Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File:                     1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier:          OHVCP9uREeJloWFKlgVg5/2O6zQ64ye8gvEKUkt41Y8=
Subject key identifier:   EB:B8:F8:4A:42:94:A3:98:99:F0:D1:40:39:FD:08:E9:12:FB:F9:48
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer:       /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial:       01962E2B21B64D96CCE23FBF4B3411A69EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number:          1135
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: +alAcoUEg9KzKoKXzsygBfuoymzo/D+JC263jM6F+nU=)
                          2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:21:b6:4d:96:cc:e2:3f:bf:4b:34:11:a6:9e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=ebb8f84a4294a39899f0d14039fd08e912fbf948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:40:a3:59:f9:95:b7:de:e5:ab:c0:ea:40:
                    19:7b:b4:6b:67:89:97:80:8a:2f:74:c3:74:5b:a7:
                    08:e0:94:c2:ba:6b:68:67:ec:20:23:7d:b7:43:97:
                    93:76:d9:cf:26:3d:05:9b:a7:b5:e0:20:5f:39:a5:
                    f4:73:3f:16:4f:a3:99:ec:b6:85:65:2e:b6:85:84:
                    2d:64:e9:f3:12:38:39:dc:46:eb:10:83:5d:d9:b7:
                    24:1e:dd:be:16:d4:10:a5:e8:78:47:db:9d:c9:2a:
                    10:72:bd:c9:0c:50:c8:cb:e0:da:82:77:96:ef:d8:
                    c6:a3:f9:0a:7c:71:9b:ef:4f:62:1e:99:c3:a5:a2:
                    a6:5b:d5:2c:80:b0:25:5e:0e:32:e7:2d:b6:b8:94:
                    d2:4c:52:b7:35:a8:db:83:92:30:b8:dc:92:03:6c:
                    20:d3:16:69:86:1f:da:36:fc:66:31:1e:e4:8a:05:
                    3d:e9:77:41:97:20:85:eb:4e:32:60:c4:23:49:55:
                    7a:ea:dc:49:5d:27:b9:0a:b5:a1:ad:4c:dc:16:f8:
                    b1:ce:4d:68:54:05:14:f0:52:3d:dc:88:3e:23:46:
                    19:93:86:c9:bc:0c:8c:1f:41:17:97:cd:03:0f:91:
                    32:bb:9a:ed:4b:dc:31:98:c7:a8:02:e5:d8:5a:7b:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B8:F8:4A:42:94:A3:98:99:F0:D1:40:39:FD:08:E9:12:FB:F9:48
            X509v3 Authority Key Identifier:
                keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0d:fe:dc:24:ff:ee:da:0e:1c:b0:8a:c1:c7:12:11:97:ba:
         03:ac:58:b2:87:7e:2a:65:f2:6f:c4:13:98:3f:c7:2e:f2:6c:
         e0:db:ce:29:37:26:ea:c6:d0:0f:2e:2b:c7:02:cf:cf:29:45:
         48:c6:5d:60:b5:e7:f3:47:c7:f0:9f:32:21:27:e3:d5:92:51:
         49:25:03:c2:90:e3:41:1e:f0:5c:d9:dc:ea:d6:a6:2c:72:91:
         fc:e8:e6:42:10:4b:44:b4:b6:c3:a3:48:32:79:1d:ff:3d:aa:
         29:32:57:b8:a1:44:5f:94:1d:a3:0c:6a:57:f0:bc:8f:ed:ef:
         dc:91:1e:8c:d9:70:17:73:ea:9b:03:df:8a:77:4a:c7:6f:ba:
         fa:20:22:58:53:b6:26:90:10:ad:08:f7:03:8b:98:aa:1e:57:
         fe:aa:89:1e:fd:50:19:1e:42:65:db:61:da:56:d3:bd:39:e1:
         98:be:4d:c8:8e:9d:b7:b5:43:d0:e2:9d:9a:11:97:86:ee:53:
         10:12:a7:d2:55:2f:e9:b2:ae:87:2f:d3:4f:19:4c:e0:c6:60:
         88:50:04:1c:98:65:30:f3:e3:b1:aa:78:c0:f9:6f:dd:79:90:
         3d:91:9f:3b:97:ae:8d:85:e9:c7:09:90:5b:05:79:ca:e2:d4:
         6f:70:4b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----