93:e8:33:ab:e6:11:e2:3a:d6:
                    ba:a5:ba:d8:ef:60:29:fc:96:05:fc:c2:55:48:7b:
                    af:ab:cb:85:8b:81:13:9d:63:e3:99:05:1e:f4:d9:
                    78:50:2a:5c:7a:5b:ae:1c:40:c8:c6:ee:42:d0:72:
                    ec:3a:e5:05:dd:a4:c5:a7:4f:2c:73:4c:0d:a3:87:
                    9d:b8:a8:12:79:82:dc:ab:fc:69:2b:68:0a:53:f1:
                    9d:02:83:ad:87:91:1f:03:68:17:7a:3a:a6:19:4b:
                    58:63:20:54:66:84:71:30:e2:b5:a2:69:55:0b:fd:
                    b4:5c:b6:c9:a4:1d:28:96:7c:47:6f:3d:83:e2:c7:
                    bc:df:05:89:56:7d:21:e1:fa:6f:17:22:78:00:fa:
                    fb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5A:F7:12:41:F8:2B:9E:0C:4E:A3:E4:EA:71:3A:86:90:7A:47:A4
            X509v3 Authority Key Identifier:
                keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:ba:98:6f:a2:d0:40:6a:5e:ca:3d:3f:2d:25:6b:87:b4:
         1b:0a:c7:2f:a4:58:e9:c0:55:a7:bf:3c:eb:4a:4a:a6:57:2c:
         a5:44:e0:b0:0c:ed:33:54:91:1b:3d:47:a7:95:81:b4:9c:50:
         e9:67:0b:c4:2a:a6:83:ad:c1:21:15:51:5d:eb:4d:4d:59:9e:
         3d:81:4d:40:72:49:45:68:04:3a:49:76:db:a6:a0:9d:3d:06:
         a0:ad:cb:e4:cc:6c:aa:c1:74:e8:a4:cf:de:0c:65:29:ab:6d:
         f6:ec:dc:27:74:d3:be:d9:4c:4a:3f:71:32:0f:50:68:6b:b0:
         10:e8:8e:55:65:b7:b2:bb:17:94:6e:e9:26:11:a3:46:7f:5e:
         9f:7f:bd:83:e2:0a:a7:84:44:e5:7f:1d:42:16:57:17:1a:88:
         04:28:8a:ae:86:34:1b:dd:07:4d:a2:49:b8:7e:e3:58:e7:82:
         91:b7:5c:9e:47:91:8d:27:62:d8:99:6b:8c:c1:ec:09:59:0a:
         8f:f1:05:27:7e:ad:35:ab:38:3d:dd:a3:01:a1:15:08:7a:3a:
         e5:8a:f4:71:13:a0:ad:99:bb:63:2e:6e:b8:b6:f5:04:d3:4c:
         3c:a9:82:0a:48:ed:83:c9:8c:74:d2:7f:cb:a1:e4:8f:18:ff:
         6b:b2:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----