Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File:                     TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier:          xYRw4wcCrBB0P5XcQZKVdJoNeJ1VgsL13he1OIyu1eM=
Subject key identifier:   FF:AD:EC:55:C7:2F:CE:AB:CB:7E:47:B1:6C:8A:11:02:22:84:72:E9
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer:       /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial:       01962F06FFA784DE42C4B14D1AFFE0F20329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number:          0BDF
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: Da/d3N5xyb4W6fNcAzVkmcbyDJxXOIeDNehFj5GsL8s=)
                          2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ff:a7:84:de:42:c4:b1:4d:1a:ff:e0:f2:03:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=ffadec55c72fceabcb7e47b16c8a1102228472e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:fd:86:74:68:ee:52:e0:b6:e1:9d:0b:78:
                    70:49:dd:1e:f6:63:6d:cf:3f:74:04:41:d6:a6:15:
                    b9:46:8f:db:33:ac:bf:fc:94:a6:ef:9e:99:b4:58:
                    be:d8:7e:4a:2c:dd:33:3a:7c:e3:6d:5b:f9:f0:3d:
                    98:6a:ab:88:47:12:d3:3d:70:ca:68:46:68:ec:52:
                    6e:21:54:4e:01:6c:61:dd:28:7c:42:d2:e2:e9:d6:
                    3c:6f:5b:ab:d9:aa:4d:39:24:d8:d5:73:49:e5:aa:
                    28:7f:6b:87:3b:5a:ef:11:c2:2b:e6:9a:8e:00:7a:
                    78:e2:fd:32:23:48:a5:95:4f:a4:30:63:30:3f:19:
                    6a:ed:20:66:7d:3c:06:50:16:27:bb:c7:49:04:42:
                    97:2e:9a:1a:19:ff:3d:65:b2:42:a2:47:5f:be:f7:
                    4a:20:4a:53:4a:f3:b3:d6:18:35:ca:2b:d6:06:d2:
                    a2:12:9e:1a:9c:2f:38:1f:d5:cf:86:a5:59:f1:1c:
                    76:be:46:85:3d:e7:3c:9a:73:44:c6:3d:41:ef:1d:
                    f0:85:1c:03:23:ca:6b:ff:65:8c:1e:c9:6c:e4:b5:
                    22:15:09:47:26:76:fc:76:0f:7f:bb:00:72:e4:fc:
                    db:21:70:62:5d:5b:dd:92:71:56:f8:f5:1d:e9:1e:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AD:EC:55:C7:2F:CE:AB:CB:7E:47:B1:6C:8A:11:02:22:84:72:E9
            X509v3 Authority Key Identifier:
                keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:98:c5:04:10:6d:83:ce:bf:9a:c7:a6:a2:00:e4:73:51:fe:
         58:6d:7f:c5:6e:25:a8:56:76:8d:48:c7:e8:ca:c4:b0:33:22:
         33:db:73:a2:d0:38:e4:48:02:5d:bb:3f:e4:f8:67:72:01:92:
         7a:8b:c2:cf:fb:1a:95:cc:90:30:ae:d3:df:7d:ae:f7:00:9f:
         d4:32:ee:29:bf:1f:2d:dd:ed:8e:e1:c1:6c:c1:53:12:75:59:
         85:59:1a:75:4a:f9:9d:ff:4c:58:a7:19:a5:67:58:85:c5:a1:
         16:44:2f:6f:fe:e0:99:ea:40:bb:d7:ba:7d:91:08:2a:50:f9:
         dc:0e:97:7b:45:f8:e5:ee:be:23:47:a2:5a:47:9e:8c:1d:62:
         ac:9e:09:73:fd:57:f3:08:df:bc:7f:20:22:3f:4c:61:08:ae:
         cb:58:4d:01:72:1d:8b:48:de:52:3c:fa:f3:a9:8a:06:b8:b5:
         e7:aa:2f:b5:01:56:ad:99:36:cc:26:3f:ff:c5:0f:9d:20:f5:
         e5:37:29:3e:a5:1f:c9:d7:3c:86:eb:ad:eb:4b:b7:b7:b8:71:
         a7:e6:1d:04:5b:10:bd:66:a9:83:7b:eb:f1:eb:97:23:00:65:
         53:07:0d:bc:b7:63:52:26:42:97:02:fc:cd:13:e8:72:cc:88:
         a2:c9:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----