Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File:                     TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier:          AmQRuc7HRmBa1BRXADtgK8Mn2M9ZNAg3Fjynu/55sEE=
Subject key identifier:   7D:DF:01:49:7D:7B:39:91:CB:F7:D7:A6:75:A2:67:C0:25:82:C1:08
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer:       /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial:       01962F06C742418B3385696EC98437A62563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number:          0C2F
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: qMZGJEU6gkkEOM3kI0i4J8aJ9f61HSsKu+A4k77Q+Cw=)
                          2: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c7:42:41:8b:33:85:69:6e:c9:84:37:a6:25:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=7ddf01497d7b3991cbf7d7a675a267c02582c108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:51:33:09:8d:51:a1:95:61:d8:18:41:7f:
                    3a:5f:f5:8a:47:60:f1:e0:53:22:af:27:b3:bd:84:
                    d2:bb:8f:eb:dd:60:63:a5:ee:c3:3f:43:7e:ef:06:
                    49:06:a6:ae:50:c4:17:be:e3:e4:eb:d9:82:fc:93:
                    bf:de:12:f1:9f:2a:4b:6b:64:93:d0:ba:e7:01:d1:
                    9e:4b:b7:8b:8b:5c:a5:57:4f:c6:d7:6b:df:69:32:
                    75:96:99:36:8a:a8:b0:03:bb:3e:5a:3c:cd:67:36:
                    41:dc:6f:2b:83:8c:a4:7a:60:d3:9a:fa:c6:34:f4:
                    b5:de:f7:3a:d3:f8:10:3b:3c:13:b8:50:3c:10:bc:
                    65:fb:24:07:62:6b:10:87:84:87:ac:f4:36:10:08:
                    50:09:c1:cb:70:d9:41:32:7c:7e:76:ab:fe:a7:bf:
                    20:5c:f8:1e:45:10:db:a0:56:7c:cf:cd:3b:bc:ba:
                    bd:d4:01:ea:c3:0f:e5:6f:6a:9e:37:c8:9b:ff:e3:
                    bd:a1:be:b4:10:02:22:7d:8e:da:d7:8f:9e:63:ef:
                    0a:9a:76:a5:15:af:97:17:da:15:7f:51:75:3c:51:
                    d3:8c:4b:23:1a:31:79:0c:6e:b8:a1:9b:37:6d:a0:
                    c3:2f:d6:b4:25:84:24:f8:b8:de:61:03:ec:0a:46:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DF:01:49:7D:7B:39:91:CB:F7:D7:A6:75:A2:67:C0:25:82:C1:08
            X509v3 Authority Key Identifier:
                keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:04:55:1d:a8:b6:d8:e6:07:ca:91:ec:ae:3d:48:9d:4a:b0:
         0a:ce:54:9b:34:fd:58:da:a3:bb:de:0c:3c:ff:ce:16:5a:6e:
         9c:99:3d:ca:4c:3a:40:b5:5a:a1:44:58:11:35:76:2b:be:2f:
         50:70:36:f0:00:ff:48:c1:73:e0:93:d8:53:3b:23:7b:47:ae:
         61:4b:e3:a8:09:0b:75:98:01:4a:88:83:57:39:19:a8:35:0f:
         e8:70:5a:48:d8:98:75:5a:ca:db:6f:19:ce:56:d2:8b:09:18:
         14:51:8a:b6:6c:98:b8:ff:f7:84:e6:96:d1:ea:c9:53:ea:77:
         04:73:d9:73:de:c3:48:e4:0f:5b:27:56:96:31:aa:50:5c:ed:
         82:a2:25:62:c8:63:2f:05:08:e8:98:95:3a:55:85:b0:35:dd:
         1b:13:a5:f3:e6:82:1c:03:82:33:09:65:f8:b8:6f:61:06:cf:
         71:f8:9d:2a:43:fd:1f:32:b3:32:a4:44:2c:65:a2:a8:9b:6a:
         79:f1:69:b5:16:38:3a:c7:49:b6:62:1d:4d:e0:b5:c3:5a:6c:
         54:b1:2f:1f:3f:0a:6b:af:af:38:85:59:72:81:19:dc:02:37:
         95:1b:2e:aa:b7:b0:fb:73:7d:b8:d2:13:86:bb:46:bb:5a:17:
         9a:7e:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----