Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
File:                     TK0YVBTBauXSKaiqK_oV_vxxoiI.mft (raw, json)
Hash identifier:          CNd2NUhnP9v/1muSHcuGNyLJSO901p2Zr3w4zCkgFig=
Subject key identifier:   FC:0E:4F:61:FF:71:66:34:F1:B5:EB:95:45:CC:99:13:F7:7A:64:9C
Authority key identifier: 4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22
Certificate issuer:       /CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
Certificate serial:       01962FAB9A19B2531861122BAAFF3C0B991A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: TK0YVBTBauXSKaiqK_oV_vxxoiI.crl (hash: rHjKUlqzvZQg6oCKOIePR2JfajXtC78TKJmL3kNSZBQ=)
                          2: dxfaqcbOBYRpYzoiD3a-nfzNgyI.roa (hash: 9S4UtPoorxm2Y5jeo5Ht7EgjOkb+pCS05uOlyENLKPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9a:19:b2:53:18:61:12:2b:aa:ff:3c:0b:99:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad185414c16ae5d229a8aa2bfa15fefc71a222
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=fc0e4f61ff716634f1b5eb9545cc9913f77a649c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:75:4f:cc:2e:56:02:fa:ac:0f:22:27:d3:
                    9e:f1:9d:ab:27:ac:fd:34:48:72:ce:c7:6a:0d:95:
                    92:80:aa:1c:c2:b6:27:b1:33:76:33:32:b6:8c:54:
                    c1:ce:39:ff:d6:7f:d9:10:a2:4e:9a:30:41:34:80:
                    2c:cc:87:8a:39:6f:d6:b1:23:db:ba:c2:09:a7:a4:
                    74:e6:ac:ad:cb:df:2d:6d:2b:80:a2:ea:d4:3c:e1:
                    5a:1b:46:2a:cb:b7:d6:05:de:62:c5:81:cc:38:f3:
                    f6:cb:6c:9a:cc:87:b2:c3:2e:d2:21:6d:56:8b:61:
                    99:eb:7b:34:7a:64:df:18:33:14:98:63:66:97:51:
                    f4:39:96:20:91:2f:af:60:ae:08:8d:20:9e:8e:84:
                    a8:f8:71:b0:a6:86:06:c1:6c:7b:31:af:bc:9f:10:
                    6e:09:62:18:9a:5f:25:75:64:33:79:04:36:98:01:
                    b2:db:61:bc:c9:27:3a:a4:1d:e5:13:4f:e3:7f:e5:
                    1d:cf:63:95:ea:a5:ef:1a:3c:40:14:cf:6e:fb:48:
                    16:74:73:8d:8a:0c:36:da:46:f5:40:b4:f8:3f:54:
                    bd:64:b5:7e:2e:a3:ee:96:bd:f2:d4:20:e1:12:2a:
                    19:8c:ce:4e:85:15:cd:46:01:cd:b3:e7:bd:1d:07:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:4F:61:FF:71:66:34:F1:B5:EB:95:45:CC:99:13:F7:7A:64:9C
            X509v3 Authority Key Identifier:
                keyid:4C:AD:18:54:14:C1:6A:E5:D2:29:A8:AA:2B:FA:15:FE:FC:71:A2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0YVBTBauXSKaiqK_oV_vxxoiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5b788e-f847-4df9-9334-964cca722f73/1/TK0YVBTBauXSKaiqK_oV_vxxoiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:00:c7:43:14:c7:38:da:3b:b7:88:18:99:4d:c3:48:86:
         34:3b:1b:32:bf:a2:84:07:36:cd:98:d9:c2:23:ed:e7:f8:e6:
         a3:3e:84:e2:84:ba:04:e9:ba:8e:c5:46:1a:1b:d7:08:50:91:
         16:24:27:36:0e:2a:f7:6a:e0:dc:49:d5:8d:18:f3:29:1f:00:
         86:1a:ab:f1:96:c1:82:f7:12:04:96:3f:95:5f:6b:93:17:d5:
         bc:e0:91:df:69:6f:13:82:91:a4:8e:13:17:5f:ff:64:69:60:
         58:e4:49:cc:42:dd:48:00:86:f4:b7:ad:33:c6:37:39:46:7a:
         94:0d:1f:3d:6e:05:cb:17:d0:ba:b9:3a:5b:1b:88:31:95:1f:
         76:cf:29:eb:26:29:aa:2b:f8:05:63:14:be:b6:e2:4a:e9:6a:
         18:a6:b4:14:32:c5:e5:01:2d:fe:a5:34:da:08:28:29:7b:56:
         db:1a:b0:6f:45:08:7d:31:ce:30:dd:71:91:57:f4:bc:36:7c:
         5d:9d:fc:aa:11:a4:bf:2d:52:c8:05:de:4c:a5:9b:44:52:28:
         94:a6:b4:25:20:5f:3d:92:24:15:b6:87:e4:9f:54:9c:2e:73:
         fa:22:d2:e9:4e:74:44:b0:6d:93:69:78:94:4d:d2:13:c2:95:
         a2:bc:68:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----