Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
File:                     TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json)
Hash identifier:          7uuvf/vVLBSbaIlo2qDLgttln5eUvSPPFqHrlblEFsI=
Subject key identifier:   86:0A:D7:D6:FA:E1:53:60:58:EB:67:A7:04:74:93:94:C4:48:02:9F
Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Certificate issuer:       /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Certificate serial:       01962F06C6B31F050E24B700A012D1D4396F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
Manifest number:          0872
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa (hash: 0bp5i/w7MdfWSRoD3vMh3eYqQ/2+5IAaWheLS0shHT0=)
                          2: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: uNaCblt3rplQQ6ru4CwmDWCrkQZLTXauGwfuf4MVEHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:b3:1f:05:0e:24:b7:00:a0:12:d1:d4:39:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=860ad7d6fae1536058eb67a704749394c448029f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:d5:da:cd:46:0d:9e:b8:da:4a:58:f4:48:
                    ac:fb:81:d7:28:75:1e:33:24:4c:fa:9c:79:ec:24:
                    c8:c0:f4:7c:8c:e2:6e:07:31:cf:43:bf:b3:98:6d:
                    50:76:dd:87:b1:16:0f:34:28:bb:35:51:8d:71:fe:
                    ab:6d:23:04:af:ba:89:aa:0b:87:54:69:1c:46:58:
                    b3:27:63:c0:c9:85:da:ca:e4:8c:0f:88:48:32:bb:
                    14:ed:52:a5:1f:80:b8:e7:00:c9:74:5b:4c:8b:00:
                    fd:fe:45:2f:46:35:95:47:81:ad:b3:55:5f:c2:ec:
                    25:0b:ae:62:8f:0e:b4:5a:71:db:b5:ab:42:0a:0e:
                    88:69:8f:68:00:1f:8e:2d:02:c3:2c:39:45:18:cd:
                    aa:e8:92:c1:58:db:99:a1:c0:1d:45:cc:84:6d:a1:
                    9b:11:7c:b0:45:71:61:a7:3b:ab:15:40:bb:ec:21:
                    e0:8f:de:7c:92:2d:bf:17:06:33:61:62:0e:f6:0e:
                    89:2c:44:bc:cd:6e:ff:41:27:e8:0c:5c:f0:87:7b:
                    8f:fa:fa:8d:80:9c:be:cc:13:7d:9b:52:ba:0e:79:
                    94:40:e6:32:5d:23:86:7b:21:d1:c6:a5:5a:bb:51:
                    b0:66:a0:7a:ef:35:0b:a1:f7:ae:0c:b2:48:d4:c6:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0A:D7:D6:FA:E1:53:60:58:EB:67:A7:04:74:93:94:C4:48:02:9F
            X509v3 Authority Key Identifier:
                keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:92:ed:c5:b8:29:56:57:f9:da:d3:1e:9e:70:2b:c4:c8:66:
         6d:83:e8:b3:a1:75:81:6b:5c:59:dc:8f:71:06:f9:f2:49:c3:
         a5:dc:46:ef:27:16:b4:ba:80:e2:cb:64:38:90:32:11:8f:cc:
         bc:bb:d5:a2:8c:04:11:46:12:a1:1c:e7:3c:f2:08:c4:9a:de:
         17:4b:dd:28:f8:93:5d:3c:50:56:47:1d:43:a2:cd:9f:67:bd:
         1c:f4:2d:cb:fe:ef:be:23:e7:0b:d5:a8:b9:58:fe:f9:d0:b8:
         36:b0:0c:3b:2d:fb:0c:c6:79:dd:89:31:91:3d:27:48:0b:42:
         ee:ef:32:78:69:97:07:a7:4d:a0:e5:e5:15:60:f9:c7:cc:af:
         ed:16:04:ac:d3:63:85:d3:3b:0b:2b:2b:58:a0:29:19:0f:5a:
         c6:23:d0:4e:42:ee:b0:2f:0d:93:8d:c7:12:e5:81:a9:ee:f2:
         1a:d6:20:7e:7d:ec:68:7a:11:e8:bb:53:49:49:11:3f:f3:5f:
         2b:5e:57:7a:43:49:b7:93:24:4b:38:85:2c:f0:c9:a6:41:01:
         3e:9c:01:2d:fb:bd:02:30:f3:12:7f:21:9a:1c:8b:a2:83:c2:
         5d:51:e2:e9:bb:ed:b1:78:7d:d1:66:76:d8:d8:b8:2b:31:ac:
         3e:06:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----