Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          OjYpMO/w7SKXjJbpVwbtNwkBnS2o3QMstEt1o+ZORag=
Subject key identifier:   B4:26:A0:F8:78:DD:F2:4B:51:82:F9:07:7A:49:AD:4E:A0:F6:B7:0D
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       01962F068E2DDE95D85B922074D5C414221E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          05DF
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
                          2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: U0fvsBScy4r8aoMNYZGYRaRR/BIUgLYDgurg83pOVk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8e:2d:de:95:d8:5b:92:20:74:d5:c4:14:22:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=b426a0f878ddf24b5182f9077a49ad4ea0f6b70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:99:63:f4:cd:69:22:15:c5:01:73:9b:a1:
                    8f:07:3d:4d:0c:69:79:7d:fa:e2:11:36:8c:d7:13:
                    a9:f2:99:bc:ce:6c:5d:99:08:5f:14:79:69:da:4e:
                    46:45:87:bc:83:ed:96:f2:73:93:94:f1:58:d9:67:
                    a7:d2:1b:1b:c3:3d:ae:da:ba:94:e2:4c:e3:69:bd:
                    fb:e9:4e:5e:45:d4:39:aa:d6:0d:90:05:9a:5d:42:
                    74:3e:96:7b:1e:b5:d9:92:3d:dd:04:7f:2e:83:0b:
                    e0:2a:cb:a0:2e:e3:27:4f:87:2d:51:14:12:ce:8b:
                    90:af:bd:19:92:5f:fb:d9:be:dc:0b:19:1c:8f:d0:
                    79:f5:81:a4:f6:0a:9b:c3:40:a5:1a:85:01:78:d5:
                    bf:02:ad:e8:af:ed:06:dd:f4:90:de:55:cd:81:be:
                    ff:b0:5f:95:b2:f9:56:f7:62:34:4b:aa:8f:ee:d1:
                    db:d6:98:cd:9d:af:7e:68:2e:c3:28:b0:8a:4b:36:
                    e2:bf:91:bb:82:15:eb:c0:0a:62:1a:9e:0d:f3:fd:
                    73:6d:49:b1:2d:ec:5b:dd:d7:0c:ad:90:cc:0f:44:
                    fd:61:00:4c:fa:f3:57:22:25:30:1b:2b:99:19:2f:
                    cf:79:9f:f0:c8:6e:f5:f2:c8:aa:cc:0d:14:59:0e:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:A0:F8:78:DD:F2:4B:51:82:F9:07:7A:49:AD:4E:A0:F6:B7:0D
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:dd:73:02:0a:e2:53:2d:82:fc:49:8a:c5:78:bb:b5:95:6b:
         36:b6:e5:04:c6:2b:83:75:d7:10:2f:03:80:b6:48:b1:08:90:
         ad:b3:51:cb:5f:6b:d6:9b:35:d4:3b:eb:58:bc:f0:e0:4f:90:
         5f:8c:98:9a:ae:4b:ca:79:b1:59:f9:e6:e6:f9:ed:e0:f5:92:
         2b:3b:43:7f:42:4a:d1:e8:90:1a:2f:13:19:4a:36:ef:37:75:
         0d:db:ed:19:4f:5f:cf:30:d2:30:a1:f8:69:ff:16:f0:20:e3:
         66:04:53:3a:74:03:3b:15:23:91:f3:45:c3:8c:e2:44:f0:e7:
         78:09:34:b6:4b:07:90:8c:29:d2:17:07:39:0b:be:ab:61:09:
         ae:b0:62:40:0c:4d:e3:5b:16:76:41:de:fb:c3:82:3b:19:dc:
         b9:78:aa:4d:b4:bb:ca:c9:30:1d:31:fa:9d:94:a1:10:09:ed:
         7b:e1:40:a2:8c:3b:f3:18:54:ad:00:cb:bb:d3:75:c9:c4:1a:
         dc:bf:80:56:95:ed:9d:f6:b1:4a:c7:15:57:37:45:72:c8:29:
         75:01:cc:c5:5c:8e:ee:44:59:cf:01:d2:17:7e:5d:6b:da:b8:
         54:9d:b7:79:84:33:a7:e4:2e:63:8c:da:51:c6:51:b7:91:db:
         5d:dc:9a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----