Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File:                     TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier:          tYG8YS6LPPWB3pJ9RBQOk7/TsBfOhPosbxb52hpSgHg=
Subject key identifier:   21:05:CD:A7:28:58:1E:F7:CD:10:8C:BE:CB:81:5A:11:65:53:2A:B7
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer:       /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial:       01962FAB73CDB14F18036E3B2B198E67B2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number:          1443
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: /c72JcoIoPiTVH1wUOqYv0KgryZVTUfTEtJI+W0uaOc=)
                          2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:73:cd:b1:4f:18:03:6e:3b:2b:19:8e:67:b2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=2105cda728581ef7cd108cbecb815a1165532ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:47:fa:70:4f:f0:1b:b7:65:3e:74:55:fa:
                    94:fa:39:78:aa:94:0c:34:d8:19:ac:3b:06:63:3d:
                    08:25:6d:f8:80:6c:12:98:e8:ec:54:b3:16:f4:d3:
                    fb:0a:7a:44:16:a2:28:98:1c:73:91:72:6e:87:d8:
                    d8:62:f1:94:24:b4:8f:a5:b6:bf:fd:40:c6:80:72:
                    2f:77:dd:60:26:80:17:a1:e9:66:d0:49:e8:91:e5:
                    94:e7:d5:3f:17:59:7c:70:a2:56:9a:a4:5f:3c:ed:
                    a3:f8:6e:d8:98:95:a4:1b:71:ad:77:55:3d:cc:61:
                    58:05:75:0f:76:80:10:51:c3:7d:4c:b3:b5:bd:bc:
                    52:95:96:1d:0b:cf:31:56:45:43:d7:fa:eb:f3:75:
                    11:34:9b:99:2d:1d:9f:83:fb:d0:f6:77:06:99:b7:
                    5d:e5:ff:53:4c:e1:cc:b9:8a:ff:9c:17:cf:02:d6:
                    41:15:59:23:e2:35:0c:fe:0c:9d:b6:fb:1b:b8:62:
                    7d:51:99:e3:3e:75:65:11:5d:01:f7:0e:3b:6b:12:
                    15:7a:b2:c6:27:d1:0d:60:40:3c:a0:8d:ea:84:dc:
                    dd:c9:c8:28:b6:7e:56:6a:07:9b:90:7a:50:54:79:
                    95:56:2a:4e:a6:21:27:9b:61:02:47:23:66:d9:f9:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:05:CD:A7:28:58:1E:F7:CD:10:8C:BE:CB:81:5A:11:65:53:2A:B7
            X509v3 Authority Key Identifier:
                keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e3:12:c3:db:a4:db:9c:d5:a9:38:16:01:fc:1d:8a:56:e5:
         09:43:93:5b:11:00:bb:89:b3:0f:50:99:40:50:6c:1b:15:4f:
         c0:17:25:1d:24:4f:52:79:5a:79:3f:bf:bb:e5:5c:3c:b6:c6:
         c6:ae:8b:21:57:e5:b6:30:ff:ec:44:26:ea:f7:01:5b:67:27:
         23:2b:58:8b:81:e5:fb:36:23:e5:36:0a:9f:b9:19:2a:70:e0:
         a8:64:fa:b2:55:d4:3f:7d:c8:60:78:14:27:bd:53:af:ef:38:
         86:46:36:73:f6:2e:96:6d:94:e1:20:ad:61:52:d8:a7:9b:64:
         66:15:71:67:9f:bd:57:50:f0:a4:1d:4f:ee:b7:d3:97:be:3b:
         c9:a4:57:e6:b0:f8:7d:ac:53:b2:3e:2c:ef:c9:75:12:e8:96:
         19:4d:59:fe:68:52:fb:6e:6e:b8:73:fa:54:65:91:f7:b9:67:
         1f:c2:b9:ed:2e:c5:4f:92:94:fa:e1:7c:bb:6a:a0:70:e2:e4:
         eb:1d:57:6e:73:6d:0e:a3:77:6c:82:08:ff:42:85:c3:44:0a:
         6b:4f:fa:11:96:20:77:4e:97:28:ea:7a:28:06:59:1a:13:b5:
         63:50:0d:0c:18:1f:cf:62:64:0a:4f:bb:3a:3b:23:2a:a8:78:
         2f:44:91:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----