Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File:                     Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier:          MgzSZ0HiuZR7BWYWFLMNCKXebqMIxfx98x4EFbfQ/r0=
Subject key identifier:   28:31:78:18:C1:A0:F1:F1:7D:20:15:72:B6:FE:F5:62:52:36:4C:70
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer:       /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial:       01962ECF779990B1C38F92FD2C699A79D184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: I5vVXHqFzi8WPOxdm56ejVXotzrvADQxt2/u0SqNBis=)
                          2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:77:99:90:b1:c3:8f:92:fd:2c:69:9a:79:d1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=28317818c1a0f1f17d201572b6fef56252364c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:c9:6b:27:b4:27:15:7b:b0:79:c1:3a:38:
                    98:94:59:6a:40:54:0f:f1:ce:49:d4:35:e9:ad:60:
                    86:e6:55:29:a0:f2:63:05:92:95:05:e3:29:bc:a8:
                    13:ef:fd:9b:c2:70:b5:ee:03:ea:60:7d:cc:51:53:
                    9c:f6:50:83:c0:48:ae:d0:19:28:cd:e6:90:34:ba:
                    d6:c5:ed:af:fb:01:22:bb:7b:a8:ed:64:14:50:a2:
                    65:79:97:b5:82:7c:f4:c6:00:82:a5:80:a2:f8:a3:
                    54:0c:f8:40:46:33:ad:a8:a8:38:d8:93:36:5f:1e:
                    2d:eb:02:0a:71:30:93:83:50:f6:7c:72:3c:e6:32:
                    29:cc:09:49:b0:4f:c4:02:d0:d4:4c:40:ef:59:0f:
                    70:c3:65:2f:46:18:b9:3a:0e:bc:de:40:15:93:4c:
                    a7:1a:d0:8e:79:d6:9f:62:ba:4f:40:90:5b:3a:d5:
                    d4:a9:2e:97:7c:77:ac:44:a9:e0:e8:ce:a4:3c:03:
                    19:d1:fa:2a:6d:56:f7:38:f3:ca:36:94:13:87:cf:
                    04:7e:f3:e0:10:ab:4b:a8:e9:3f:b0:d3:0a:00:09:
                    c2:7f:1d:53:5f:82:ae:35:66:6e:4e:37:0e:17:75:
                    9b:95:55:55:9e:40:84:28:cf:f1:15:08:87:71:88:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:31:78:18:C1:A0:F1:F1:7D:20:15:72:B6:FE:F5:62:52:36:4C:70
            X509v3 Authority Key Identifier:
                keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:2a:c1:7a:96:21:e2:64:0e:54:5b:60:1b:8f:fd:e0:94:
         f9:95:93:e0:12:9a:df:a2:10:27:81:20:ef:d1:10:6f:d6:6c:
         4f:d1:a0:44:25:1d:31:c2:0e:ff:04:15:e5:3b:2d:09:38:bf:
         f9:08:cb:b9:57:c8:0d:04:a0:c2:87:19:ff:39:e4:87:fc:3d:
         19:90:cd:0d:fc:aa:83:71:74:67:1c:bf:2d:de:7b:76:3b:23:
         f9:f1:63:ed:ae:d4:86:6b:7a:e0:d8:e9:28:9b:29:43:a3:01:
         05:02:a8:a8:54:90:db:72:f6:95:9d:58:1e:5f:19:48:3c:d7:
         35:8d:79:43:7f:08:83:3f:c5:6c:1b:d1:da:f2:21:be:d9:f4:
         93:36:37:08:2a:d8:77:b4:9b:f2:d8:21:e9:ac:1a:f4:71:c6:
         2a:54:b7:30:d3:12:a5:ce:85:6b:9e:20:4e:87:c5:47:5c:ed:
         16:5c:1d:98:46:8f:0f:ca:ee:ee:9d:e1:1b:74:19:85:15:93:
         ed:a5:fa:4d:2e:f0:80:80:ce:75:57:1a:06:d5:a6:47:81:2d:
         f1:1b:55:ef:5e:54:89:ea:12:6e:e1:08:26:ad:6d:90:04:84:
         9c:16:7f:6d:43:b2:0b:f4:b6:eb:53:30:a0:7f:07:f7:f8:35:
         fd:6d:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----