Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          28Z0MLfUFKkwP5pa0mggW6JEY9O+qelyRLo7kYLswY0=
Subject key identifier:   A5:9B:88:E1:78:30:A8:FB:5A:EE:B2:47:FA:18:12:76:8F:96:6D:68
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       01962E99673EBE8A83567E653088F53B4BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: 2EE4sEt2ul6BfkL/cOeqxtOHaWBoYVvrkRy5rRCvdbs=)
                          2: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (hash: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:67:3e:be:8a:83:56:7e:65:30:88:f5:3b:4b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=a59b88e17830a8fb5aeeb247fa1812768f966d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:ed:29:fd:52:d2:69:b1:29:8c:fd:01:14:
                    26:3a:5d:59:49:f9:d8:66:af:0e:06:5c:1a:38:48:
                    43:5a:e2:ad:32:95:d4:c9:b3:ec:53:52:e8:34:ad:
                    4c:4c:a2:9d:6b:f7:4b:31:4f:10:0f:cc:30:2b:4f:
                    26:3f:d0:c2:e4:24:82:93:6c:65:3f:8b:84:c6:c8:
                    d7:75:1b:de:25:4e:0a:35:b1:77:45:73:47:d1:3b:
                    04:3a:63:8a:ff:95:20:5a:2a:6f:d9:d9:14:6c:8f:
                    40:b0:33:da:3c:e4:97:16:48:04:55:2a:07:f2:c3:
                    37:83:c3:52:16:6e:3f:39:cb:ae:3c:34:6d:15:fa:
                    cb:7d:69:5b:a6:6c:aa:64:b5:57:2d:61:b7:f6:64:
                    0d:cc:b6:4e:ba:2c:80:4a:97:b1:b6:15:db:b4:93:
                    d4:a2:59:8c:3a:18:cd:19:e3:27:bb:4c:c9:5a:f1:
                    05:a9:e5:7c:9f:4b:02:73:79:a6:ad:82:56:5b:f5:
                    44:a6:41:8d:8f:ae:a7:53:e9:ce:55:3d:8b:db:8c:
                    7a:c2:3e:49:0e:13:38:e0:d3:af:c9:e7:2b:f9:d6:
                    2c:b2:ff:27:b3:ea:8c:df:2a:83:92:ba:5e:64:12:
                    5b:b2:81:70:25:d8:a7:41:97:1d:3f:0b:93:0c:33:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9B:88:E1:78:30:A8:FB:5A:EE:B2:47:FA:18:12:76:8F:96:6D:68
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:84:75:be:91:92:df:01:ce:e5:75:6d:e7:6d:81:03:dc:54:
         f9:f7:32:1e:77:6e:00:f5:34:1b:d7:25:0f:71:1b:70:da:99:
         02:d3:ea:53:46:a4:24:6c:cc:11:3e:00:b3:b5:d3:b9:90:cf:
         64:94:b1:ca:35:ad:ed:6a:d5:1c:47:e4:b2:be:db:58:02:4e:
         5b:ca:53:78:6c:0a:7c:3a:28:d0:ff:cb:15:15:68:7b:53:55:
         ad:00:26:b4:0c:67:28:9c:1d:69:53:72:6c:3a:6b:e2:de:bb:
         a4:7b:f2:b2:b5:30:c9:76:05:5a:f9:59:b3:40:a2:85:70:a6:
         f6:4b:f4:1a:43:c6:05:ce:5c:49:f6:f7:4f:a8:46:0c:27:aa:
         92:4d:28:12:f9:fe:f2:dc:37:84:a4:c9:35:b4:8e:07:50:f8:
         b5:e2:6a:f3:31:c0:71:58:0a:8d:91:37:53:00:0b:85:5b:45:
         0f:3c:0e:6f:0e:f1:52:f2:8e:2b:ef:1f:97:69:e9:9d:22:93:
         f0:88:3e:a7:fc:e2:1e:de:f3:55:61:71:da:f3:a9:fe:00:c2:
         81:ba:5e:99:42:4f:d7:fd:17:ac:d0:f0:48:30:e3:31:3c:27:
         fa:58:08:cd:ed:18:b5:d3:00:6a:3a:4a:44:ba:9d:bf:f5:e8:
         92:0c:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----