Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File:                     Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier:          MLTuTMH6hoFz3eVNNQcC3KWKJAHfyf/U2ijRULBEm08=
Subject key identifier:   97:F4:C2:D5:C1:CA:CB:9B:D2:D2:AC:42:73:95:E5:B8:70:4C:BC:7E
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer:       /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial:       01962E98F082486E523E1E4072C29964AF7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number:          13EA
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: Uvq1aqSL83NpkRI/qS8/y8BGK7PUW9qVqk+kO+PH8vY=)
                          2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f0:82:48:6e:52:3e:1e:40:72:c2:99:64:af:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=97f4c2d5c1cacb9bd2d2ac427395e5b8704cbc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:66:7f:3b:79:eb:8b:a8:91:30:77:3a:ab:
                    78:42:50:05:87:ce:68:fa:3c:19:20:ca:45:b4:db:
                    8c:a0:d4:5a:45:65:a2:85:a7:72:7a:e8:09:99:8b:
                    3f:22:6a:0f:19:ff:1d:73:a6:f7:97:6e:8e:af:0b:
                    ba:ae:c2:5a:40:63:a1:57:95:cd:ea:e0:b6:e0:0c:
                    ff:ee:b0:1f:83:45:51:a9:da:13:81:74:9e:86:c0:
                    20:06:fa:48:59:48:88:e5:e2:e0:1c:7a:c9:74:37:
                    65:28:00:b0:55:c2:4c:54:4e:5a:81:e8:d4:c9:81:
                    90:b7:4f:b2:1f:90:5e:b9:c0:99:a9:9e:49:2f:7c:
                    6a:00:44:7e:ac:e4:c0:c9:19:8f:0b:b3:0d:06:3b:
                    a9:32:c1:de:25:bf:84:1e:01:4e:27:8a:97:17:c1:
                    34:74:71:53:d4:bf:0e:ba:28:7c:5d:5b:e3:56:0d:
                    bf:c6:e0:1a:b3:67:dc:50:e2:5c:95:c7:fa:98:0d:
                    88:7f:5c:1e:17:bd:a1:6e:01:9d:9e:d0:6b:fe:7d:
                    b8:43:d4:e1:f8:0c:99:ce:3a:84:c8:05:1b:34:64:
                    24:14:89:89:6e:ee:4a:11:66:fc:44:28:82:b3:37:
                    8e:ce:1a:b3:55:44:37:7f:d1:6b:b0:1b:29:68:9f:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F4:C2:D5:C1:CA:CB:9B:D2:D2:AC:42:73:95:E5:B8:70:4C:BC:7E
            X509v3 Authority Key Identifier:
                keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:09:4d:b5:4b:52:c3:0f:6e:9d:fe:e6:b8:29:24:00:1c:4f:
         84:67:e2:52:a5:36:c2:40:5f:cd:51:77:be:60:42:71:a3:ea:
         6f:56:23:cf:e0:be:8e:24:ab:25:aa:a0:8b:f4:bc:a7:dd:e5:
         e1:b1:8b:39:79:a9:2d:c8:9f:2b:51:c8:4a:65:20:91:cf:a9:
         b3:2e:57:f3:41:9d:23:df:b7:5f:9d:2c:3b:c6:42:f1:a0:cd:
         d9:03:e2:2b:9f:ae:7a:24:3e:eb:05:f4:9b:e1:82:f8:17:38:
         41:44:0d:33:58:34:6b:af:0a:06:60:d6:4a:76:82:50:9b:d8:
         1b:be:a3:14:1d:78:3c:16:a2:76:1b:1b:08:b5:7d:97:2c:4a:
         70:ee:cc:4e:68:c5:4a:0b:23:01:ca:93:c8:10:34:c9:50:f8:
         97:17:9c:92:3d:41:8b:01:ac:bf:86:79:98:23:cb:b8:ad:78:
         5e:b4:ef:09:1c:f9:8a:b0:89:8f:96:be:46:40:85:34:28:fa:
         ad:48:22:7a:9d:ef:c2:f8:a1:69:bf:21:b1:7a:74:be:e8:7c:
         c6:d8:a5:31:1b:e1:80:b7:b3:07:9c:6e:2f:19:6d:98:49:d2:
         bf:35:61:40:c8:2e:aa:e2:cf:1f:37:9f:f4:8e:13:56:19:29:
         11:3d:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----