Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File:                     TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier:          dXjtOoXjGJ0Fo1XrDBFgK1ea1DomijrbfG+cIc5JEbQ=
Subject key identifier:   1F:BA:26:7A:55:DB:59:AA:B5:B6:5C:BE:18:86:19:38:54:E2:E8:44
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer:       /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial:       01962E2AF5DDD86C2779D3545F467CA5BDD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
                          2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: qAm93GB0W33StxHepApxih6fGRkoh4eyt/xAGiuDlV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:dd:d8:6c:27:79:d3:54:5f:46:7c:a5:bd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=1fba267a55db59aab5b65cbe1886193854e2e844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:17:6e:72:8d:b7:0c:8e:1c:ca:cf:73:93:
                    95:01:7c:2a:54:74:97:14:ec:1f:01:77:52:82:62:
                    8b:1d:10:e4:08:ff:65:e3:b0:4d:01:df:be:a6:a3:
                    34:d1:a0:90:c7:21:88:61:94:f6:0c:ec:89:a2:b3:
                    a7:d5:2f:49:62:e5:ad:de:3b:d3:ba:5f:f6:00:d2:
                    dc:40:21:3a:ed:11:30:6e:ff:49:90:d0:6f:69:25:
                    54:38:5a:0d:db:73:1d:38:00:e2:8f:9b:c8:df:01:
                    20:26:50:c0:25:cd:2f:eb:43:3b:b8:e1:fb:c6:9b:
                    33:de:00:be:2d:e5:cc:68:bb:46:92:3b:b5:78:d1:
                    a5:ef:31:04:f2:6d:61:f9:18:0d:79:6b:1e:a3:d8:
                    de:d4:c5:dd:12:68:08:32:8d:7e:e4:36:ca:a2:d3:
                    5f:25:f4:54:77:8f:9d:2d:46:3a:a3:fa:fe:b9:25:
                    1e:2b:a0:aa:ee:c3:f6:4b:ba:c5:3c:ba:ec:63:eb:
                    b8:f2:ad:81:b2:82:26:15:53:44:1a:a7:34:7f:05:
                    17:5b:62:78:47:1e:7c:0f:aa:17:61:48:72:ec:54:
                    12:ba:ae:84:b9:ce:8c:03:33:ed:73:85:c2:5f:79:
                    e6:e0:26:ae:31:c5:5f:f6:99:d2:cc:07:2c:18:95:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:26:7A:55:DB:59:AA:B5:B6:5C:BE:18:86:19:38:54:E2:E8:44
            X509v3 Authority Key Identifier:
                keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3c:fc:11:28:e2:a2:90:2a:a4:be:9c:e3:89:84:45:4a:b0:
         e0:a7:20:bc:f3:64:10:61:96:2d:eb:47:c4:43:09:d9:f5:c3:
         a7:c4:4b:25:dd:c8:63:49:58:b9:fb:6e:cd:b9:62:2f:c7:07:
         fb:9c:2b:2e:7a:00:42:98:59:02:e6:d4:7d:09:a2:fe:6e:63:
         00:99:74:fe:7f:e5:b7:70:49:9f:48:b1:67:d1:ec:3d:c9:71:
         1b:78:91:b8:a0:8c:4e:64:91:3e:49:4c:15:1f:72:e6:15:f1:
         4e:d7:49:5b:64:39:25:86:66:52:52:87:7f:40:d3:ca:3a:1e:
         8b:98:bf:74:37:af:ba:46:61:82:84:51:13:e9:6a:cc:41:3e:
         0d:b0:11:5d:64:3a:1e:86:5b:e2:63:cf:91:0f:06:82:af:d3:
         cd:d6:6f:e1:7c:ba:12:75:0f:8a:08:c9:6d:7c:1f:0b:e0:8d:
         d7:dd:c1:18:ce:f8:20:c2:f6:76:57:4a:db:67:fd:4b:b0:07:
         5a:18:f3:ce:70:13:51:8b:9f:34:53:72:f1:6d:fc:83:9e:b6:
         bb:a6:55:e3:ac:b8:26:2f:ee:cb:38:31:78:30:94:02:60:c3:
         0b:c6:ff:6c:11:75:6a:1c:2a:14:92:2b:67:d5:a9:cf:61:e2:
         03:49:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----