Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File:                     TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier:          7g85uvHI2LTS/mk5dGtZiV0GgIpZrtsTymkMcMy3+dQ=
Subject key identifier:   D4:8A:56:16:A9:2A:CE:DD:31:25:93:12:4D:E1:8F:C2:C5:13:45:B1
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer:       /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial:       01962E6185788C9D638D168DDADECCED7CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number:          0E4B
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: 2ahdl+tdK7bqEWJgtdEw1E7I74fj0t0QM/utVq6hHXs=)
                          2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:85:78:8c:9d:63:8d:16:8d:da:de:cc:ed:7c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=d48a5616a92acedd312593124de18fc2c51345b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:05:cd:38:f1:6c:1a:77:0b:a7:66:8c:fa:
                    6d:48:82:fd:d3:7b:f8:dc:49:1c:bd:42:e9:6b:ae:
                    e8:06:5a:a1:0a:cb:af:c6:3e:c5:ba:61:b8:aa:7e:
                    f3:54:2b:e7:0c:db:e6:1e:24:e6:86:7b:1a:58:7c:
                    44:06:e8:45:c1:55:84:8e:e7:52:73:3f:3a:ad:6d:
                    5b:e2:02:35:36:41:5f:9f:03:e3:39:56:dd:52:99:
                    c7:2b:84:b8:c3:6b:73:c4:29:45:08:d0:b7:5e:fe:
                    21:20:6f:34:ff:1e:fa:35:c4:2a:ce:01:dd:05:5e:
                    d5:30:bf:c1:43:be:e9:10:3e:5e:3f:5c:0a:0c:ba:
                    2c:4e:03:5b:69:68:d0:22:ee:05:03:7b:3e:66:5d:
                    13:aa:ee:09:b7:37:61:d4:ef:cf:85:1d:90:19:af:
                    d3:d6:5d:5c:1e:be:81:d0:6c:25:e3:b1:d7:69:c9:
                    7a:be:9c:cd:03:59:d7:cf:88:91:b5:62:f6:d8:8b:
                    20:36:bf:d9:ab:db:cd:17:3f:e5:0e:0e:37:21:4e:
                    45:e8:f3:2b:a0:bb:b1:94:6f:7c:42:03:23:44:2f:
                    58:b8:bb:cb:fc:0c:70:d0:e9:fd:91:ed:57:fc:6e:
                    87:65:2d:bf:b6:7d:32:b7:8e:1d:21:d1:dd:94:17:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8A:56:16:A9:2A:CE:DD:31:25:93:12:4D:E1:8F:C2:C5:13:45:B1
            X509v3 Authority Key Identifier:
                keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b1:c2:9a:fd:56:df:33:52:71:a4:78:3b:d2:43:b7:04:a7:
         92:98:2c:2d:3f:4e:c0:d3:77:86:9f:fa:3d:b4:2a:39:52:a6:
         82:0e:3a:09:c0:b8:bc:4a:30:c6:3a:a0:1e:d7:a6:6a:c9:8b:
         d0:34:1a:1c:0e:2f:be:ec:e2:50:dd:50:5b:31:18:0f:4f:c4:
         11:88:bb:9d:8b:1e:3b:6c:a4:00:6c:7f:22:9b:30:87:ed:8a:
         0f:4f:d4:f5:41:62:a8:e0:19:aa:e1:57:53:4e:4c:f3:f8:64:
         a7:34:d1:94:12:82:4b:1a:b0:ea:8b:f4:b2:4b:fd:a7:f7:21:
         66:a6:c8:08:bb:5d:f0:35:3d:38:df:79:2d:23:12:77:9d:69:
         c8:0b:00:25:90:ad:dd:31:1e:aa:eb:5c:33:22:34:1b:e2:3b:
         66:32:e6:52:8c:01:44:1e:13:4f:11:2c:54:f4:a0:a9:2b:70:
         db:c7:d2:92:8f:37:20:2d:38:ec:4b:d7:a5:ac:87:29:36:d8:
         47:a8:91:ca:e8:12:27:91:70:3b:d4:82:a5:af:c5:97:d7:43:
         1b:3a:4b:ba:4a:24:cb:fa:77:f0:e0:49:69:8f:c7:4d:16:15:
         b9:2f:6a:92:bb:2f:d3:96:75:07:90:10:0d:77:a3:77:52:19:
         21:47:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----