Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File:                     tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier:          PVCER5wVV/gImHArI4Hg0N6xQ+3T2YgZZGfaCREDM9U=
Subject key identifier:   73:1C:9F:09:32:F3:29:8F:0B:65:57:53:44:38:7B:AC:52:60:F7:DB
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer:       /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial:       01962DF3C015CEFC89C8243039337407CEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: 82JR8KYuZG2EKgl49WavKybV5U/nRYhTlBJlIOTnlxU=)
                          2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c0:15:ce:fc:89:c8:24:30:39:33:74:07:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=731c9f0932f3298f0b65575344387bac5260f7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:75:e0:c9:b9:f7:05:cc:26:cf:10:96:e4:41:
                    91:39:bd:60:0b:15:a8:c0:a2:06:7b:b6:ef:0d:3d:
                    12:f7:31:bf:9c:37:4c:61:63:5b:79:67:53:2b:14:
                    fd:3d:cb:04:b0:cd:38:71:c9:a0:89:a6:a4:a3:55:
                    a7:ef:0b:66:97:57:33:7c:af:8f:d0:10:62:69:26:
                    79:91:c2:5e:ca:dc:2b:0d:f2:62:ef:60:84:29:00:
                    a4:5d:79:bb:67:6a:cc:78:66:7e:a3:cc:c5:91:4b:
                    ed:42:26:4a:05:28:98:3a:56:93:02:eb:5b:86:28:
                    a8:2f:05:1b:d1:10:b8:35:fa:49:30:f9:7b:6c:23:
                    fa:10:7d:ba:cf:0f:09:f4:94:68:9b:34:ef:00:b8:
                    8b:34:e1:c7:14:27:26:af:c8:40:fc:fd:ea:10:f1:
                    aa:d1:5b:4b:d9:a7:de:c5:53:0c:0a:5b:6e:7d:01:
                    19:93:be:b2:fa:5e:35:13:11:e5:73:57:ac:40:36:
                    0c:5b:ad:8f:de:f6:cc:b4:9b:09:df:b0:72:09:53:
                    b5:13:ce:cc:3c:6b:9d:b2:56:2c:16:92:91:af:12:
                    c6:47:aa:51:b5:2e:06:5b:e5:c1:74:dc:f6:b2:f5:
                    7e:27:a6:83:5c:ab:7e:27:6c:fb:ca:49:83:8a:26:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1C:9F:09:32:F3:29:8F:0B:65:57:53:44:38:7B:AC:52:60:F7:DB
            X509v3 Authority Key Identifier:
                keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3e:b3:3d:22:69:20:ee:23:57:f7:a8:71:8b:09:16:23:88:
         d1:73:25:17:82:ea:8f:77:e0:96:b4:fd:4d:5e:c3:49:95:38:
         0e:74:77:47:b8:24:60:8a:fb:a2:ed:01:e5:40:bb:8d:47:d9:
         37:64:88:57:0d:64:1d:fb:fc:29:ce:2e:4c:26:92:1b:1d:ef:
         4f:27:30:a9:14:c4:17:b7:ef:1e:e3:4c:14:07:89:cb:3d:d1:
         2e:41:6a:e5:76:7a:1c:8d:1f:88:71:a0:fb:74:d9:07:26:61:
         b8:11:a6:1b:e6:0e:d1:57:34:5b:af:7a:6a:42:3d:21:df:3c:
         dd:e6:9f:94:bf:65:d3:22:ee:67:e4:a4:28:d2:12:24:47:8f:
         78:1d:74:f8:63:f2:40:67:fa:c0:b6:4c:d0:75:ac:d0:07:82:
         e8:35:c3:f5:c2:60:90:77:d9:83:a5:da:48:83:14:c1:32:d7:
         18:c5:8b:c0:7d:42:82:31:7d:df:9c:54:14:33:42:50:4a:92:
         50:62:99:8d:ff:1b:a2:fe:c2:9d:2f:4f:ba:1f:69:33:70:2c:
         bf:57:b0:37:3f:89:ca:c3:0b:31:30:67:c5:98:dd:a5:97:1c:
         9a:29:7b:7d:dd:d7:5f:3a:b1:c8:a6:1f:9e:c4:cc:24:68:f9:
         f4:ac:38:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----