Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File:                     TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier:          UDT3CdsRJqosCabMdSn9fQcXekxNxpjEkS/5f7d2W8I=
Subject key identifier:   59:DE:79:F5:81:E5:FD:CE:C1:04:67:AF:C9:15:60:C9:67:67:B8:7B
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer:       /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial:       01962E990800FB7334FAF8B465C026B51DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: Euijsr2Sh9I+dr9zCdD4YndbnMVNPRDER6LWw7Rwy0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:08:00:fb:73:34:fa:f8:b4:65:c0:26:b5:1d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=59de79f581e5fdcec10467afc91560c96767b87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:cd:6f:05:76:8d:51:c0:60:a6:25:99:e4:
                    d5:b9:83:ed:e1:24:78:51:17:6b:03:b9:57:3a:71:
                    99:83:1a:84:3a:2b:ba:2f:c4:fe:62:37:57:cb:87:
                    8c:c7:c2:06:a5:e8:16:1a:25:5a:eb:7d:82:0c:cf:
                    c5:6a:86:a3:af:a1:25:15:84:38:25:dc:fd:08:2d:
                    47:df:b5:4c:30:43:c6:ed:6c:65:b7:9b:57:3d:99:
                    2f:56:19:69:19:cc:fd:3d:e1:5c:87:39:2d:33:8d:
                    6e:26:34:99:df:ef:36:1e:aa:bd:71:6c:20:4a:97:
                    6e:a5:69:78:43:33:d6:36:b8:e5:42:36:d6:61:70:
                    56:e7:f5:69:18:f3:4d:9c:b4:f9:9f:03:a6:ec:37:
                    af:4c:f4:7d:e3:29:5b:2d:20:8c:db:d6:24:e5:ac:
                    d0:b2:f4:50:ef:ec:70:c6:99:ba:32:35:1c:cf:30:
                    bb:a4:d9:c2:91:32:6a:d6:f8:bc:02:7a:11:4c:ee:
                    80:10:1e:68:bd:b2:c1:00:11:f7:2a:ff:73:03:10:
                    5a:a8:1c:dc:62:f6:00:80:50:19:ce:f0:b1:fb:a4:
                    d7:aa:8d:f8:92:21:8c:6e:e4:49:28:4a:f1:12:89:
                    c5:8b:b5:9c:28:03:9a:18:fe:84:cc:30:14:88:3d:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DE:79:F5:81:E5:FD:CE:C1:04:67:AF:C9:15:60:C9:67:67:B8:7B
            X509v3 Authority Key Identifier:
                keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c7:ac:14:6c:c8:77:17:85:ce:85:f4:1b:db:65:40:15:4a:
         5e:37:5a:a2:c4:f6:a1:fc:89:77:cd:70:cf:e5:ee:cd:e0:e7:
         00:a5:01:5a:8a:85:49:1a:7d:b0:85:c3:07:f1:99:cd:65:13:
         37:e5:65:aa:13:db:21:56:70:5c:f3:5f:9e:c7:75:f5:91:e8:
         cb:44:cc:54:b3:92:f9:16:ed:98:60:e7:50:b3:c6:67:76:3e:
         6a:94:ba:99:2a:f9:33:db:e0:fc:26:4c:34:43:16:97:3a:e2:
         68:37:1a:31:22:f2:39:3e:02:f1:9b:5d:14:a5:c0:0a:46:5c:
         e7:71:2d:20:7a:28:75:1f:d7:c3:c8:57:7e:c9:26:9f:de:0b:
         ab:b4:fe:bc:d5:ac:2e:9f:06:be:ad:f9:0c:2a:0e:2b:e5:64:
         31:49:22:9e:6f:45:61:fb:7b:8b:d1:de:ee:4b:76:ea:7c:2a:
         01:16:3f:47:85:23:77:59:71:20:ef:2b:c0:02:67:f4:50:5e:
         f2:c6:23:01:12:cc:00:19:28:8a:8b:7c:16:98:0f:c1:80:1e:
         43:82:9e:a9:f2:e5:81:b3:95:d7:7e:2c:8f:08:e3:42:47:c4:
         73:e6:4b:0c:de:f0:41:83:96:6a:d7:01:86:52:d5:7a:bf:74:
         82:a5:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----