Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/38449c-aad8-405a-b7f7-6d9f384d2bc3/1/TvMzZvDPXk-oBO730eKSlO6lFIw.mft
File:                     TvMzZvDPXk-oBO730eKSlO6lFIw.mft (raw, json)
Hash identifier:          I7Cj7XiC9W9OHsJS1TJdn2yaqk41RM71TijSwnDo6dE=
Subject key identifier:   3D:5E:38:2E:E8:73:8D:0D:4F:C9:76:7F:B9:F3:6F:CE:98:B2:4C:50
Authority key identifier: 4E:F3:33:66:F0:CF:5E:4F:A8:04:EE:F7:D1:E2:92:94:EE:A5:14:8C
Certificate issuer:       /CN=4ef33366f0cf5e4fa804eef7d1e29294eea5148c
Certificate serial:       01962E2ACA2F3477B06CF9BD426B7BB63302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvMzZvDPXk-oBO730eKSlO6lFIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/38449c-aad8-405a-b7f7-6d9f384d2bc3/1/TvMzZvDPXk-oBO730eKSlO6lFIw.mft
Manifest number:          0183
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: TvMzZvDPXk-oBO730eKSlO6lFIw.crl (hash: uXAokGM788z2NKVh2M48MuH6rZGtTujt92MN4QVBqy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:2f:34:77:b0:6c:f9:bd:42:6b:7b:b6:33:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef33366f0cf5e4fa804eef7d1e29294eea5148c
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=3d5e382ee8738d0d4fc9767fb9f36fce98b24c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:86:b5:84:7b:92:ee:bc:b2:e7:6f:52:31:
                    a4:15:be:a0:47:3e:a5:f4:03:e3:38:95:46:2a:90:
                    a8:37:5d:a7:55:8b:8f:bd:1f:13:a8:09:cc:97:13:
                    b9:63:9d:e3:8d:70:47:0a:50:d7:69:8b:ef:97:ce:
                    95:a7:93:6e:9b:99:77:5e:f4:a1:9e:f1:ca:28:39:
                    04:9f:61:cd:db:43:d8:1b:bb:73:5f:42:5f:87:cd:
                    40:27:7f:6d:cc:b9:9e:0e:d4:46:d3:be:a3:27:8d:
                    bc:e0:60:62:94:c1:a4:8e:e2:9f:df:61:8f:5f:45:
                    15:af:b6:ea:78:cb:c7:91:c2:cc:f8:d3:d3:e2:58:
                    51:cf:e8:a0:6b:f4:85:f8:27:61:85:87:1b:6e:b6:
                    ba:f2:35:4a:40:53:3f:54:80:4e:17:8e:3c:4d:f9:
                    d5:f1:f3:07:24:62:88:b4:cd:5e:8b:1f:8f:12:93:
                    ff:1b:7a:e4:76:60:bf:03:ca:b7:e1:28:1b:1e:59:
                    ff:6e:73:e8:13:37:8c:99:d6:db:14:fa:86:a1:e5:
                    14:14:dd:7f:0c:21:0d:4f:96:24:86:69:0f:f2:32:
                    9b:d6:b4:56:3d:07:1c:b4:9d:9c:b9:e9:5e:b3:48:
                    27:5e:2c:2f:c6:67:c4:84:dc:7d:54:fe:6f:11:81:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:38:2E:E8:73:8D:0D:4F:C9:76:7F:B9:F3:6F:CE:98:B2:4C:50
            X509v3 Authority Key Identifier:
                keyid:4E:F3:33:66:F0:CF:5E:4F:A8:04:EE:F7:D1:E2:92:94:EE:A5:14:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvMzZvDPXk-oBO730eKSlO6lFIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38449c-aad8-405a-b7f7-6d9f384d2bc3/1/TvMzZvDPXk-oBO730eKSlO6lFIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38449c-aad8-405a-b7f7-6d9f384d2bc3/1/TvMzZvDPXk-oBO730eKSlO6lFIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:2c:40:94:a7:7b:ca:a9:58:71:a3:c6:69:71:a1:06:71:
         bc:24:45:54:5b:4e:c9:0b:ee:5c:90:35:f4:f2:3b:84:25:9d:
         80:74:90:89:31:57:8a:f6:2e:13:82:16:da:66:58:5b:e4:87:
         5e:22:75:95:76:e0:6e:bb:73:fe:40:a2:30:b3:18:5a:c1:df:
         fa:aa:b5:81:21:b3:ff:6f:b4:ba:63:e7:6e:6e:71:3b:54:b2:
         d6:7b:50:38:17:c8:6c:6c:7b:9b:6d:48:65:0d:bf:4a:e5:fb:
         7a:6b:fe:56:b4:76:c5:40:d0:2a:83:c3:e0:d8:2a:13:9d:22:
         4e:30:8d:ea:23:cf:44:2c:35:6f:d5:53:0d:cb:02:34:41:87:
         66:95:83:bc:1b:bd:bf:a0:b9:47:b7:d1:f9:25:49:fd:b5:c4:
         4c:d5:8e:43:98:34:39:cf:31:db:9e:ad:35:37:59:1d:3b:f2:
         3b:38:ac:a4:01:be:3a:b3:f1:82:cb:3f:ab:d7:21:61:61:f2:
         06:a2:cf:aa:88:0e:a1:88:52:c4:9a:9c:c4:01:c5:b0:8c:9d:
         0d:17:89:67:66:0d:21:02:92:fb:6b:03:0c:be:db:03:af:51:
         76:f7:05:79:86:4b:83:36:f1:b7:10:72:ef:2b:d8:1f:08:79:
         91:d0:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----