Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File:                     TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier:          kY9jQzXLVBu6h7gBFNmYmgx5kj//YrwOyjkRYQg+xO0=
Subject key identifier:   5B:3D:24:7D:78:5F:5F:33:3E:D2:F3:73:3F:0B:C9:35:5D:8A:A0:D0
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer:       /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial:       01962F06B76D9709A9E5D403596C05FFF15D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number:          03A7
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: FXVByNPxdRkMO-o6GsvvheK9loQ.roa (hash: cJsMagby7QEs7crG2RTXoRPWZv4X7cM8ggqQkmQ3WIs=)
                          2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: bsD63DBzHvsmGdYWGylQh83/xfUKwaCTV9DQxlJFuYw=)
                          3: lUkUA-Czwa2okiPJT7Kq8pTW_Yo.roa (hash: fS+41ubfx3zCs5hYx7i3kz5j50EsoWw6NrXQjh9DDSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b7:6d:97:09:a9:e5:d4:03:59:6c:05:ff:f1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=5b3d247d785f5f333ed2f3733f0bc9355d8aa0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:c1:64:7c:cf:33:94:15:f0:28:e1:dc:31:
                    46:f1:8c:f3:74:7a:14:81:3f:ac:59:40:e4:04:89:
                    62:4a:3d:2d:0b:b6:35:5d:8d:f6:96:49:dc:2c:8d:
                    72:e7:a4:d6:ff:36:54:4e:e9:01:7d:30:4e:0b:10:
                    a0:73:29:14:39:31:4f:11:6f:c5:43:01:19:81:a7:
                    11:4c:8b:80:cc:c5:10:59:c3:9d:c4:52:15:09:a9:
                    53:f7:dc:22:50:50:57:47:2b:45:98:f8:52:66:66:
                    4e:2d:74:ce:c2:7e:d3:13:53:49:42:de:bd:19:4b:
                    20:37:76:1f:5e:59:af:b7:73:7f:34:34:1b:7c:8a:
                    bf:0b:e7:47:f8:dd:f9:94:77:01:fd:c5:66:18:a7:
                    6f:a0:47:5c:8c:a8:07:6b:d2:d8:66:e1:6b:60:7e:
                    8e:ad:54:26:0a:a3:bb:e2:46:9d:a4:a5:6f:ac:05:
                    ad:59:c6:2b:7a:08:76:3b:e6:48:db:1e:f4:86:e7:
                    9f:ed:b9:a3:71:cc:85:dc:65:62:0f:cd:29:cf:d1:
                    5e:1c:34:f4:eb:07:43:5b:78:11:88:bf:b2:a1:52:
                    62:d6:b5:13:60:6e:10:09:f2:ff:8a:1d:2d:6e:b1:
                    c7:f5:39:f1:3e:f0:63:04:6f:54:70:de:7a:cf:da:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3D:24:7D:78:5F:5F:33:3E:D2:F3:73:3F:0B:C9:35:5D:8A:A0:D0
            X509v3 Authority Key Identifier:
                keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:4d:2f:0a:63:25:36:08:50:80:4c:5e:f7:31:b5:22:c8:fa:
         9f:85:70:f2:e8:df:10:2e:a0:14:79:11:4a:98:9c:34:9d:1b:
         b3:67:dd:24:76:81:4d:6a:a3:ca:91:98:1b:a8:be:3c:10:c2:
         8b:a3:78:41:13:4a:5c:fc:2c:22:e7:24:ed:e0:0d:75:ea:dc:
         c5:cf:ed:52:d9:8d:af:d6:21:76:17:54:bf:1a:45:a3:1a:40:
         f4:62:5b:28:28:13:42:5d:1b:63:6b:93:8c:bb:73:1a:5a:1b:
         13:3c:46:6e:80:38:78:be:b3:3c:b9:38:38:27:bf:95:b0:ae:
         2e:4f:d6:14:0a:01:b1:eb:a5:b2:55:61:84:c3:54:d3:5e:d6:
         a6:4e:e0:34:70:f6:a2:b2:52:a4:99:7d:49:58:f8:a8:a0:86:
         74:c6:e7:2f:1b:da:0b:7f:b2:2b:00:05:b4:ab:ac:a5:b3:63:
         76:72:a4:a9:3d:27:f7:dc:e6:82:e9:41:d3:79:71:20:79:33:
         60:7f:45:eb:18:94:ca:e7:09:ac:2d:9d:e2:cf:ec:7a:f9:15:
         07:de:2d:b4:67:a6:9d:3c:9f:c6:b7:af:2f:7c:2d:bc:35:13:
         8b:4a:41:13:c6:37:f3:da:2d:5f:95:43:0f:51:e1:6e:31:13:
         a4:46:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----