Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File:                     TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier:          6DUW+8fpnelrhxUT0hiyTCq0xnJix7t9a4ofIH1AlL8=
Subject key identifier:   14:15:27:20:C4:69:EF:54:2B:C9:68:1C:7F:84:AE:2D:FC:5B:C1:3E
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer:       /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial:       01962ECFABC464EB970B948A2DD9EC4F8792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number:          0E4C
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=)
                          2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: qteLTmQl6GQB4Jex6QSWnJMsoGQMDeOvQlOWRLDB5JU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ab:c4:64:eb:97:0b:94:8a:2d:d9:ec:4f:87:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=14152720c469ef542bc9681c7f84ae2dfc5bc13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:68:d3:4d:fe:3b:c5:25:93:c9:59:84:df:
                    70:a0:6c:b0:a9:c7:77:30:50:92:5e:6b:1d:33:2b:
                    90:e0:d6:60:13:fd:82:5a:b8:ec:29:4d:32:7e:b0:
                    94:12:ce:1c:e5:21:dd:60:55:02:eb:f5:20:88:62:
                    f6:e8:7e:84:ab:26:5b:4e:87:8c:07:a5:b2:5a:44:
                    5b:e8:79:8c:63:0e:f3:3b:c0:f4:1f:38:ac:00:40:
                    8b:24:0e:b0:4a:2c:9f:f9:5f:d7:19:95:96:3c:8f:
                    4d:2c:00:11:fa:a8:ac:31:f0:fc:7f:63:b9:7c:5d:
                    9e:b7:b4:09:9d:50:8e:d2:40:a0:e0:21:5d:7a:83:
                    09:7d:49:8a:1c:52:cd:f4:b2:4f:c6:ee:42:51:a2:
                    cc:bb:55:48:d6:28:16:8f:14:f1:08:f0:e1:aa:7e:
                    3a:68:2b:60:d9:3e:70:5e:50:5e:6e:18:37:4c:a4:
                    0c:86:c7:f6:64:8d:a6:b4:be:22:df:fe:b0:77:ec:
                    52:2b:74:ac:6d:c9:db:cd:56:49:bf:ab:60:c2:7a:
                    46:cf:f8:e7:d4:7d:e6:5b:c6:f8:1f:19:6a:9f:bf:
                    a3:81:b3:da:2e:78:a8:29:64:bb:33:78:20:3b:d4:
                    96:a4:7a:14:1b:dd:8a:14:1b:40:36:2a:38:a6:55:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:15:27:20:C4:69:EF:54:2B:C9:68:1C:7F:84:AE:2D:FC:5B:C1:3E
            X509v3 Authority Key Identifier:
                keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c7:45:93:61:57:89:8e:89:c5:b3:41:81:ef:e1:12:a2:4e:
         cc:65:c3:fd:ba:05:0d:8e:e6:99:86:12:d8:76:4f:f8:fc:9c:
         f0:76:fc:7b:e1:40:35:75:ca:9f:0e:a9:31:ec:2a:6a:d4:b0:
         93:35:99:74:9a:df:d7:6d:8e:bc:e7:72:1e:9c:b7:65:b9:12:
         0b:72:ce:0b:d7:ae:80:d5:3d:c3:0c:77:43:76:78:43:50:a8:
         93:d5:bb:3d:aa:c0:f2:52:4b:43:8a:45:14:bb:a4:a9:20:52:
         64:a9:7e:11:32:d3:3f:0a:bb:6d:10:97:55:46:bd:de:e1:22:
         be:b4:94:da:0c:f7:e8:cd:da:4e:c4:2a:0a:40:66:e7:e6:dc:
         79:a3:b1:20:1e:d2:8b:28:07:9b:53:b0:07:42:76:a3:09:86:
         dd:8e:56:db:52:17:d4:12:4e:ae:3c:eb:ef:91:ed:b1:3c:f1:
         bc:f8:a9:b3:9a:80:98:ce:a0:ef:e4:67:9e:3a:0e:db:94:1e:
         ad:5a:7d:17:c7:3e:de:c9:57:48:2a:cb:90:d3:55:12:e9:bb:
         4f:38:b0:cb:6d:5d:b2:ec:53:4a:f8:c7:e2:80:34:92:b8:cb:
         f0:f6:75:9c:bb:1b:83:64:6b:1d:73:d8:6c:98:78:d4:95:51:
         f9:e8:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----