Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
File:                     TyKDTEeXR7CovQphKfn-ZfgwJtA.mft (raw, json)
Hash identifier:          WHlA74g9K1xQIPlVwYVB1qsvSgrxm0CSvWkXNwzbFSg=
Subject key identifier:   B2:4A:3E:A2:12:22:41:60:61:03:36:A0:A9:62:20:91:D3:30:2C:2D
Authority key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
Certificate issuer:       /CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Certificate serial:       01962E9895C9D8D6F854BEA657584074197B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
Manifest number:          02D5
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 5_qRdcU_zBI67bUjjCeGmUT4bso.roa (hash: S33Bj4i6cQIjVG+I+Gmo76E+1aI2U06ldTXtc0u4sXQ=)
                          2: TyKDTEeXR7CovQphKfn-ZfgwJtA.crl (hash: yJeYMSt+8c6JWIr6zGDu8FRXlwtsK/V0RoN7y+X2ARY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:95:c9:d8:d6:f8:54:be:a6:57:58:40:74:19:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=b24a3ea212224160610336a0a9622091d3302c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:bb:f8:a0:99:82:9c:1a:4e:aa:97:47:2e:
                    e5:21:cf:c2:c7:0c:15:d4:24:82:5d:f3:92:3e:d7:
                    a6:f2:04:86:1c:84:09:67:1d:31:2b:c7:18:3f:aa:
                    c6:8e:57:69:93:91:83:c0:5b:52:7a:f5:7b:3c:0b:
                    1c:02:ab:36:78:44:c1:58:68:75:ca:7f:cd:da:7c:
                    95:a0:da:1e:18:ac:1f:68:0c:b1:0c:a7:90:4e:3c:
                    ba:fb:53:ed:22:01:66:c6:19:1d:e9:fd:60:b9:57:
                    b3:d6:2b:f0:ca:82:9e:f6:fb:0c:a9:b9:ce:6a:80:
                    94:6d:5f:bb:e7:1b:54:d0:9a:9f:97:49:9e:ec:0b:
                    fa:ca:62:02:74:c5:13:86:37:90:2e:4c:cd:23:a3:
                    a1:27:c7:26:a8:81:61:c7:05:88:3e:66:9e:a8:67:
                    3b:bf:05:df:4b:38:28:08:83:f7:00:aa:13:f7:a4:
                    72:9d:97:2e:dc:bd:ce:5e:4b:09:6c:e8:6a:6f:df:
                    4e:6e:31:56:ae:05:73:69:65:63:c0:66:c9:08:a6:
                    ae:82:5e:9c:57:22:b9:6f:de:bc:be:30:70:03:7a:
                    e3:0a:b5:b5:cd:1c:3c:83:e7:77:97:a9:b6:60:2b:
                    54:1e:a9:50:de:ad:22:35:5d:1b:14:c8:83:1e:8b:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4A:3E:A2:12:22:41:60:61:03:36:A0:A9:62:20:91:D3:30:2C:2D
            X509v3 Authority Key Identifier:
                keyid:4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:90:f2:0a:35:d0:f9:80:21:23:b6:33:4f:4c:a8:0b:ad:0f:
         95:c2:93:0c:72:39:03:8c:0a:67:da:82:03:c3:19:9a:b6:6d:
         57:2a:5f:f0:4e:02:cd:6c:87:fe:1f:3b:07:ad:7d:d7:74:6f:
         8c:29:7d:84:83:f2:41:2b:e1:44:80:c2:ba:48:37:e1:47:62:
         eb:c7:d2:42:d8:47:9c:f8:29:81:6b:d8:53:66:0a:2a:bf:4c:
         b5:b9:a6:9f:a6:f6:5a:1c:39:54:42:8e:ab:0f:15:cd:86:10:
         25:5f:26:09:14:82:97:bd:c2:64:a7:12:2c:14:5e:58:31:8b:
         c5:85:04:63:92:17:81:af:40:73:86:69:4f:23:62:b7:31:c9:
         37:5a:e6:42:af:3d:dd:91:6d:ec:62:14:f1:a3:f2:31:1e:4e:
         d1:cf:39:b1:20:8c:02:c4:9f:b3:0f:98:b1:86:e9:42:ea:6c:
         28:7a:a7:16:ed:cf:3e:3c:75:87:4a:32:54:85:ab:62:59:6f:
         47:89:3c:69:ef:39:9c:cd:4f:a4:03:23:50:30:ed:b7:5f:05:
         d4:db:31:41:e5:77:ff:6e:c0:a3:ff:40:72:bd:0d:92:72:f7:
         45:ef:7e:24:2a:fa:59:a2:34:57:39:8d:e5:49:e3:1a:ff:cc:
         f2:a0:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----