Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File:                     TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier:          dkrUa3UQGaLNW6vlxMZk8g4PvhpBzNclp64xKNjuCp8=
Subject key identifier:   97:99:19:FD:80:0F:6A:B9:DC:1D:6E:18:49:20:68:DC:B6:DF:B6:D5
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer:       /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial:       01962E98D025A8B1CA8B9CE8E2D4B76D2878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number:          0BAD
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=)
                          2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=)
                          3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: AMgDbOF/KksxIUO+USUCcw9qfmssq9wSc2L15jyoeKU=)
                          4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d0:25:a8:b1:ca:8b:9c:e8:e2:d4:b7:6d:28:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=979919fd800f6ab9dc1d6e18492068dcb6dfb6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:b8:63:7e:3d:12:8b:d5:80:2b:e7:a8:a1:
                    3b:4d:1e:b1:99:95:db:a2:9c:de:9c:d6:11:64:d7:
                    6e:59:d1:09:ca:5d:ca:38:ed:87:2b:4a:19:45:51:
                    74:48:ac:4c:2d:21:1d:78:bd:b9:54:75:bb:84:43:
                    3a:a3:6c:c9:dc:72:11:2b:88:75:b1:6a:14:be:c6:
                    b6:e4:cd:0d:dd:46:68:64:83:78:c2:50:7a:df:0d:
                    61:05:3c:08:75:7f:75:23:73:b2:cc:4d:35:c8:8e:
                    09:bc:28:11:3c:16:ae:1d:30:71:11:3a:e2:d2:1b:
                    34:3e:2f:c3:56:6a:d8:2a:40:b7:e7:f2:98:f1:b1:
                    36:21:11:65:74:50:52:d7:bf:04:fa:17:79:14:79:
                    18:69:84:d9:19:3f:a0:5b:b2:07:e0:f3:c0:23:3f:
                    f3:c0:0e:fc:2d:11:6c:c4:86:11:40:b6:a4:21:f9:
                    79:2e:4d:b6:58:15:7c:56:39:72:5d:ab:47:96:7d:
                    42:9d:f2:4d:71:17:dc:fb:fe:de:17:72:ca:b7:4e:
                    96:6e:be:d1:9f:ac:32:79:a8:c3:a1:68:8a:6f:46:
                    2b:32:ce:81:b7:96:58:e6:cb:a4:06:f4:41:1a:c7:
                    cc:9d:e0:e8:b0:47:66:68:20:09:49:ab:27:1f:c0:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:99:19:FD:80:0F:6A:B9:DC:1D:6E:18:49:20:68:DC:B6:DF:B6:D5
            X509v3 Authority Key Identifier:
                keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:46:be:c4:27:20:f6:0d:d7:67:99:71:0d:39:a5:18:d0:fc:
         97:93:53:9b:ef:2b:c8:f9:c7:e9:da:cd:5d:66:52:0d:b8:a8:
         3f:1c:5c:05:17:6f:71:2a:82:cb:52:ea:7c:c3:9f:a3:93:b7:
         24:1a:91:1c:ba:2d:5f:0c:c7:39:a2:ff:f9:43:4d:f0:d2:36:
         01:1b:44:17:3c:13:9b:ea:87:12:b1:4e:a3:e1:89:a9:e9:9e:
         5d:a0:d3:da:89:4a:88:b4:c3:e0:2b:ea:01:ad:c6:4b:4e:4a:
         a8:f6:34:a4:2a:e8:5b:af:1d:4f:4e:e2:65:8e:7b:de:dd:e3:
         28:d1:53:92:f2:35:32:ee:94:18:c2:60:f3:bd:17:6b:ac:ec:
         8a:e6:90:87:3e:d4:a1:72:6b:3d:da:5d:18:49:56:0c:dd:06:
         8f:57:fe:33:d3:00:77:6f:27:56:83:0b:95:81:1f:bd:fd:bf:
         62:a7:5c:1f:c8:9f:4d:e3:df:c9:76:88:c8:d8:6a:20:90:09:
         cc:9d:4c:cb:3a:de:df:46:55:af:58:63:73:0d:85:ea:dd:b5:
         be:f5:d2:95:4e:05:9e:3a:c9:01:b5:8a:42:47:91:a3:85:58:
         00:be:11:50:74:2b:3e:0c:1d:da:e2:90:bb:96:b3:92:8c:2c:
         16:e0:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----