Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File:                     Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier:          iHHNrDmLdgan60X1MKuvm1M5z9ijSNW21Yd0fMW/B8A=
Subject key identifier:   D4:33:1B:84:CE:5B:FD:93:4D:94:74:7B:B4:ED:17:B2:1D:59:7D:42
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer:       /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial:       01962E99497356DBC72F283A5E29A2909E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number:          07BB
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: SUUG2kKjexSvWz7hisQBB7MKXJ4.roa (hash: bTiVKxnx7l7XrKQSBNs5e26ay+4FQ9U506Q1Nlisl1M=)
                          2: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: XoyK6ksdAs+7Raow/RDPgHO01mG3rsqaOkThRMMhBqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:49:73:56:db:c7:2f:28:3a:5e:29:a2:90:9e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=d4331b84ce5bfd934d94747bb4ed17b21d597d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:26:d2:89:bc:1b:a6:f4:d3:4b:1a:34:44:47:
                    80:92:df:98:27:53:63:28:0c:45:ec:ba:6d:13:cb:
                    2d:04:f3:f4:a3:dc:4c:b9:99:dd:ca:1a:36:da:53:
                    d0:c2:e0:dd:a3:5a:90:3c:01:e4:e6:17:9d:38:4f:
                    ee:df:d8:cc:ca:9b:66:d6:96:eb:02:1a:ce:f1:e8:
                    ef:29:57:cc:7e:d9:fc:48:9b:18:bf:2b:c1:4f:67:
                    ee:4c:71:ec:04:aa:5e:06:06:a0:d2:66:75:c6:19:
                    64:a5:9f:17:05:93:a4:0b:48:24:3d:8e:cc:d6:8b:
                    91:30:6d:08:be:b4:4e:fd:e5:b4:08:17:4c:d1:94:
                    19:0f:8d:53:f2:b6:c0:66:a1:dc:2f:c9:df:e4:68:
                    6c:31:fd:ac:54:a5:3c:7b:25:03:dc:a0:68:a6:95:
                    30:87:5f:3c:8f:21:fa:95:ea:b3:a0:11:9c:00:17:
                    d2:cb:2b:33:6c:ad:91:75:8e:b0:3e:43:ef:16:d0:
                    f5:c9:1a:c1:13:8d:a9:d7:b6:4d:55:1e:41:00:ee:
                    00:a0:45:db:e0:e3:3a:53:42:a7:d1:86:c4:f2:91:
                    28:40:02:6c:bb:77:44:31:c4:e5:12:5a:d9:15:42:
                    58:bb:fe:ce:14:a9:6a:9d:44:6c:af:08:80:b5:cd:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:33:1B:84:CE:5B:FD:93:4D:94:74:7B:B4:ED:17:B2:1D:59:7D:42
            X509v3 Authority Key Identifier:
                keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2d:8a:56:07:26:34:0b:d1:15:31:96:6c:02:5b:c0:12:1a:
         9c:4e:7d:98:9b:91:3a:6b:4d:d2:f0:db:76:ab:29:bb:62:fa:
         33:71:81:32:9f:5c:09:38:e2:03:ea:57:5e:c1:71:5f:b7:f0:
         d2:5a:89:32:fc:8b:82:1b:53:b0:73:de:80:c4:75:8f:f1:73:
         83:81:c0:fc:b7:d0:eb:99:36:2b:19:4c:96:e7:1c:0f:05:fb:
         26:9d:d4:c3:ab:dd:ae:ca:84:ec:a0:a7:6b:41:db:59:f1:15:
         77:9f:49:bd:4d:9c:8e:b0:48:6f:dd:4e:a6:f6:0b:04:d3:d8:
         20:5c:f1:ca:92:64:b8:ae:3e:93:3a:a4:62:16:d0:2d:65:25:
         0b:fb:ac:2b:7c:f8:01:0c:74:ab:f9:6a:42:17:42:90:06:e3:
         8d:af:89:41:44:27:75:0c:ea:83:74:c5:82:b9:9f:52:fb:bf:
         90:8a:4d:bd:c2:34:8d:fc:3c:af:c2:65:4b:5a:f7:54:3a:68:
         14:59:d0:f1:c2:65:03:46:12:ea:b1:82:98:72:00:d6:07:c5:
         7d:cf:6d:ba:dc:cd:57:93:85:67:83:b0:16:8f:93:b2:27:f6:
         24:b0:9e:a6:7f:90:78:da:b2:b6:75:cb:85:fc:26:24:d6:e2:
         ad:f5:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----