Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File:                     TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier:          Pam/zNcJ/LOfKUqe3AB0RdDBmgkSnaY34BfZOEa4BXE=
Subject key identifier:   87:86:7C:F4:6C:FB:CB:16:E1:4A:0A:36:ED:7F:6D:12:8E:22:E9:5C
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer:       /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial:       01962FAB69D3E5FB1FDDE9742CCACC6D8345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (hash: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=)
                          2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: Sd2FFlUFz/UwKZ23plXM0zX6qcLpoQbLUbgje9ku1qk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:d3:e5:fb:1f:dd:e9:74:2c:ca:cc:6d:83:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=87867cf46cfbcb16e14a0a36ed7f6d128e22e95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8f:f8:a8:e5:2e:1f:e6:60:e4:ab:a1:dd:85:
                    7a:33:1f:ff:04:1d:cd:b3:a7:28:b4:09:c0:52:91:
                    84:bb:c9:97:67:ba:9f:6e:61:a7:f0:dc:fd:15:d7:
                    ad:06:ea:2f:18:86:20:ca:64:61:26:d2:9f:1f:48:
                    ae:c0:ac:84:b3:8c:40:8f:db:af:bd:e6:3b:6f:87:
                    74:14:36:7b:90:a0:f6:1d:5f:db:c0:89:99:58:ae:
                    8b:07:cf:cb:20:e5:0b:0c:59:96:99:c0:3f:45:68:
                    0b:ad:17:15:89:a8:b8:a5:92:b3:72:59:65:a7:30:
                    5d:7c:6b:e0:0f:07:8a:cd:26:7f:72:3d:11:8b:77:
                    2c:ff:af:c8:06:79:cb:02:2f:e7:b7:e0:26:3d:2a:
                    b9:f6:b9:91:49:d6:d0:06:2a:8c:e8:e6:38:30:8b:
                    02:95:ac:1c:1c:99:1a:d3:1f:3f:b6:88:85:bb:af:
                    88:39:5c:d2:83:07:ef:e5:b4:20:64:bb:5d:d2:25:
                    a0:00:00:8f:07:3a:a8:02:7a:31:d5:15:a7:26:86:
                    40:87:31:d4:4d:d7:cf:33:f5:ea:b6:7f:23:2c:49:
                    e2:94:35:d3:00:1c:09:0c:20:a2:24:a5:99:ea:a6:
                    ad:27:63:a5:d2:d9:a0:97:04:8d:31:1d:d0:25:27:
                    97:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:86:7C:F4:6C:FB:CB:16:E1:4A:0A:36:ED:7F:6D:12:8E:22:E9:5C
            X509v3 Authority Key Identifier:
                keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b1:9b:2d:1e:9b:45:41:2f:f7:d4:4a:29:c8:56:1b:27:15:
         ce:d7:59:34:fc:3a:90:14:3f:90:26:70:c1:d6:07:23:0f:6c:
         15:2a:f6:5c:16:fe:8a:36:cd:b8:1a:e7:29:01:b4:c3:ad:c2:
         d8:6a:74:0b:8b:f6:47:c0:88:b2:d2:fa:bb:62:62:40:7f:92:
         94:72:41:ae:e7:24:3a:81:2c:8a:4d:6f:56:b9:cb:94:70:74:
         60:e1:4f:17:6b:74:b9:39:03:6f:95:0b:90:65:3a:0c:0d:ea:
         e5:fb:25:c0:d2:af:5c:ca:08:c8:4e:ef:b0:92:cb:30:44:29:
         86:0d:52:75:46:3d:ef:cc:d6:76:84:1c:7e:56:5b:e7:c6:46:
         70:e3:ae:b3:17:b3:a2:57:a4:ad:bc:b3:40:a5:39:7f:e5:4b:
         37:b5:ec:1d:8c:f3:2c:2b:b3:5f:20:ff:0a:0c:e6:50:44:a6:
         2c:df:f6:1a:e4:dc:6f:f5:de:18:87:9d:66:17:e3:57:93:11:
         5a:85:13:62:9b:34:8f:5d:84:38:90:1f:dc:47:05:0a:55:03:
         55:73:80:e6:a2:04:e9:5c:95:72:fa:70:3c:d3:62:4b:0f:a5:
         30:2b:48:54:66:4e:85:73:2f:69:08:09:d5:98:6d:41:d0:9e:
         84:f0:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----