Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File:                     TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier:          NCHISC64TeR5DeKw+vtFFd4gZILyt9+lGz+oqfxxy00=
Subject key identifier:   E6:14:FC:72:B2:C4:FD:67:A9:AD:E8:0F:79:CE:BE:1C:7F:57:61:C9
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer:       /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial:       01962FAB39FE3F909BFC4051BDEAAB94DC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=)
                          2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=)
                          3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: 67RDZo5G0/SCykEKV5wREXAYngxJzeq8ZiXLNdyIXT0=)
                          4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:fe:3f:90:9b:fc:40:51:bd:ea:ab:94:dc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=e614fc72b2c4fd67a9ade80f79cebe1c7f5761c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:94:b6:f9:46:7f:39:90:fb:86:5b:bc:22:
                    86:f2:2b:3a:f7:9d:82:ed:e4:82:25:01:9c:38:86:
                    d9:5c:21:b4:4e:7e:3e:0c:b8:47:2a:41:1c:43:45:
                    a7:71:88:33:33:6b:70:0d:e0:1c:e2:fe:5f:59:ab:
                    1a:36:bc:a5:3a:f9:f3:c6:76:af:cf:27:e3:83:7f:
                    7c:bb:0d:07:b1:7e:c0:84:2b:0e:89:54:f8:87:b1:
                    2a:43:2f:b9:42:e3:d3:0b:4a:7c:53:9d:d8:40:c6:
                    f4:f5:b4:35:bc:95:eb:0d:1e:ce:a6:90:e5:b1:98:
                    e4:53:ae:40:8d:29:de:c2:84:ad:73:4b:70:d2:aa:
                    64:7b:9f:5c:5a:4f:19:9d:99:79:7d:00:99:0b:b1:
                    93:09:be:a7:56:64:21:9a:41:7c:b9:8a:f9:57:ca:
                    a8:74:b0:71:42:94:83:9a:a8:4b:67:3a:0d:bf:6c:
                    b6:c9:ca:88:67:52:8b:f7:25:38:66:73:cd:7a:e5:
                    33:44:ef:d3:c7:1d:02:b9:1b:31:29:99:c3:42:61:
                    8c:ca:45:e2:e1:2d:32:c0:20:4b:9d:42:fb:e9:36:
                    16:d9:52:1f:88:5b:40:d2:01:f5:e0:14:18:71:97:
                    85:c3:e0:54:d5:1b:9e:45:3c:d4:5a:a5:cc:45:3b:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:14:FC:72:B2:C4:FD:67:A9:AD:E8:0F:79:CE:BE:1C:7F:57:61:C9
            X509v3 Authority Key Identifier:
                keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:42:ea:bd:51:2b:0c:8d:17:ed:e6:39:ea:cf:ca:13:5b:
         44:de:48:5e:58:f6:6a:f7:80:f8:36:6c:54:c3:e2:48:70:1f:
         83:58:b0:bc:66:8b:fc:a0:a6:66:26:b3:aa:0e:52:a7:aa:d1:
         02:21:da:fe:1b:40:13:d7:1c:c7:23:09:b7:18:a9:8e:63:0c:
         38:ff:f9:86:6d:c2:3b:c6:1b:0c:e6:0e:fa:03:ce:5f:55:6c:
         fc:ae:f9:75:ae:43:74:99:ec:bf:9e:2d:c0:45:1a:32:06:8b:
         89:be:1c:ee:e2:5f:ff:31:7f:1c:d9:4b:8f:ea:79:07:f0:0b:
         7a:cd:5e:42:e1:f2:5e:a2:60:3b:79:14:73:fa:c0:9a:f7:61:
         f9:17:98:fa:35:df:98:05:94:8e:a5:ea:86:8b:f4:9c:4e:17:
         02:c4:bc:42:f8:5d:23:d5:f8:a0:4e:f4:4e:77:0e:c3:13:3f:
         4b:94:6e:2b:8f:9c:cb:da:fe:3c:0f:07:b6:7b:96:ac:e9:38:
         84:de:90:7f:0c:ac:e1:f1:d4:63:6d:20:92:43:6a:9b:08:9a:
         c5:f5:ee:bb:fa:f4:be:1e:a7:e2:f9:9c:9c:05:ea:d1:7d:6e:
         4e:b8:b2:ac:6e:1f:bf:e9:81:7a:77:cd:c4:21:02:bf:83:3d:
         b7:b7:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----