Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
File:                     tpJFTBZpZIbPBx7Rjnl240BJCfs.mft (raw, json)
Hash identifier:          2OAn7Bht/2CawtK4E7NTvpRdMn1O587RiAkHVgjWVZQ=
Subject key identifier:   30:06:13:D9:3B:0F:99:5E:0F:EC:29:DB:26:EF:17:66:01:8C:E6:6E
Authority key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB
Certificate issuer:       /CN=b692454c16696486cf071ed18e7976e3404909fb
Certificate serial:       01962DF3D161A0CB940CA21933DB5B6EE69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft
Manifest number:          0938
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 5czF8Od9k1lGzWbwlN6JD9EQv3o.roa (hash: xQiXSp/PKEr54Bt774G49z92F24A1eFshYT3vR6Fw2c=)
                          2: tpJFTBZpZIbPBx7Rjnl240BJCfs.crl (hash: Mtw7gZz4cI/e7iJfHcAS0shYy7/Cx6KKjhX8rqrKMrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:61:a0:cb:94:0c:a2:19:33:db:5b:6e:e6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b692454c16696486cf071ed18e7976e3404909fb
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=300613d93b0f995e0fec29db26ef1766018ce66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b6:a1:c9:ee:f2:8f:60:da:3a:d3:df:c9:d9:
                    4d:28:3b:87:d4:01:c2:4f:b2:ae:c2:e8:54:32:0e:
                    5a:b0:b9:80:4b:65:22:23:88:35:aa:4f:cc:d9:05:
                    22:05:49:d7:89:88:4c:77:e6:0f:fa:95:a1:fd:90:
                    ff:0e:0b:1c:5c:9a:56:7f:04:c6:c1:31:13:46:26:
                    be:24:3e:9e:64:c2:c4:eb:e7:49:f1:63:e1:1c:0d:
                    6f:45:01:70:e2:1e:af:37:02:21:8b:ba:73:a5:f8:
                    2b:84:12:de:c0:50:03:45:fb:6c:d3:2f:d0:b1:73:
                    35:09:f7:38:f9:f4:9a:9b:3d:4d:18:4b:00:c1:95:
                    27:96:1e:f6:8a:aa:c8:1c:c2:e6:fd:de:cc:8a:4a:
                    4f:2c:9e:a5:4f:f2:c2:d6:59:cf:a6:4c:e4:c9:8e:
                    c0:ec:09:78:6b:df:ab:a5:c3:1f:27:f7:19:08:d6:
                    6e:5e:27:77:6c:e5:b6:13:4c:8e:20:f0:d1:13:b1:
                    4e:3b:9e:98:db:00:de:0c:9b:36:4a:9c:9b:60:e4:
                    e8:bf:15:a2:ca:71:0d:4b:86:9f:54:94:a6:a5:88:
                    df:78:4f:22:d3:c3:da:b5:b3:c4:41:dd:81:f0:35:
                    73:2a:b0:a4:d9:a7:50:c3:84:e4:e6:f8:24:49:63:
                    f4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:06:13:D9:3B:0F:99:5E:0F:EC:29:DB:26:EF:17:66:01:8C:E6:6E
            X509v3 Authority Key Identifier:
                keyid:B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1a:25:b4:d9:02:0a:98:04:e0:a5:9b:5c:c9:cb:9e:4a:91:
         e7:f9:f8:03:d8:c9:1f:c7:6b:e3:08:88:f2:23:7d:2d:e6:23:
         27:e0:7a:a9:27:44:2a:fc:c9:c6:32:1d:70:1d:e5:67:21:b8:
         bc:5c:60:9a:75:a3:4c:43:ac:4e:6b:26:16:9a:42:32:c1:2e:
         ee:08:9b:3b:b3:e4:40:03:c2:0e:66:9a:6f:9c:44:6c:f8:52:
         32:d7:30:ae:98:28:e7:a2:75:67:72:98:81:2b:9b:e7:df:6e:
         31:81:3d:04:b8:e7:8f:df:a5:b5:4e:f5:59:88:53:b6:5e:9f:
         d4:4a:42:8c:07:84:19:8c:b8:cf:c5:84:97:af:61:41:c1:88:
         3b:d9:5b:e8:49:79:f9:a4:28:66:5c:d3:94:ca:ad:55:55:69:
         a5:df:f4:9d:8e:d6:25:92:3b:36:fe:56:33:fc:9b:4b:cd:f1:
         c3:c3:30:2e:c1:b3:29:06:f0:fb:52:0c:24:d6:d6:e1:a2:2d:
         59:bd:94:c3:43:fa:f0:fd:83:7e:65:d9:e8:45:27:92:2c:82:
         49:b9:ed:63:cc:f5:87:4f:3e:bb:5d:aa:41:48:47:4e:ee:f6:
         71:85:91:db:12:cf:fb:d3:3e:c5:39:04:5a:43:6d:47:99:c3:
         35:78:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----