Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File:                     TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier:          YIAmuWCWJ/7UeZawGFsX11GsKbsdsHlbrI2WyjHHFFo=
Subject key identifier:   2C:6A:C7:AB:9F:ED:E8:B4:F0:4B:E9:CF:3A:9D:E5:3B:0D:C9:B3:8B
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer:       /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial:       01962ECF6B97D1B6E671ADF66144534E6145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number:          0228
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: fQ9IF5sB7BVfbFTih8lbOnxUROQg3BOUJiTrWz5qsWU=)
                          2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6b:97:d1:b6:e6:71:ad:f6:61:44:53:4e:61:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=2c6ac7ab9fede8b4f04be9cf3a9de53b0dc9b38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:9f:2b:e0:75:7f:38:cd:68:f4:3b:63:b4:
                    10:5c:89:95:fa:3b:af:1c:c8:52:76:5f:1f:48:24:
                    6f:6a:50:28:f6:da:d7:bc:bf:da:8c:e5:7b:5e:15:
                    13:4f:41:8d:2d:1c:88:69:a1:20:b3:1b:39:62:9a:
                    bf:fa:a9:76:76:5b:c7:f6:b3:88:f4:df:91:61:bc:
                    a1:a8:b5:10:ed:9c:fd:b3:b4:f8:0e:4b:3d:f0:0c:
                    e2:1b:bc:1f:55:35:c1:16:8f:53:82:14:5d:43:fa:
                    80:27:2c:40:d8:a8:3a:f0:17:b7:13:bc:a0:b3:43:
                    b4:86:ae:47:cc:f3:d8:b9:0d:31:b9:10:7c:c5:9c:
                    43:23:36:5e:ef:58:25:6a:77:ae:3a:d1:4d:12:01:
                    25:cb:46:f7:4c:8f:dd:fb:63:8a:2c:f8:0c:c3:32:
                    d5:88:71:ba:27:ef:87:9a:ac:49:86:06:00:09:1f:
                    4e:42:0d:18:98:6e:51:c7:38:54:c4:44:a2:a4:a4:
                    d2:aa:a3:1c:9e:4c:34:b9:09:85:8c:50:e1:1a:7c:
                    67:36:55:6d:d7:f4:8f:b6:78:a4:94:a2:4f:e2:6a:
                    1c:e3:8d:ae:7e:5c:d4:81:df:e5:6c:ae:39:34:56:
                    ff:ab:37:b9:f8:f3:e7:13:08:28:24:20:24:73:57:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6A:C7:AB:9F:ED:E8:B4:F0:4B:E9:CF:3A:9D:E5:3B:0D:C9:B3:8B
            X509v3 Authority Key Identifier:
                keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:6f:d5:b6:17:f6:88:2d:fd:df:2d:b0:d3:78:af:e2:78:
         4f:fb:19:c1:f1:d0:16:b6:69:a8:90:fa:6e:30:85:5b:56:aa:
         dd:58:47:12:c1:4a:af:fd:11:e7:aa:90:5d:1b:1d:1f:50:87:
         42:ff:0e:f4:23:9f:92:d3:fb:9c:16:49:03:3a:05:9f:85:c6:
         d1:da:95:99:ce:18:db:35:c2:ea:25:94:26:91:24:f1:b6:28:
         91:0f:28:d1:60:0b:69:8c:23:9c:29:dc:cf:f1:c3:15:67:68:
         79:66:3a:17:1f:85:0f:ec:cb:6e:58:3b:2a:ad:f6:5b:42:8f:
         9e:12:40:e9:e5:7a:13:79:c8:a1:50:5f:de:1b:44:ba:91:50:
         84:06:3a:38:43:cf:ab:80:8d:73:4e:ec:23:00:c2:cb:b2:35:
         0b:36:ee:46:8a:14:5a:77:14:a9:6b:24:a8:5d:d3:fb:bc:ab:
         5d:81:2f:fc:52:2c:7e:d1:46:52:3a:6c:5a:d2:55:3b:ff:6b:
         37:c4:03:56:a1:33:78:d0:ad:1a:a8:f0:73:28:64:35:69:5c:
         cb:6c:4c:25:8f:27:2b:1b:0c:4c:ba:cd:a6:91:2f:ab:d1:6c:
         95:e0:94:31:f6:75:80:aa:8d:2e:1e:6d:6c:de:2b:33:ca:9d:
         a9:85:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----