Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File:                     TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier:          eBuTmbS6HyOny1C5FOeV70WbdYUNuaR8rvJf2YwfRcE=
Subject key identifier:   82:17:E9:59:F3:89:A9:2E:7B:70:84:C0:0A:FD:6C:F2:68:E5:44:60
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer:       /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial:       01962F06EDBF7BD2420BDACD1ABE8BF60695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number:          0E75
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
                          2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: 3AtiVX2qMT4JbmDLsZ1aZfjGDmKeY0ysBiRXolxXAu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ed:bf:7b:d2:42:0b:da:cd:1a:be:8b:f6:06:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=8217e959f389a92e7b7084c00afd6cf268e54460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:e4:f1:d7:c0:5f:9e:c7:b5:5d:0a:9c:47:
                    fe:e2:e6:a3:70:eb:81:3a:8c:82:9b:f5:f5:b6:59:
                    5f:4f:3c:48:59:9f:b4:2b:b6:be:36:14:fc:a2:1c:
                    3f:8e:fd:2c:ad:db:7a:41:f5:f9:b5:4a:1e:c1:57:
                    64:9d:a8:09:ea:3d:83:ee:19:6c:49:41:14:79:c8:
                    7d:bc:7b:3f:9c:26:ce:71:35:9c:2c:dc:64:5b:90:
                    8e:47:e0:8f:bf:8a:5a:a2:13:47:bb:1a:4d:05:73:
                    d3:d9:93:46:7b:e5:d6:5f:38:88:bd:cd:9f:a2:d4:
                    7c:82:a8:c2:cb:6a:61:62:2f:24:68:da:a2:f8:ac:
                    26:8c:bf:fd:fc:66:5b:cb:ae:ba:65:90:80:a8:e2:
                    7b:df:d4:0d:c4:bd:cc:07:0d:54:b1:ec:d5:b0:b2:
                    b4:23:77:ff:b6:72:8b:99:54:dc:27:b0:ae:05:b4:
                    e5:0f:8c:9c:f0:0f:21:bb:0c:38:27:c9:cf:d1:d5:
                    46:9d:dc:3e:c3:6a:91:e1:e4:7f:b4:4f:21:16:c7:
                    c1:a2:3c:97:1d:42:03:1e:df:5b:c0:98:ee:79:b6:
                    dd:2f:96:49:cf:53:02:82:ac:a4:b7:e6:ff:de:d4:
                    d6:73:b6:dc:9c:62:0b:e9:14:a4:93:99:91:0d:b6:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:17:E9:59:F3:89:A9:2E:7B:70:84:C0:0A:FD:6C:F2:68:E5:44:60
            X509v3 Authority Key Identifier:
                keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:90:f5:f3:95:03:a8:0b:35:ff:ba:94:81:0c:61:39:75:
         cb:9b:8f:6c:b6:4d:90:c5:cf:23:ee:6f:a0:0b:e8:cf:f2:83:
         2f:eb:44:66:da:c1:16:97:af:46:7a:e0:f4:f8:20:5d:e4:ee:
         1e:14:a9:f3:f9:ab:4e:75:a8:cb:fd:01:3a:07:0b:57:bc:dd:
         c7:5f:d6:3a:0e:fb:9d:bd:39:e4:1d:34:ad:6a:dd:ea:3e:72:
         4c:a5:66:85:6f:1f:23:4e:70:3b:19:8e:d6:ad:29:cb:2e:65:
         72:ce:92:69:9d:5a:aa:84:87:af:f3:c4:c4:be:9d:de:14:41:
         e9:37:85:28:39:de:18:06:21:90:86:d1:5d:a8:07:49:c1:b8:
         26:8f:e6:07:ac:ff:ed:5e:5f:2c:02:92:7c:c5:ef:0b:ab:28:
         79:74:63:f4:ad:f5:e6:ae:37:85:95:a0:4d:f7:34:31:c1:d5:
         31:07:2f:54:2c:62:f3:f1:64:47:ce:9b:3e:5d:5c:fb:5e:dc:
         8c:2d:a1:6f:e9:59:a8:b9:83:b4:51:7d:3d:07:c7:02:46:f5:
         aa:8c:6a:af:f1:da:ce:6f:90:f0:51:24:a9:37:d7:6f:a8:48:
         52:41:f0:25:5e:c6:12:bb:f8:f8:fe:81:fa:e8:0b:c5:94:73:
         a8:8b:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----