Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File:                     tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier:          UGMfjHOSMycqP6sGCE02uT7F9I0WkQPwqKQukoGhWS0=
Subject key identifier:   04:FB:93:7C:6A:7C:92:95:B5:72:43:F3:1B:ED:26:54:AB:B8:6A:48
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer:       /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial:       01962FAB6E6BA9A6DB0BBBE13641B14DC11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number:          03D5
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
                          2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: Uf+TycBSirfeIJMucmsT5X5DK4f2PsTwvKBLP/Fjo2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6e:6b:a9:a6:db:0b:bb:e1:36:41:b1:4d:c1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=04fb937c6a7c9295b57243f31bed2654abb86a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:be:62:23:28:e6:af:61:a5:5e:90:07:6e:
                    c9:a1:5f:3a:26:79:86:2f:8f:6a:d6:39:44:d4:98:
                    14:08:8d:cc:38:fd:b1:a0:d4:eb:ba:08:c4:6e:54:
                    71:15:8a:a9:16:e4:3b:56:c0:35:b5:f7:26:b2:79:
                    20:45:b6:9b:15:d7:01:15:9f:fd:ec:c1:dd:76:be:
                    12:1e:83:3a:5c:39:87:f5:be:14:c4:18:cd:f0:c2:
                    a4:9f:ca:7a:26:20:b9:4f:ec:d5:c7:2e:24:7e:9a:
                    ec:57:fc:dc:97:ef:69:a9:74:6e:1d:99:6a:87:91:
                    51:42:6d:32:16:fa:69:95:c1:29:d0:cd:e9:db:d2:
                    4c:74:74:c1:cb:d9:41:31:bc:b2:87:fb:cd:7d:8b:
                    d6:9a:66:f0:fe:a3:c5:d9:db:61:6e:66:4d:59:e3:
                    76:73:96:7f:46:d1:d3:d5:86:86:11:75:7b:ef:f2:
                    69:a1:bd:ec:75:81:7d:55:21:93:4c:38:0c:b2:4b:
                    95:93:c0:2a:4c:e0:e7:8a:a2:f9:4a:16:43:eb:b1:
                    b3:81:db:13:e5:09:ad:73:ea:e5:39:53:bc:8b:d9:
                    3b:ad:7a:12:f5:c9:92:05:d6:55:fa:0a:3b:35:41:
                    35:4b:71:c5:e2:de:49:54:71:1f:83:d5:2c:93:58:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FB:93:7C:6A:7C:92:95:B5:72:43:F3:1B:ED:26:54:AB:B8:6A:48
            X509v3 Authority Key Identifier:
                keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:39:b7:ae:fe:17:d1:a2:e0:92:36:e6:bd:b9:47:1b:7d:
         79:80:3b:78:9d:c7:a5:2d:4c:06:d1:be:02:92:b7:b4:e4:f1:
         e2:f8:b6:28:3a:9d:3e:95:c2:37:fc:a0:0a:22:54:f4:e3:3f:
         6c:b2:c1:d4:51:f3:59:2f:d9:a2:5c:28:0a:bc:0f:ed:e8:78:
         a6:43:b1:06:33:ec:1a:04:ac:97:27:3f:90:d4:91:53:0e:d1:
         c0:1e:65:5e:66:67:98:a8:2b:59:f2:e6:82:7d:43:45:8c:45:
         48:bd:fe:19:4f:91:e4:42:22:a0:e3:c3:6f:ae:62:d8:57:58:
         85:6f:45:ae:44:af:8d:96:e3:fe:89:be:0d:af:ec:1b:0f:89:
         89:0b:da:b5:3c:ae:80:74:6f:d3:73:6f:d2:00:86:f8:e3:0b:
         69:03:0b:a0:e1:0c:56:c1:35:52:10:99:94:ca:e1:b0:21:d5:
         c3:bc:78:3e:62:e3:a9:dc:4a:b3:83:be:94:cb:d5:0a:85:2e:
         0e:a2:e1:3a:78:0a:a7:35:f5:a4:97:42:26:00:bb:e5:6e:97:
         c0:17:29:e8:73:da:ca:c9:3f:69:3d:96:f0:42:2c:c2:44:f0:
         10:34:83:e3:03:51:66:6e:78:1f:30:0a:17:4f:bf:90:2b:51:
         2f:eb:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----