Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File:                     Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier:          9A6QbkapS/WPVjJINiOiMfTByROndyHAlRLWAAok8i0=
Subject key identifier:   A6:66:4F:BE:A1:FD:D0:43:DD:B5:4D:61:37:4D:DD:09:DE:64:24:60
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer:       /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial:       01962F74D7FD2566E97A105A955D100B57AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number:          14E3
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
                          2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: 3EFV0kEQzy+RQBEUxWT4Kp761Yd37U6si69mYzKTzFg=)
                          3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
                          4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d7:fd:25:66:e9:7a:10:5a:95:5d:10:0b:57:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=a6664fbea1fdd043ddb54d61374ddd09de642460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a9:39:28:3b:c0:68:ee:eb:81:01:27:b2:90:
                    a7:1b:c5:14:e4:1a:85:c9:c9:0e:77:c0:05:05:0b:
                    02:1e:82:d6:31:8c:40:1b:3a:b6:21:c2:ac:b8:8d:
                    1b:26:c2:d5:69:17:e5:6b:c3:a0:7d:13:2c:98:fd:
                    3d:40:6e:5b:7f:a6:2e:90:76:ad:04:f7:1a:db:bf:
                    f7:35:40:63:da:43:8a:02:5c:ed:7d:0b:37:eb:0f:
                    bc:86:12:7d:bc:3a:2f:23:f0:92:c8:3b:50:71:4b:
                    53:28:ed:e8:99:77:10:89:08:7e:6d:71:b0:2e:56:
                    3f:49:da:a7:81:47:fb:ee:9a:88:8f:d5:60:b0:40:
                    74:19:c8:49:d1:84:e1:8b:29:d0:be:d6:16:94:62:
                    4f:95:6d:3a:5c:de:50:1a:e0:0c:4a:2d:79:59:36:
                    82:1f:91:a2:a2:8e:50:44:53:d7:3c:b4:73:db:10:
                    c4:3b:83:bb:b4:da:24:bf:30:fb:19:5b:6e:36:32:
                    81:63:2d:5f:a2:b2:c7:d8:21:f0:da:19:d9:73:da:
                    19:3a:ce:a0:82:70:71:ab:5b:c4:2c:fa:a4:74:0c:
                    95:1d:a3:45:cc:7f:9b:61:df:08:ae:dc:62:1b:63:
                    ea:1d:9f:f1:57:ee:51:20:a5:19:33:b2:ba:b1:01:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:66:4F:BE:A1:FD:D0:43:DD:B5:4D:61:37:4D:DD:09:DE:64:24:60
            X509v3 Authority Key Identifier:
                keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:43:de:01:8a:8a:d6:92:1a:a9:2a:e4:e7:8d:a3:d4:a1:be:
         9b:a1:bf:82:04:01:d5:6c:21:5a:cc:93:92:d2:cd:f0:39:48:
         20:1e:cb:3a:ec:dc:fb:a1:d8:e7:ec:72:04:01:20:2a:c5:8f:
         a4:b8:31:82:40:ba:ac:fe:f2:9e:c1:04:ad:2e:85:5a:70:31:
         2e:67:89:95:e1:ed:57:38:23:d0:cc:17:2e:60:f4:06:08:2e:
         34:24:aa:ae:7f:2a:e6:2a:f2:88:eb:07:76:3b:58:8a:58:35:
         64:76:53:f5:60:ba:02:e6:60:6e:d8:e2:e4:ac:f7:b8:f2:5c:
         8e:7e:f3:4b:46:e6:7e:73:a6:c3:85:18:a2:e2:30:be:6d:f7:
         c8:92:da:48:cf:76:6b:e3:95:29:ea:86:b2:2e:2f:0b:dd:bb:
         9d:04:c0:fc:72:48:9b:f5:3a:06:2e:69:bc:62:7a:ee:29:d4:
         93:74:dc:37:5a:4f:4a:5b:d5:09:a9:e2:8d:10:15:16:36:88:
         22:07:15:3a:c2:d6:4c:cf:8f:00:4c:20:2f:d2:77:11:16:00:
         78:aa:63:9f:52:53:f8:60:12:7a:9a:07:ad:cc:1b:22:f2:74:
         8d:bf:25:50:a4:2a:ab:db:d3:ff:9e:27:93:a2:b8:20:28:ec:
         29:79:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----