Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File:                     TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier:          ZtlrwyVzEKzcdrNoXjP0s8RLuPhLNo+CrqC5ZwudrTM=
Subject key identifier:   C6:7D:FD:6A:6F:C7:64:29:88:D9:B3:D5:79:99:2B:CE:38:91:F6:75
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer:       /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial:       01962F0690438A3B1DE707B190CA30755ECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
                          2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: UWrHLlSBPVwWWE10jhnYr4HqkSHnnay7mGkO/b6VcQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:90:43:8a:3b:1d:e7:07:b1:90:ca:30:75:5e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=c67dfd6a6fc7642988d9b3d579992bce3891f675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cd:0b:3e:27:02:de:36:13:4e:37:e7:c4:e5:
                    46:a4:22:03:1b:13:2f:f1:6a:51:94:b4:d6:47:4e:
                    2f:63:a6:ab:08:7f:73:d3:5d:a8:3a:8d:46:dc:63:
                    cf:2b:3e:c4:6f:9b:8b:21:e0:72:ee:5e:49:67:d9:
                    c4:c4:09:b4:fb:c9:09:15:18:dc:36:f3:7d:12:bd:
                    60:2a:ea:a8:b3:6f:68:4c:1e:a8:60:d5:01:0e:4b:
                    ea:4d:3c:c9:0e:3d:39:4e:b1:16:78:58:fb:8c:99:
                    1f:7a:42:99:c7:a1:39:c0:97:d5:6a:a3:b2:13:9e:
                    08:d0:25:9b:d8:cd:ee:6b:1a:5e:63:a8:f1:b0:fb:
                    b7:0e:f0:1a:fc:d8:d7:a7:0e:df:ee:70:e0:67:2c:
                    96:5a:e0:b4:73:8f:0d:97:f4:4e:aa:be:8a:b8:45:
                    27:31:dd:d5:6f:50:73:ba:53:c1:ba:0f:17:eb:50:
                    c0:0c:45:c8:1e:fb:49:c4:9b:ba:c7:c5:a3:e0:42:
                    99:e0:dc:31:97:3e:a6:40:b2:a4:78:e3:00:c8:f4:
                    72:10:63:32:f4:48:c2:41:79:82:07:42:fc:bc:ed:
                    3d:c4:39:ad:9e:98:12:21:6f:f3:97:91:c1:15:45:
                    74:83:30:1a:e0:84:7b:a0:88:37:63:9c:cf:48:a3:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7D:FD:6A:6F:C7:64:29:88:D9:B3:D5:79:99:2B:CE:38:91:F6:75
            X509v3 Authority Key Identifier:
                keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:7c:db:3f:9d:76:6f:ea:e8:c2:a1:f2:ee:13:e7:d3:b7:
         b6:c4:4f:36:2a:05:c0:b1:96:c0:08:54:0a:5f:ad:c2:a4:12:
         bb:60:b8:32:00:d0:c4:70:15:f2:f5:8c:ab:a9:a8:71:7d:34:
         39:f6:35:bb:20:a5:bd:5d:b3:be:dc:b3:52:57:31:0c:13:62:
         df:f3:2e:b4:93:5a:25:4e:90:ee:aa:ce:d8:84:79:c5:e6:11:
         eb:27:fb:ee:9c:17:cc:b8:1f:56:f5:62:d6:b6:96:a4:ab:9e:
         6b:fa:47:e9:70:51:09:df:5f:3b:8e:19:aa:c1:5b:69:5d:24:
         43:55:bc:7b:bb:c3:e7:8f:d1:b0:7f:19:e0:75:64:15:c9:0b:
         4b:ae:3f:df:d3:9c:59:74:3f:77:e4:70:24:a5:70:87:ae:d9:
         04:ed:a3:3b:35:cb:95:2e:0a:95:95:e5:f7:81:19:90:7c:52:
         4b:06:74:91:44:04:c1:b3:e7:be:8e:13:e9:42:03:92:91:09:
         5c:05:bc:25:10:ab:76:cb:8f:79:c6:a9:8e:f4:36:2f:9e:98:
         cc:c6:6c:bb:8a:b8:d6:cf:1d:9e:80:b4:bd:ff:d2:1f:84:2d:
         fb:f2:ec:cc:1d:5c:fd:db:f8:c3:b0:a7:79:c8:99:c7:78:82:
         22:65:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----