Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
File:                     tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json)
Hash identifier:          awA5SNr7hwadjfgLvkSpzLstmF2imvbOAKhd0cwYHGg=
Subject key identifier:   B7:A6:91:86:1C:19:51:2D:52:44:25:DD:E1:C2:36:23:11:BB:92:6F
Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Certificate issuer:       /CN=b641b288b4d413e955fea4460b32bf2cc182af03
Certificate serial:       01962DF3CEBEB970EBF189E7793941DB9936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: zVQFWTbjEkg0sNL/WCMY9DsficwiYS3BwCKort2tpIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:be:b9:70:eb:f1:89:e7:79:39:41:db:99:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=b7a691861c19512d524425dde1c2362311bb926f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:46:01:56:62:79:91:6a:1a:44:ae:14:0b:
                    2a:da:d9:72:36:d1:a0:1b:fe:02:01:d1:ac:f6:47:
                    74:78:df:fc:ba:3a:c4:0c:97:a9:21:e7:b7:bc:57:
                    bc:d0:4b:f5:ef:b1:31:d3:7d:ec:45:ea:6c:2e:10:
                    0c:9c:73:d9:fc:ee:eb:64:4a:c9:5a:6e:97:54:ab:
                    3a:c8:40:60:93:03:77:6a:11:88:3b:8c:04:f2:a4:
                    9f:38:66:3e:c3:a9:c7:5d:2c:5d:b8:f8:f6:68:b0:
                    d8:ce:89:9a:c0:5a:8a:93:26:a0:52:50:37:15:64:
                    50:d0:b8:c9:18:b7:8b:be:64:1b:d1:a9:bc:55:8c:
                    95:4a:df:91:44:2c:4a:6a:7d:38:b6:54:fc:14:d9:
                    c1:83:1a:42:07:6f:4a:57:6a:3f:16:ca:99:5f:11:
                    d2:8e:da:e6:4e:f4:fa:aa:e4:ab:a0:68:2a:ad:d5:
                    9b:4c:e5:bc:5d:23:90:91:5c:7f:a7:95:cb:e0:ec:
                    3e:84:8c:da:4a:23:d3:1c:c2:71:60:2a:ea:ea:1f:
                    74:7d:2b:81:a9:08:fe:8c:f8:52:79:f0:68:3a:88:
                    47:42:b7:06:3b:c5:fd:a1:ce:57:7c:1a:93:a1:de:
                    ad:13:8e:ae:3e:cc:e8:ff:3a:6f:65:fb:c3:fd:68:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:91:86:1C:19:51:2D:52:44:25:DD:E1:C2:36:23:11:BB:92:6F
            X509v3 Authority Key Identifier:
                keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:dd:e5:f7:2f:ca:fb:e7:f7:4d:15:78:08:42:96:a8:4b:2b:
         a0:08:54:f8:33:49:fd:1e:7e:3a:f2:99:d7:ab:c5:3c:9a:25:
         d0:15:c1:20:f7:79:97:35:8a:a2:98:9a:21:f9:e5:74:ee:b0:
         30:e6:86:10:82:b8:5f:b1:22:18:f4:20:d7:2c:11:dc:a4:6a:
         31:0b:2d:12:9f:fe:93:56:7f:8c:85:20:3a:c5:d5:0b:4f:a6:
         48:fe:72:88:f1:46:9f:d1:b6:a3:33:6f:c6:ba:7c:f6:ba:23:
         5b:d4:1c:17:69:eb:32:36:9b:bc:18:bf:96:fb:90:17:81:02:
         84:34:72:1a:65:0d:29:a5:cf:b4:5c:e2:35:dd:0e:83:a8:a5:
         d0:5f:17:df:32:60:05:a1:95:e5:68:38:1d:42:66:b4:b2:c8:
         80:da:f6:88:ca:83:dc:88:80:85:65:06:5d:cb:0b:2b:b5:86:
         c8:6e:28:3e:43:02:68:a6:c3:48:40:e9:51:5e:a9:49:63:01:
         ab:d6:96:15:0f:0d:13:da:a0:a1:42:6a:89:ec:0f:42:ff:f4:
         8c:6a:b3:c6:ed:72:9b:fa:45:4b:61:e7:bd:78:7e:67:fc:59:
         e4:28:16:69:55:13:81:6d:e6:90:44:5b:30:89:36:a0:b1:85:
         20:b0:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----