Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File:                     TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier:          KfoBGGe9y3jQ6Z8GU1HLEbq6zbfklwOpbJyyEBmqOMM=
Subject key identifier:   6F:6E:3F:7F:EA:0C:8A:1E:3F:5A:8E:B6:D6:F1:95:D8:8E:19:CC:C8
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       01962E61C39C5BE61CA326747B5452B13F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number:          1041
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=)
                          2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: z3MGC0a/1dGxwWcKb6p/yepmXvF+wBXUNWU5tiHbWvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:9c:5b:e6:1c:a3:26:74:7b:54:52:b1:3f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=6f6e3f7fea0c8a1e3f5a8eb6d6f195d88e19ccc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:60:00:98:4d:b7:14:3b:31:61:d7:82:76:
                    97:76:9e:51:39:e5:03:ba:cc:c3:cc:10:10:80:96:
                    72:f0:1d:ce:ac:e2:0b:4c:c9:ab:8c:67:3f:8c:0c:
                    17:90:9a:21:86:f1:06:d7:ed:bd:f9:cf:1c:5a:44:
                    67:fd:c8:ab:57:cb:08:b1:33:6b:8d:e7:1b:24:6c:
                    36:57:c7:8b:5a:1b:b2:89:dc:33:b3:e0:4a:88:36:
                    db:ac:7a:b7:7d:3f:d0:ad:b3:62:68:d7:d0:bc:ca:
                    9a:06:6b:91:ad:19:bb:56:fd:95:b3:a1:24:d2:0e:
                    13:dd:da:d8:c8:4b:eb:d9:64:60:9f:a9:61:e6:04:
                    f3:34:06:67:84:18:52:58:ab:e8:ff:e1:7f:06:73:
                    88:5a:4f:18:bd:83:6e:12:29:8a:7c:95:e2:be:fb:
                    73:73:87:7a:4a:1e:eb:bd:0c:72:17:36:46:55:6e:
                    d3:04:d1:b5:59:70:27:83:9e:36:9d:0b:23:95:98:
                    5c:66:ba:ca:91:e1:9b:73:5c:ac:21:d5:e1:de:9e:
                    98:38:a0:15:1a:df:08:5c:fe:08:06:ee:a1:81:53:
                    e4:e7:41:7d:60:35:8c:f5:07:97:6f:bc:f3:d6:21:
                    e2:bf:a9:6a:bb:0b:a5:1e:62:25:7e:b8:07:83:96:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6E:3F:7F:EA:0C:8A:1E:3F:5A:8E:B6:D6:F1:95:D8:8E:19:CC:C8
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:23:03:7f:f3:f4:04:70:c9:f0:7c:0c:7e:ef:94:d2:44:eb:
         5c:84:6b:6b:32:d1:a3:74:e9:3a:6b:c0:cc:bf:29:53:62:7e:
         7c:ed:63:6d:a5:e7:85:d0:ba:e2:fc:4f:f9:85:18:a5:3a:6f:
         5d:1e:9f:fe:33:a5:86:ac:78:9c:00:52:63:8e:20:0d:96:e7:
         67:4a:94:d7:d2:72:48:97:89:8d:c3:cf:40:7b:1b:c6:47:81:
         29:22:08:92:87:b5:84:42:c5:16:8a:c7:27:4d:84:da:05:2f:
         50:c3:97:e7:62:06:a1:4a:71:2e:80:1b:e0:2d:b1:d3:c0:d1:
         ff:b0:69:79:99:1c:56:df:a6:ca:16:05:38:81:7e:5c:4b:99:
         16:ba:45:ba:a2:23:2c:4b:7b:ef:c1:84:5d:10:4c:0c:27:20:
         00:be:70:13:d6:c3:2e:47:f5:58:fd:e7:b5:46:db:9a:0d:f6:
         0a:7b:65:47:76:3d:71:ba:16:8a:cb:7c:95:0b:57:a5:28:7e:
         e8:1a:b6:ea:80:09:86:6c:a0:88:52:c7:bf:48:63:72:b5:d5:
         e9:50:bf:2e:2d:a9:c3:97:f1:47:ed:27:91:5c:ed:98:4f:58:
         85:13:74:47:77:d6:13:d3:94:f9:de:b1:51:c2:20:ca:dd:a8:
         65:db:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----