Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
File:                     T_TbtnXuCOi72XQHoafv2RkZ5zg.mft (raw, json)
Hash identifier:          yT3k5D7bpdLTrcEv2P68Q7LQ/q2ErCknXsWuAqcIoCQ=
Subject key identifier:   97:A5:69:99:3F:07:BB:9A:66:C1:24:30:F0:5E:2D:73:4F:0E:62:23
Authority key identifier: 4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38
Certificate issuer:       /CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
Certificate serial:       01962E9967368DF9519C54CDA3C2C91BDB95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
Manifest number:          0E00
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: T_TbtnXuCOi72XQHoafv2RkZ5zg.crl (hash: V7hSbJfYOViT5ZTyMNjKf1QVRHsk5Da87r5qRLYZr6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:67:36:8d:f9:51:9c:54:cd:a3:c2:c9:1b:db:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=97a569993f07bb9a66c12430f05e2d734f0e6223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:26:fd:b0:c8:80:f2:cc:6c:7d:6b:84:be:
                    60:8b:34:9d:f4:17:2c:71:2d:6d:98:f7:c9:ce:9e:
                    6e:32:91:03:3f:44:a8:4e:c3:4d:cc:fc:62:89:4b:
                    89:60:9b:5b:62:26:f4:e9:17:50:e9:58:2b:50:24:
                    e5:ed:0c:16:35:76:fe:a6:e0:d8:8d:b1:2b:33:18:
                    98:73:5b:22:36:b3:0e:40:58:5d:60:49:65:5f:00:
                    3b:a2:e4:d7:b4:f2:34:8b:b7:9c:f3:7e:75:7f:74:
                    c4:17:4f:3a:23:da:fd:fb:de:d5:b8:e6:3c:fc:37:
                    26:dc:10:e9:90:41:4c:77:78:10:57:1e:ec:61:b0:
                    1c:86:6a:60:81:9d:c9:f0:73:21:53:ab:b4:99:2e:
                    e2:7b:6f:b8:0f:15:00:2c:4a:5a:89:61:64:31:24:
                    e6:a4:04:c9:b3:43:93:f0:33:71:f4:58:e9:36:fa:
                    d7:fa:fc:67:79:da:88:fb:1c:46:50:5b:bd:fd:52:
                    45:8f:f5:0d:90:51:74:7e:b5:07:86:f3:3d:76:ad:
                    6e:0a:9b:13:d5:c7:2a:fc:4a:99:39:85:80:f3:33:
                    cc:19:47:75:2f:cf:a0:24:ec:75:94:a7:ff:57:6c:
                    bc:06:81:b9:3b:01:73:70:b5:2f:6b:a8:1f:db:b1:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:69:99:3F:07:BB:9A:66:C1:24:30:F0:5E:2D:73:4F:0E:62:23
            X509v3 Authority Key Identifier:
                keyid:4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:81:57:2a:8a:2e:d6:92:2c:6d:76:f7:3e:61:c5:80:ce:2b:
         c9:3c:a6:b0:4b:31:d9:c2:3c:a5:2e:82:a0:b4:33:c5:2d:b1:
         c7:41:59:8a:b5:39:27:27:93:48:71:f1:3f:ca:8b:41:65:94:
         b6:9b:ad:0b:08:77:94:ba:b7:b1:8b:e8:11:24:a9:88:7a:bd:
         d8:68:8f:4a:9f:e8:34:9f:4a:4a:07:f0:16:d0:1c:b7:f1:50:
         52:a4:cd:9a:30:60:2f:bd:a3:e7:1e:65:5c:1e:cc:ac:87:6c:
         9f:6d:1a:2d:2b:6e:b5:30:83:10:cb:1f:c4:37:13:c7:bc:f1:
         b8:27:47:e0:e1:de:07:93:2a:75:19:c6:23:b6:fa:e3:3a:a6:
         97:d6:a3:46:9a:e6:35:d1:7a:a4:d1:11:ef:d1:da:50:0e:8d:
         1f:32:f3:33:ce:f7:03:1b:60:50:35:21:a7:3c:02:b7:af:9a:
         8b:8d:98:5e:26:3d:b0:86:42:f5:85:88:f1:97:25:dd:31:91:
         fe:c7:79:71:f2:dc:63:03:d4:04:76:09:aa:7e:86:0d:33:10:
         a1:a6:ae:ae:0e:a8:be:2b:3d:30:5c:7f:ac:ba:ab:f0:7b:76:
         e3:02:96:39:43:90:85:89:73:59:69:84:8b:e8:56:19:7f:d0:
         f0:5b:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----