Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File:                     TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier:          qYSfUdUYO/E1DE59PG1AE6n7M5G7Q0pgEs5puo8jmhY=
Subject key identifier:   B5:62:75:6B:9E:FC:D1:C0:9A:67:F2:C7:AD:AD:D7:0B:73:00:55:76
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer:       /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial:       01962F06BD5B83E193D9F321BAF43CC38FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number:          1473
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 8G7CKA2HbZHRoNb9HaqBloS90vU.roa (hash: lDvm+Nsn5gFxpzefNnpEbQ5VLuNGtuV4rwnVopzkwq0=)
                          2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: VclXkb+NNv9B/p5LjTcai+lk+nUjx1+hr8xdjf97/S4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bd:5b:83:e1:93:d9:f3:21:ba:f4:3c:c3:8f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=b562756b9efcd1c09a67f2c7adadd70b73005576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:39:46:4e:1c:a4:cd:cf:75:5a:02:90:3c:
                    88:65:92:69:9c:4e:86:24:59:7e:38:0f:95:f1:c6:
                    9e:c6:76:3c:6d:68:57:9c:f0:7c:a6:12:5f:c8:41:
                    75:7f:4b:c1:10:c5:40:0f:cb:0a:f9:a5:42:05:65:
                    12:3b:3e:9a:8f:dd:12:db:ac:78:20:2f:8f:d2:50:
                    c5:ab:be:e3:2d:3f:a3:7c:36:9e:57:d5:29:1e:54:
                    e5:1a:8c:40:af:b9:e3:3e:69:a9:c6:b1:e0:f3:41:
                    c6:47:3a:cf:28:8a:a0:a3:a8:7e:d3:8b:bc:5c:2d:
                    35:d4:0d:22:e8:e6:dc:5d:ae:fb:36:fa:49:49:f8:
                    47:af:09:92:82:7c:10:64:ba:2a:43:c5:b6:f6:20:
                    6a:05:7d:b0:81:e1:80:09:72:47:be:ea:0e:76:ff:
                    27:8e:68:8f:1b:db:8b:f8:4c:d1:58:ff:ca:a9:8e:
                    a1:8e:53:99:4a:bf:a6:51:ab:0a:3b:01:69:0a:2a:
                    4c:61:aa:6f:cb:8a:b2:ac:d1:f1:5c:9e:cd:f0:f1:
                    26:6d:51:4a:a2:b7:62:d9:6d:92:85:da:8c:b9:47:
                    5b:b5:db:46:fc:63:ee:23:6f:3a:75:6b:a2:cb:84:
                    1c:f3:71:db:b1:55:8a:8d:35:fc:92:be:13:e3:29:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:75:6B:9E:FC:D1:C0:9A:67:F2:C7:AD:AD:D7:0B:73:00:55:76
            X509v3 Authority Key Identifier:
                keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:33:ca:02:31:04:3b:a2:ef:3f:1e:54:14:40:e3:c0:ab:
         af:2e:4a:7d:0c:eb:7c:3c:de:35:aa:52:73:f5:16:2f:04:eb:
         94:01:a0:b2:1d:c5:86:5a:13:94:ea:56:bb:ca:2c:f8:22:d1:
         54:ce:7b:6a:ed:27:4a:35:e7:13:00:25:ba:5e:22:db:59:60:
         49:93:74:48:01:15:70:59:4f:e1:f7:83:99:9d:83:67:a6:ce:
         7a:08:95:c1:7d:c7:a0:cb:0d:2f:34:69:fe:29:09:65:a6:03:
         f7:66:1d:b2:5a:bb:1b:5b:cb:7d:37:38:56:b3:40:10:11:e9:
         7d:8e:72:a5:18:0b:24:3c:c7:33:35:be:05:80:f3:40:3a:bc:
         f7:c0:44:78:f4:b7:4e:82:7f:7c:e8:93:42:e7:9f:3b:9f:19:
         23:05:5c:1f:f4:06:8e:cd:bb:8d:1a:ca:0a:14:4d:4e:ed:77:
         e3:7c:79:f2:f2:cd:c4:5d:d9:67:ce:21:36:58:fa:07:06:27:
         80:cd:3c:dd:8d:cd:00:c8:6f:a7:cd:77:cd:34:db:e1:08:1d:
         8f:13:92:f2:c3:f5:6a:f2:c5:ac:f1:41:a2:3a:aa:6f:2f:9f:
         3a:99:33:31:cc:92:a0:fa:f9:10:36:0d:70:7b:18:a0:97:4a:
         8c:92:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----