Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File:                     Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier:          InvO2Kq2wL7cdOpRnrufl7fqSw+Pv9Q1HF257vViJx8=
Subject key identifier:   DA:9F:FE:3B:D7:91:69:9C:D8:D7:B2:C7:0E:FB:3A:63:FD:7F:CF:80
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer:       /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial:       01962ECF8B58EA9B339A6733E5FCFF59D0E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
                          2: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
                          3: 4mGseaRg6egaG3HIgmeDQNxN1fE.roa (hash: FljGcaDpbXdbXqPdJOkNLnFoXkPv5nApI4xvVtBOm2M=)
                          4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
                          5: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: IQDuKhqanDkSXBiHU8TLGPPWQRVQy+V14+RKYsB9H4E=)
                          6: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
                          7: xMtiBvCdtWdpBztykMPhn-kY_9s.roa (hash: GpBtwdAknau8bMjJICf5aFSnmGTM0dxBI9Qhq4iCudQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8b:58:ea:9b:33:9a:67:33:e5:fc:ff:59:d0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=da9ffe3bd791699cd8d7b2c70efb3a63fd7fcf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:34:ae:75:69:15:7d:ef:6f:7c:bd:a7:97:
                    b7:9a:4a:61:75:2c:0d:53:53:f0:22:35:f4:82:d2:
                    5d:c5:94:45:b9:8a:74:85:02:4e:e5:83:2d:7e:ce:
                    08:d5:38:7f:cd:a1:18:4c:c2:b5:76:c5:fa:7e:35:
                    42:84:89:6c:7b:33:42:3e:34:2a:42:06:71:e4:dc:
                    e1:08:28:6c:18:8b:86:34:e7:38:3a:2d:6a:fd:84:
                    a6:b2:ea:40:74:fc:8c:f3:22:23:5d:1d:45:22:c7:
                    19:bd:7e:31:4a:19:32:2c:7c:f1:24:3e:1e:d0:a5:
                    68:aa:26:05:52:a5:df:8b:8d:49:5d:bb:d5:31:09:
                    27:23:62:6a:a8:e3:8a:c5:47:3a:a8:96:a1:3f:08:
                    cb:e5:e2:ec:6d:b4:44:9a:5f:f5:7d:d1:0a:7e:d9:
                    84:28:f5:68:cc:b0:fe:e4:6a:83:6b:56:d4:e8:f0:
                    29:bb:d3:d4:50:6a:59:65:d8:51:f4:31:42:af:23:
                    bf:b1:8c:8c:72:7c:8c:92:ec:b1:94:63:70:55:46:
                    85:70:1c:f9:1c:82:ae:9d:fd:e9:e3:17:cb:95:ee:
                    6f:26:c6:3b:09:93:ac:5a:a2:72:6a:06:43:42:e5:
                    a8:02:3c:03:02:5f:55:63:e2:3f:b6:65:35:b4:05:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9F:FE:3B:D7:91:69:9C:D8:D7:B2:C7:0E:FB:3A:63:FD:7F:CF:80
            X509v3 Authority Key Identifier:
                keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:9a:1b:f2:28:eb:27:01:21:0b:c8:95:1d:2f:11:a3:bf:
         b2:fa:e7:67:4d:3b:9a:6b:e7:dd:28:96:5f:f1:4d:43:76:fd:
         47:5f:2c:27:36:73:29:18:ea:f2:85:77:33:29:f3:17:b5:83:
         8f:62:02:f5:8e:f2:3b:d9:86:ec:ec:e0:42:6b:89:07:e2:7c:
         3a:60:b5:20:97:23:8c:4b:7c:04:ba:36:46:74:6d:a5:fa:ed:
         f3:89:07:7f:b9:24:3a:76:6a:46:d8:cf:c4:01:42:38:8b:b4:
         bc:8b:2c:61:12:7a:ce:ee:60:ce:e0:95:cb:f5:55:e8:6f:5a:
         d6:fb:6b:ba:04:98:ef:54:b4:f6:14:fd:c2:7f:14:70:1d:b7:
         09:6b:d5:fc:1f:c7:30:5a:9d:b2:81:cb:dc:58:a3:ae:dc:b8:
         ba:62:bc:fa:66:8d:4c:3a:97:58:fc:b5:07:c6:cd:c7:55:10:
         d6:fa:a5:cf:28:88:48:c4:cd:08:10:18:99:30:8c:34:f9:b5:
         6c:ae:8b:eb:4a:39:36:0e:51:2d:1e:7c:f8:28:21:8b:b3:ef:
         53:53:6b:f2:64:67:fe:fd:7b:3d:f7:0b:9d:f7:d6:ca:aa:f9:
         19:49:61:1e:16:cb:d7:d3:63:de:d9:bc:0b:4b:65:36:52:16:
         4c:02:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----