Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File:                     TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier:          VNvFS1hW35kzOXBtuUfaGoK1v+KWel0JHsM7kJ2+04M=
Subject key identifier:   36:B1:DE:AD:51:16:DE:DC:67:E5:04:31:56:2C:5A:DF:81:84:33:63
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer:       /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial:       01962E2AF22259AC41C63637BFF33C9D6CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: /dHjB6Xkmpz7xcOn/r5bZgZLDsQWekHIABKryQYLD1A=)
                          2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:22:59:ac:41:c6:36:37:bf:f3:3c:9d:6c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=36b1dead5116dedc67e50431562c5adf81843363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:62:9a:47:5f:83:ec:0f:45:f0:4f:79:03:
                    fb:f6:ca:c7:3d:ee:30:0a:53:33:3f:91:b9:8d:e5:
                    da:59:de:14:df:83:0f:79:81:29:27:39:20:ee:e0:
                    73:be:fa:3f:53:3d:33:b5:29:dd:1a:15:73:30:ed:
                    11:30:8d:49:5d:ea:58:62:55:45:8f:42:7d:be:b0:
                    d6:ce:b5:65:88:6c:5c:b6:88:97:02:1f:6d:23:cd:
                    55:55:f0:b1:c5:eb:dc:12:c3:ae:72:f9:bb:70:9d:
                    db:12:79:02:88:65:d0:28:e6:a5:d1:a8:57:57:80:
                    19:c8:8d:17:49:58:13:b9:4d:20:0a:69:7d:e1:16:
                    5b:41:f5:01:2f:00:22:fd:28:db:aa:78:ef:70:dd:
                    af:38:83:f4:2f:aa:4b:9b:96:4f:81:75:c0:82:d2:
                    c2:50:ab:62:ac:7a:e0:ee:69:0e:b3:32:83:d9:e3:
                    32:21:d6:cd:f2:6b:77:ee:fd:38:25:b2:4b:eb:f3:
                    65:3c:7b:a9:49:e8:01:3c:4f:da:65:c4:73:53:8a:
                    62:3c:09:7d:0b:82:39:47:0c:86:3e:c8:a6:37:54:
                    3b:fc:91:83:2c:f8:ea:93:39:40:fd:01:d3:29:a2:
                    2c:25:56:87:e9:39:a6:91:78:54:74:41:3b:97:17:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B1:DE:AD:51:16:DE:DC:67:E5:04:31:56:2C:5A:DF:81:84:33:63
            X509v3 Authority Key Identifier:
                keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:ec:f9:b8:cc:92:82:48:64:c8:0e:7c:27:9b:a3:26:1d:
         e5:2b:28:c8:3c:ec:58:35:98:af:52:d1:4e:e5:02:dc:bd:d4:
         34:84:fc:3e:35:5e:34:21:44:08:cb:3e:cb:0b:a7:2b:ff:26:
         5c:a3:40:e6:9b:4b:2f:d5:24:23:aa:cc:77:41:6d:57:f6:80:
         ee:d5:1f:b0:61:e3:e9:34:5d:1d:24:f1:e5:27:05:1a:21:ec:
         6c:bd:ea:a8:a8:27:26:a4:1f:57:ca:1c:89:c3:32:2b:2c:cb:
         be:94:97:78:e3:f6:ef:b3:f2:cd:4b:52:c3:b7:ab:b4:ad:c7:
         ee:5f:8b:19:c5:ca:74:ba:80:07:be:cf:c8:5b:ba:03:cd:0c:
         f1:bc:ba:06:30:d1:de:d6:f4:75:d7:c5:5a:50:61:d0:ea:bf:
         d7:c7:51:12:5b:e0:e7:6f:e7:bc:fe:78:72:52:45:4c:1e:3a:
         23:e5:b0:3b:45:85:bc:f3:09:f6:de:be:df:94:62:ed:9e:71:
         df:be:c6:a2:bf:9d:d1:c0:4e:63:5e:ef:5c:66:c6:b0:e8:a6:
         d7:5c:32:93:b0:86:e8:82:01:39:db:08:9c:d7:d8:a5:9f:66:
         85:2a:2d:1a:e9:cf:41:6a:6a:67:31:cd:39:51:17:73:b8:e1:
         d2:03:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----