Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File:                     TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier:          GqfDiWSCWQzFbiFUgMW+jHm6zsppn1uqkSUcK24/eXc=
Subject key identifier:   8F:60:1C:E3:88:A8:E0:AA:59:E3:3A:69:DA:35:B8:28:E1:9F:BD:33
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer:       /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial:       01962F0729E23A3D72D0EF54CCB162F4F0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
                          2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: o6x9tPy9udPIcmmVKUbiGAaNMxSmX9f5lwAWjC27jYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:29:e2:3a:3d:72:d0:ef:54:cc:b1:62:f4:f0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=8f601ce388a8e0aa59e33a69da35b828e19fbd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:a3:00:2f:99:78:b5:6b:ca:8e:99:41:6f:
                    b8:37:66:60:ae:24:73:6a:30:46:d2:e5:a5:d6:9e:
                    de:41:f7:35:92:a3:ba:25:be:5c:d0:d7:d5:6f:8a:
                    f7:0d:12:5e:6a:bd:12:73:35:be:1b:25:cf:1c:d1:
                    b3:23:50:ed:4c:6c:f1:6c:c2:51:c1:f9:dd:49:bb:
                    2b:89:64:1b:df:a3:c4:4f:ec:74:93:46:05:b6:95:
                    61:ff:75:e3:e3:bf:65:80:1e:ca:1a:42:fc:73:f9:
                    ca:e5:6b:98:d7:a2:ac:ce:9b:a5:24:30:9b:77:55:
                    ec:89:0a:b9:5d:13:41:e2:97:28:9f:9d:b2:e2:b9:
                    56:36:c7:3f:af:61:75:6b:4f:57:94:2e:0e:51:c6:
                    b1:ea:85:bb:24:c4:db:55:f8:05:d1:09:15:2c:d1:
                    ac:d7:93:44:33:f5:7c:26:ac:9f:75:44:7c:09:23:
                    1e:4c:1e:20:13:da:48:4b:4b:10:9c:4c:c9:8c:29:
                    ae:80:6f:10:9a:21:bc:2d:64:91:0b:ea:8d:6c:7d:
                    61:79:1d:b8:2f:f3:d2:cd:f5:a8:94:63:c2:b0:e4:
                    a7:6f:70:40:03:5c:d7:ab:4f:12:ab:19:fc:65:d5:
                    71:4f:71:09:28:c1:06:b6:72:2a:1b:94:05:4b:04:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:60:1C:E3:88:A8:E0:AA:59:E3:3A:69:DA:35:B8:28:E1:9F:BD:33
            X509v3 Authority Key Identifier:
                keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:0b:97:e7:11:aa:03:6d:2b:ee:8c:45:9a:08:c6:b5:d3:
         67:5d:ec:c0:db:42:97:c2:86:e6:36:df:ef:3d:90:bb:4c:d2:
         7d:f8:b2:df:1a:f9:7c:2e:c7:01:98:21:cb:66:d0:18:8e:bf:
         40:fd:30:0f:d5:90:1a:d9:98:fc:ae:63:55:7f:3d:42:79:64:
         9c:e2:97:16:38:28:e9:2d:db:4e:28:d0:06:4f:39:f8:d5:7c:
         f3:1a:a4:47:96:b6:93:56:84:11:7d:2a:2d:47:ea:89:63:d1:
         44:a1:a7:48:bd:ed:52:85:d2:e9:48:39:75:be:ed:10:42:bc:
         f5:f1:c4:7c:ac:cb:ba:11:31:2b:8a:4f:59:ef:05:bb:d9:12:
         a5:64:56:9e:56:7b:44:17:eb:16:43:bc:b6:d0:17:e3:53:b8:
         aa:12:e4:5d:be:58:c6:d4:50:82:db:35:6f:11:89:f0:e4:6a:
         7c:9a:4a:33:c5:0a:fc:87:15:0f:ce:b6:3f:b6:82:de:ab:e8:
         66:ee:cc:a0:f6:de:b6:58:49:a8:fb:54:1f:d8:4d:1a:9a:7a:
         95:94:08:d6:12:3b:b5:8d:c6:56:ce:71:d6:b8:6c:18:b9:23:
         0b:ad:80:fc:1b:2b:1e:73:90:b2:03:4f:2c:50:f2:52:35:82:
         90:b9:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----