Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          GG4ivH/SANq2h4NZha2OK7keN8er1jvO2na8WHAjsmw=
Subject key identifier:   2B:1C:E6:FC:BA:1B:6A:72:20:6A:58:47:0F:F2:6A:16:6E:68:69:E8
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       01962E61D62D7CF729939BE7B03ADCE6EB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          05AA
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: CmDicAfDfoz93maibb20vLFeJSE.roa (hash: T8rIp3ZOIEv2U6cB/WhgBqnN/oGzchfMmPBfz5rrS5E=)
                          2: D2t0G5l-no81p6rarPw2-EpQMYw.roa (hash: Ao7GMS7CFmzAFJghE2/XSbtoAU6qWDBHEwHUCZKTHwY=)
                          3: DGY9DRUJrYLpsverneGppUeA19c.roa (hash: BCikbUDAbYpSarrQzlAQJBis5jeq62TU6gwB+aPdaEk=)
                          4: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: poGpNw8OdU+T4KHBOYWeG3SttzdAen1RnvQnrURKxHw=)
                          5: wVkI_Szt3pr4XGdNEoWckhxFxCk.roa (hash: g7wpqUCSc32Jx8X0zDboKVFnJQIoCmmZncv7BRTwxHA=)
                          6: yZi5kswzr7A4DzlGCWa5weE8ZXs.roa (hash: Anf6GmhoZMZWxPMhTL0WiBitC7uHDJE3iNPWcCU2CB0=)
                          7: yaeBzALTksFutDMDSo14HWi1pcc.roa (hash: TCSIw7g3HWASSSDxcMQYHErKzGbepcCJReN+FTRV2MI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:2d:7c:f7:29:93:9b:e7:b0:3a:dc:e6:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=2b1ce6fcba1b6a72206a58470ff26a166e6869e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:9b:29:c3:e7:20:a5:31:39:ec:36:70:c0:
                    62:b4:5c:f7:fb:dd:59:07:f1:d0:e7:34:e1:f6:b5:
                    56:9a:bc:9e:9c:40:16:18:77:d6:29:43:6b:ec:d5:
                    1f:99:de:55:51:3b:95:86:f4:7a:35:03:2a:c2:ee:
                    20:bc:1b:d3:2e:bf:96:15:1d:0b:fd:18:35:23:4d:
                    32:d1:a8:6a:29:69:90:2e:b5:5d:60:1d:9d:c5:76:
                    91:c5:74:b9:dd:ae:d6:96:ee:89:9e:41:08:93:38:
                    57:c0:fd:59:dc:83:fd:2e:67:dd:02:42:f6:02:5b:
                    8a:7f:37:72:d8:bf:46:3d:28:db:d3:da:03:e5:d8:
                    99:19:c7:a8:dc:32:d0:de:c5:12:6b:d9:49:64:28:
                    9a:6c:a6:56:e3:6b:d0:65:06:b0:cb:e4:ae:95:40:
                    f3:68:e7:cd:b9:60:78:8a:a1:e6:5e:97:0a:4f:a6:
                    da:e7:d1:3c:de:92:8b:f0:48:4f:df:72:04:99:17:
                    21:26:c2:60:bc:c0:46:f0:a2:97:2a:2b:fa:65:6c:
                    f8:32:16:10:0a:a3:eb:67:73:95:a6:9e:df:7c:93:
                    3f:a7:c3:ce:62:0a:60:78:02:d0:f4:81:49:ba:43:
                    a9:bd:d7:66:5c:4c:ac:a6:9a:54:dc:58:bd:e7:15:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1C:E6:FC:BA:1B:6A:72:20:6A:58:47:0F:F2:6A:16:6E:68:69:E8
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:23:c1:b2:f8:27:17:be:52:2a:6c:46:d3:a7:30:1b:4b:
         ee:cc:b9:a3:d1:1a:a1:2f:50:82:26:5d:b3:25:82:a7:b8:27:
         87:65:f4:fe:ec:fe:40:73:dc:f4:de:b6:52:c6:81:e9:b3:f8:
         04:69:8a:d8:72:9f:0c:ee:44:f2:3e:41:16:bc:6f:9f:06:a0:
         2d:cf:b2:a5:53:af:92:9b:95:89:67:fd:31:50:14:70:49:a0:
         01:80:89:31:0d:ee:ad:96:0a:17:a4:00:ec:19:75:87:ca:9c:
         4d:b4:3a:22:e5:0b:dd:8c:4b:f1:26:4e:14:f0:48:ec:7d:70:
         04:2a:5b:1f:b7:70:7c:ea:58:02:64:bd:6a:ad:6a:c0:c6:65:
         86:0d:18:10:e2:76:75:5d:0b:28:14:c7:d5:a6:aa:fc:53:06:
         8e:95:ff:b6:18:b2:67:9c:3b:ec:85:23:e5:42:55:38:f4:05:
         fa:17:e3:a9:ce:a4:f6:3d:f3:4e:51:22:ad:4a:41:ff:db:71:
         7b:9e:a2:24:09:62:98:f6:42:bb:fd:f6:67:62:f5:64:8c:b6:
         06:8e:d0:09:5c:46:51:eb:66:9e:f6:80:2b:81:ab:33:2c:8b:
         4c:c5:2d:66:c1:93:0f:60:6f:75:a6:0e:f8:2c:09:ea:9d:46:
         b4:18:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----