Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File:                     TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier:          VfroTAku4RpcQGvwJ0IXfPf2sLvxXFNEOp9ohF3kwmE=
Subject key identifier:   6C:8A:13:BA:73:DB:6C:5F:B5:A7:1E:EF:A2:A9:6A:3D:51:D9:B1:AD
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer:       /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial:       01962F06BE955F9D1E48A8D130288C1C4601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: GMBttpj0bhjAegclBReJxSDSpgfDXzYzYdQs+73FUFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:be:95:5f:9d:1e:48:a8:d1:30:28:8c:1c:46:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=6c8a13ba73db6c5fb5a71eefa2a96a3d51d9b1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:bc:a7:32:7d:65:e3:e6:3c:72:98:85:02:
                    dd:f7:e7:a5:59:2b:34:82:02:da:f1:9e:d4:18:0b:
                    48:13:ef:35:7a:81:21:9c:1f:20:7e:95:ee:c6:98:
                    d2:0e:09:32:60:5c:a3:2d:9b:c1:4b:27:59:81:ea:
                    bc:52:ec:f3:2e:5a:42:dd:48:e1:7c:55:f6:79:8f:
                    e9:b0:05:e7:cf:ac:65:04:92:96:d7:35:53:d7:6d:
                    27:e6:3c:6c:16:50:6e:5f:67:a3:2f:0d:eb:69:e3:
                    10:3f:81:e6:2a:b5:27:91:25:d0:07:96:f0:8b:5a:
                    ce:0a:6f:6d:fa:84:09:7b:c4:66:13:4a:51:0a:b5:
                    1a:a8:33:13:6e:ae:31:6c:51:b0:3e:46:54:01:7e:
                    23:41:91:50:66:27:84:a0:5c:73:7f:d2:98:41:ee:
                    50:6c:a8:36:38:c7:34:e2:75:e5:52:40:6c:09:22:
                    56:68:50:26:5b:4e:85:92:ad:9e:0f:20:ab:8a:c7:
                    ab:c7:11:14:20:a9:54:f2:4b:87:ac:5c:07:49:dc:
                    72:47:80:59:6b:ef:72:e9:4c:60:ac:a4:56:79:bf:
                    e6:d6:b3:12:91:dd:a2:50:cc:74:ea:12:f9:0a:e9:
                    12:a2:ba:45:d1:13:9b:44:8f:93:82:2e:95:7b:53:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8A:13:BA:73:DB:6C:5F:B5:A7:1E:EF:A2:A9:6A:3D:51:D9:B1:AD
            X509v3 Authority Key Identifier:
                keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:44:be:24:7e:df:e4:06:87:9a:2f:f7:83:f4:e0:31:b2:2f:
         9f:b0:c4:6c:35:50:f7:15:c9:38:f3:5e:2a:18:42:c9:a4:88:
         f6:af:95:82:48:9d:9c:4e:8b:fd:5b:f5:a2:4d:69:5d:60:7d:
         a5:a0:16:1d:8d:a3:23:e8:87:33:39:2f:c6:cc:69:4c:45:f6:
         4b:aa:ff:c4:21:66:da:b3:0a:5b:a9:44:d6:f8:66:67:44:ef:
         b1:4f:af:75:68:d8:ab:a3:e9:31:db:3e:bb:3f:60:32:7b:b2:
         1e:e6:fa:3e:0c:6d:d2:58:51:57:02:42:ee:08:e9:fe:bd:3b:
         a5:7b:79:34:54:76:44:5c:93:7d:c0:e6:6d:85:05:b5:6d:9b:
         f9:70:36:e0:96:00:ac:9b:29:c1:fd:ed:43:6e:b8:13:d4:05:
         81:24:48:69:24:bf:6b:ae:54:ef:fb:a9:41:e1:eb:09:3b:fc:
         60:9d:f7:b1:ad:f8:20:c7:fc:d1:52:44:27:c6:f7:75:d5:8f:
         16:47:76:03:f2:b0:b6:33:69:7f:4b:a7:45:d2:d3:ce:04:44:
         f9:94:cb:94:94:55:39:92:4a:0c:f7:3b:40:a5:f1:ec:99:5d:
         cc:46:10:79:d7:da:00:c5:ae:95:3f:fc:f7:11:84:99:de:8c:
         c7:1c:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----