Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File:                     Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier:          Nush6Wzp/SLy9aDMVJVO0wXZ2EgNC22HxgnOpexzXrU=
Subject key identifier:   D5:B7:83:CD:A2:45:45:4C:C3:D9:7B:FA:4A:FB:BF:AB:AE:F0:64:3C
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer:       /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial:       01962F3D62D58BCB6BAAF65B3718E847995E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
                          2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
                          3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: irzlDGiD7Gd3pmghBbnu/DK1zGbm2w2iQaWf2naVDDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:62:d5:8b:cb:6b:aa:f6:5b:37:18:e8:47:99:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=d5b783cda245454cc3d97bfa4afbbfabaef0643c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:6e:6c:3b:8f:57:89:14:74:ee:28:5c:1a:
                    8c:e5:b9:62:5e:ee:4f:a0:72:58:48:4b:59:91:8b:
                    4a:2a:26:0a:23:57:8c:01:65:e9:8a:9b:5b:b2:b5:
                    2d:b6:5d:55:af:e6:59:3e:a6:e5:a5:f2:02:7b:03:
                    8c:58:ee:30:e8:1a:a0:59:bb:4a:89:76:66:76:40:
                    e1:c7:aa:29:79:9b:5c:1c:db:73:b3:ac:d4:7a:10:
                    5f:39:cf:6f:98:e1:34:29:3f:24:91:0e:26:04:76:
                    a2:06:fe:2b:a0:59:25:83:40:a9:f0:cb:ae:c9:c7:
                    ed:45:29:e3:39:9b:63:f0:27:77:3c:0f:c9:b3:f9:
                    9c:4a:ea:9c:1e:79:9e:fd:b0:15:8c:88:91:4a:3e:
                    be:50:fd:fe:f8:ac:ec:6d:b9:4c:6f:f6:1c:a0:0f:
                    11:3b:6e:14:27:5e:11:9d:e3:71:44:d6:c7:ea:62:
                    de:fc:5d:24:8f:27:a5:bd:b8:9a:52:de:72:21:b4:
                    18:b1:b4:5c:84:a4:96:3e:c6:c5:da:60:3e:82:3e:
                    7d:66:2b:5f:ef:72:06:f3:d6:5f:d9:4a:be:58:d7:
                    9c:cb:c0:dc:04:9d:c2:c1:82:54:ec:c2:a5:04:ab:
                    9e:82:71:11:39:5b:2d:2b:df:2d:c0:83:e6:aa:30:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B7:83:CD:A2:45:45:4C:C3:D9:7B:FA:4A:FB:BF:AB:AE:F0:64:3C
            X509v3 Authority Key Identifier:
                keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:c7:b8:e5:ef:a7:a6:b7:f9:b8:96:74:81:b5:77:11:11:
         09:2f:ef:10:56:65:94:29:64:11:e2:ce:2d:70:48:6f:7f:76:
         6c:2f:2c:2d:2b:4e:b1:95:bd:2b:8a:87:d6:64:b1:84:51:56:
         a7:78:d1:58:3a:c0:c4:4d:22:04:da:f2:7b:ce:82:8f:d2:44:
         a8:1a:97:ba:1f:bc:89:e0:76:23:3c:92:00:d8:55:31:32:0d:
         eb:05:22:05:27:58:b4:72:ab:20:21:84:cf:dd:d2:7d:86:03:
         0d:00:e9:b7:d5:6d:70:05:78:f4:4b:1b:f0:3d:bc:94:8c:56:
         72:c2:fc:20:f8:63:86:f1:8f:1e:09:4d:16:89:5c:ba:4f:df:
         d7:15:89:2e:34:db:5f:89:24:2e:9b:12:87:20:b9:2e:27:8e:
         16:fa:dc:d4:62:8d:b4:0d:fe:62:06:da:89:b9:1a:ed:d8:96:
         77:5f:21:fc:a6:9d:a3:bc:37:f3:1b:84:bc:fb:fd:f6:84:2f:
         4d:ae:90:f3:36:39:71:e5:2f:30:8c:24:d1:21:78:76:3c:f3:
         b7:79:1d:36:c1:8f:a9:45:65:a2:43:d9:73:f1:bc:63:0d:46:
         ce:73:12:d3:dc:09:97:6a:7b:96:28:7d:9d:0f:51:bd:62:d0:
         fa:c6:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----