Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File:                     TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier:          kLXAViYJmxOLzXAQiZC/KTDXiF3vy9CQ9yOgWp+WtY4=
Subject key identifier:   89:7D:1F:13:65:41:CB:E5:70:3F:3D:44:EB:4D:4F:45:36:23:E5:EC
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer:       /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial:       01962E2B1E6A2B56E1906F661B16C536352C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
                          2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: lSPqva/WbAOK8jO0qj0LN8Nvg8e4KrePmtMCK0MjSdE=)
                          3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
                          4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1e:6a:2b:56:e1:90:6f:66:1b:16:c5:36:35:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=897d1f136541cbe5703f3d44eb4d4f453623e5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:f3:2b:dd:14:16:3b:49:8a:96:4e:d0:da:
                    a2:f3:7e:1c:66:f8:9c:42:e6:2a:bf:71:ea:37:cc:
                    fd:b6:d8:19:af:f3:8d:17:76:74:64:7d:91:da:a2:
                    52:d0:38:02:2d:35:69:60:d6:72:53:b6:d7:50:a1:
                    a1:c7:56:9d:b7:86:32:47:d8:26:6b:f5:ed:c4:6f:
                    69:ef:35:94:29:c0:1d:cd:d9:8c:cc:1a:16:9f:47:
                    73:35:b9:cd:ed:d5:8c:9a:d6:b9:d2:f1:43:7a:8d:
                    b2:25:c7:07:d1:ea:ae:98:0c:b4:e9:11:2f:fb:32:
                    80:fb:83:53:6e:b8:92:75:2c:44:0f:d7:6d:49:96:
                    33:b0:ac:f3:b7:cf:87:95:89:53:cc:45:5b:e7:c8:
                    e9:e0:a8:cc:3c:59:1a:0b:d8:25:b8:31:1d:64:50:
                    ba:6a:b9:9e:d6:57:ac:af:41:6e:eb:2e:b1:9d:5a:
                    f8:7d:2a:a8:7c:33:44:05:c5:10:de:84:89:1b:2f:
                    b6:40:21:e6:f3:1f:17:39:7c:3c:16:c7:9c:1b:f7:
                    90:94:0f:2e:46:c6:9f:98:de:24:8c:83:7e:76:25:
                    f6:b2:fc:7c:8e:c1:c9:a2:b1:6d:6e:49:01:2d:cc:
                    66:57:08:b6:78:75:92:42:18:d0:cf:19:ab:b4:6d:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7D:1F:13:65:41:CB:E5:70:3F:3D:44:EB:4D:4F:45:36:23:E5:EC
            X509v3 Authority Key Identifier:
                keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:45:a2:44:0d:77:2d:26:74:b2:0a:f6:c8:99:9b:d4:7f:cb:
         66:47:da:07:44:94:19:c0:29:0d:e9:f3:92:d1:ae:58:a4:e1:
         2d:44:dd:3c:99:0a:9f:3c:82:90:fb:4c:a1:29:0d:f2:45:f4:
         25:6d:98:33:11:8b:9b:80:63:eb:d7:fb:11:07:48:03:44:2c:
         26:c9:8d:93:53:a0:3d:61:3b:24:a7:de:76:8f:ee:51:65:5e:
         bf:92:6d:c7:d8:d8:35:9c:a0:b5:e9:60:3c:53:66:4c:3e:ee:
         32:c2:fc:a6:d7:9f:7a:48:62:7c:e5:3c:cf:35:8e:39:63:c5:
         90:05:5d:ac:2a:cd:c0:06:33:14:07:c3:b7:aa:46:2f:0e:66:
         44:9c:38:ef:5e:b2:e9:bb:27:98:4a:62:5a:c2:82:8f:0b:cc:
         ee:58:1b:de:5f:d4:99:c2:81:63:69:ef:89:f8:66:f9:dd:f5:
         79:7c:b7:d6:42:94:18:9f:04:f4:4a:de:64:ae:a0:e1:48:c9:
         dd:95:56:9a:21:d5:06:d2:ab:f1:e2:e5:2d:95:66:8a:7a:e9:
         10:a2:55:e5:c5:3e:e2:c5:7d:9d:dc:b4:cb:a2:13:e9:94:84:
         ed:fd:57:1a:84:2c:06:19:e4:e4:6a:ef:9c:81:f1:b1:7b:d4:
         c0:07:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----