Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File:                     TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier:          hlr3a0uzl0djY7mY72z45PnI3MViqeJJVbLSzjo3jJI=
Subject key identifier:   B2:67:91:7E:37:3F:F6:61:22:27:82:F3:C5:96:84:F8:42:D8:6B:FB
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer:       /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial:       01962F071B9565B8F10679EF4E477912E2EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number:          0D45
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: OJMesxRLr4GH6VUm4s3n61SsnME2bt8dRXdMUmKgtvA=)
                          2: yO8yGDlp-pgPsfCtW6-Sdqgf6z8.roa (hash: SH391E3HYBBZSzKR5WZ5E1ALuIU3dss9i9wIgwa0Lyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1b:95:65:b8:f1:06:79:ef:4e:47:79:12:e2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=b267917e373ff661222782f3c59684f842d86bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:57:39:8b:b5:cf:32:9d:5f:0d:f0:6f:4d:
                    c0:25:6d:1a:10:8f:10:fa:4a:25:03:a3:ad:3b:65:
                    92:d1:34:34:62:90:73:47:05:76:8c:ac:a0:72:81:
                    5d:8d:dc:ad:1c:cb:f6:79:63:63:0d:4c:20:79:c3:
                    6d:0b:0e:b1:dd:8f:d4:09:30:4f:d4:dd:f2:f8:dd:
                    03:7f:c1:3e:e3:d0:ea:dc:a7:71:a2:75:a1:40:4c:
                    c7:cf:6a:c5:a7:2a:02:bd:69:f0:16:01:a4:2b:8b:
                    bb:51:31:fe:4e:a9:ec:0a:a8:7a:ad:11:94:ef:a8:
                    8e:00:78:6f:c4:db:d9:ef:61:fb:07:fb:61:15:8e:
                    4f:dd:89:d5:d0:77:f5:c2:03:aa:97:7d:15:69:27:
                    29:1b:da:1c:75:dc:f6:c4:a5:3b:af:fa:3d:0e:9e:
                    c4:9a:14:a6:eb:88:14:3c:a9:72:b5:44:cd:2d:15:
                    10:69:4d:20:b9:1d:6d:d2:c0:e0:09:f3:8f:1d:a6:
                    d7:11:cc:6c:cb:b6:7b:49:78:19:f4:4f:7d:f1:44:
                    90:74:58:30:f7:7d:53:c3:1a:34:35:14:1e:c4:dd:
                    5d:8d:8a:aa:b5:ee:70:c0:6a:bc:2f:28:d2:42:95:
                    9d:1f:f2:09:bf:cb:9b:22:ea:ae:bd:3c:92:9a:e4:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:67:91:7E:37:3F:F6:61:22:27:82:F3:C5:96:84:F8:42:D8:6B:FB
            X509v3 Authority Key Identifier:
                keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:13:47:e2:ec:9b:3a:dd:5c:97:d5:5e:99:5d:7f:d3:7f:
         1a:13:ad:68:38:d1:67:42:ff:b9:b8:d0:93:a5:f3:dd:55:99:
         40:71:4c:e2:a4:c0:96:e6:cb:ff:7a:d9:62:8c:30:3c:0d:21:
         a4:c4:0e:d0:6a:09:1a:0a:69:1e:ec:07:2a:83:c5:4b:db:38:
         a2:6a:a6:75:e0:b3:d1:01:a8:f1:03:19:e5:a1:6e:f4:0d:93:
         63:d0:22:4b:47:a7:d4:ad:e2:21:b5:28:57:46:92:b8:15:4c:
         39:98:3e:38:bc:11:9a:79:02:24:3e:74:79:3e:e0:68:9b:8e:
         9b:c6:81:af:7c:dd:5c:3d:2a:6a:79:0e:d1:86:41:e8:b7:23:
         67:17:68:c0:44:cf:f2:00:e7:4a:da:93:e4:e1:b6:0c:62:dd:
         1a:b5:04:fd:be:87:b7:fc:6d:54:44:25:b9:9e:0d:fe:5c:b0:
         cf:fe:3c:19:bc:0e:cd:b8:9f:70:3a:31:9e:dd:5f:f3:1c:69:
         c9:30:66:d6:dd:be:d6:77:50:81:b6:84:30:b8:ac:a1:38:d2:
         ba:2a:11:41:3c:66:54:2d:14:87:00:ed:f8:0f:6a:df:6d:31:
         e7:89:f7:a5:5d:7e:f8:55:3a:01:c0:cd:ed:20:48:f4:65:5a:
         07:e4:6a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----